This task is for me to Enumerate all the external dependencies

Here's TOFU 1/3 through tor in tails <div class="snippet-clipboard-content notrans

Here's TOFU 2/3 through a vpn <div class="snippet-clipboard-content notranslate po

Here's TOFU 3/3 through my ISP <div class="snippet-clipboard-content notranslate p

I <a href="https://github.com/buskill/buskill-app/compare/3053de5e83bbcfc1ced7af321e0c

I finished <a href="https://github.com/buskill/buskill-app/compare/3053de5e83bbcfc1ced

I finished <a href="https://github.com/buskill/buskill-app/compare/99f402d06b726203e70

Here's TOFU 1/3 in tails for the second round of dependencies <div class="snippet-

Add checksum checks to all downloaded depends in build scripts,about buskill/buskill-app

Comments (13)

maltfield commented on June 14, 2024

Addressing step 1 above, here's the list of all the dependencies that we download from the Internet at build-time. Note I'm excluding items downloaded from apt, since it already provides secure cryptographic authenticatoion & integrity checks that are lacking from pip, brew, and curl/wget.

python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage (Linux)
appimagetool (Linux)
1. squashfs4.4.tar.gz (Linux)
Kivy (Linux, Windows, MacOS)
1. Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl (Linux)
2. Kivy-1.11.1-cp37-cp37m-win_amd64.whl (Windows)
3. Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl (MacOS)
4. certifi
5. chardet
6. docutils
7. idna
8. Kivy-Garden
9. Pygments
10. requests
11. urllib3
libusb1 (Linux, MacOS)
1.libusb-1.0.23.tar.bz2 -> libusb-1.0.dylib (MacOS)
python-3.7.8-amd64.exe (Windows)
1. pypiwin32
  1. pywin32
2. kivy_deps.sdl2
3. kivy_deps.glew
4. kivy_deps.angle
PyInstaller (Windows, MacOS)
1. altgraph (Windows, MacOS)
2. macholib (MacOS)
3. future (Windows)
4. pefile (Windows)
5. pywin32-ctypes (Windows)
wget (MacOS)
python (MacOS)
sdl2 (MacOS)
sdl2_image (MacOS)
sdl2_ttf (MacOS)
sdl2_mixer (MacOS)

Here's the commands to download the above files and output their sha256 checksums:

sudo apt-get update
sudo apt-get -y install python3-pip python3-setuptools

CURL="/usr/bin/curl"
WGET="/usr/bin/wget --retry-on-host-error --retry-connrefused"
PYTHON="/usr/bin/python3"

# in tails, we must torify
if [[ "`whoami`" == "amnesia" ]]; then
	CURL="/usr/bin/torify ${CURL}"
	WGET="/usr/bin/torify ${WGET}"
	PYTHON="/usr/bin/torify ${PYTHON}"
fi

tmpDir=`mktemp -d`
pushd "${tmpDir}"

# first get some info about our internet connection
${CURL} -s https://ifconfig.co/country | head -n1
${CURL} -s https://check.torproject.org | grep Congratulations | head -n1

# and today's date
date -u +"%Y-%m-%d"

# pip (all platforms)
${PYTHON} -m pip download --no-cache-dir kivy==1.11.1 libusb1==1.8 pyinstaller==3.6 altgraph==0.17 macholib==1.14 future==0.18.2 pefile==2019.4.18 pywin32-ctypes==0.2.0

# pip (platform-specific binaries/wheels)
${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-win_amd64.whl#'`
${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl#'`
${WGET} `${CURL} -s https://pypi.org/simple/pypiwin32/ | grep -oE 'https://.*pypiwin32-223-py3-none-any.whl#'`
${WGET} `${CURL} -s https://pypi.org/simple/pywin32/ | grep -oE 'https://.*pywin32-228-cp37-cp37m-win_amd64.whl#'`
${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-sdl2/ | grep -oE 'https://.*kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl#'`
${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-glew/ | grep -oE 'https://.*kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl#'`
${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-angle/ | grep -oE 'https://.*kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl#'`

# misc linux
${WGET} https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
${WGET} https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
${WGET} --output-document=squashfs4.4.tar.gz https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download

# misc windows
${WGET} https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe

# misc macos
${WGET} https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
${WGET} https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
${WGET} https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
${WGET} https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
${WGET} https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
${WGET} https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
${WGET} https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz

# get checksums
sha256sum *

from buskill-app.

maltfield commented on June 14, 2024

Here's TOFU 1/3 through tor in tails

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Today (2020-07-06) I downloaded all of the buskill-app dependencies for all three platforms and took their checksums to be used in pinning them to secure the build process.

This first check was done in tails over tor. See the bottom of the log below for the sha256sum output.

amnesia@amnesia:~$ CURL="/usr/bin/curl"
amnesia@amnesia:~$ WGET="/usr/bin/wget"
amnesia@amnesia:~$ PYTHON="/usr/bin/python3"
amnesia@amnesia:~$ 
amnesia@amnesia:~$ # in tails, we must torify
amnesia@amnesia:~$ if [[ `whoami` -eq "amnesia" ]]; then
> CURL="/usr/bin/torify ${CURL}"
> WGET="/usr/bin/torify ${WGET}"
> PYTHON="/usr/bin/torify ${PYTHON}"
> fi
amnesia@amnesia:~$ 
amnesia@amnesia:~$ tmpDir=`mktemp -d`
amnesia@amnesia:~$ pushd "${tmpDir}"
/tmp/tmp.PI1KBgyv52 ~ /tmp/tmp.buOrrYqGP6 /tmp/tmp.IFJQzdKFZ6 /tmp/tmp.4LyPOzUFiu /tmp/tmp.CJ7sNWp7HZ /tmp/tmp.ER0TaGw9y3 ~
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # first get some info about our internet connection
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${CURL} -s https://ifconfig.co/country | head -n1
<!DOCTYPE html>
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${CURL} -s https://check.torproject.org | grep Congratulations | head -n1
      Congratulations. This browser is configured to use Tor.
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # and today's date
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ date -u +"%Y-%m-%d"
2020-07-06
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # pip (all platforms)
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${PYTHON} -m pip download kivy libusb1 pyinstaller altgraph macholib future pefile pywin32-ctypes
Collecting kivy
  Using cached https://files.pythonhosted.org/packages/1b/4d/3f8a720f561dc1eabe036c0d87c6ce9d02823275391265538e606f45e37a/Kivy-1.11.1.tar.gz
  Saved ./Kivy-1.11.1.tar.gz
Collecting libusb1
  Using cached https://files.pythonhosted.org/packages/27/5c/4d1ebbcfb19071832ac9b4e4674435f4a33e34b8d5186d4aac9ff374f83c/libusb1-1.8.tar.gz
  Saved ./libusb1-1.8.tar.gz
Collecting pyinstaller
  Using cached https://files.pythonhosted.org/packages/3c/c9/c3f9bc64eb11eee6a824686deba6129884c8cbdf70e750661773b9865ee0/PyInstaller-3.6.tar.gz
  Saved ./PyInstaller-3.6.tar.gz
  Installing build dependencies ... done
Collecting altgraph
  Using cached https://files.pythonhosted.org/packages/ee/3d/bfca21174b162f6ce674953f1b7a640c1498357fa6184776029557c25399/altgraph-0.17-py2.py3-none-any.whl
  Saved ./altgraph-0.17-py2.py3-none-any.whl
Collecting macholib
  Using cached https://files.pythonhosted.org/packages/3c/e1/c12f8d6af5d745ce88f270aeb243cb2bd6d8186320e5122df87fded29e4e/macholib-1.14-py2.py3-none-any.whl
  Saved ./macholib-1.14-py2.py3-none-any.whl
Collecting future
  Using cached https://files.pythonhosted.org/packages/45/0b/38b06fd9b92dc2b68d58b75f900e97884c45bedd2ff83203d933cf5851c9/future-0.18.2.tar.gz
  Saved ./future-0.18.2.tar.gz
Collecting pefile
  Using cached https://files.pythonhosted.org/packages/36/58/acf7f35859d541985f0a6ea3c34baaefbfaee23642cf11e85fe36453ae77/pefile-2019.4.18.tar.gz
  Saved ./pefile-2019.4.18.tar.gz
Collecting pywin32-ctypes
  Using cached https://files.pythonhosted.org/packages/9e/4b/3ab2720f1fa4b4bc924ef1932b842edf10007e4547ea8157b0b9fc78599a/pywin32_ctypes-0.2.0-py2.py3-none-any.whl
  Saved ./pywin32_ctypes-0.2.0-py2.py3-none-any.whl
Collecting Kivy-Garden>=0.1.4 (from kivy)
  Using cached https://files.pythonhosted.org/packages/7d/68/decaee596ff8168a39432eb3949fc7c0be952ebb9467806823bffc165d48/kivy-garden-0.1.4.tar.gz
  Saved ./kivy-garden-0.1.4.tar.gz
Collecting docutils (from kivy)
  Using cached https://files.pythonhosted.org/packages/81/44/8a15e45ffa96e6cf82956dd8d7af9e666357e16b0d93b253903475ee947f/docutils-0.16-py2.py3-none-any.whl
  Saved ./docutils-0.16-py2.py3-none-any.whl
Collecting pygments (from kivy)
  Using cached https://files.pythonhosted.org/packages/2d/68/106af3ae51daf807e9cdcba6a90e518954eb8b70341cee52995540a53ead/Pygments-2.6.1-py3-none-any.whl
  Saved ./Pygments-2.6.1-py3-none-any.whl
Collecting setuptools (from pyinstaller)
  Using cached https://files.pythonhosted.org/packages/41/fa/60888a1d591db07bc9c17dce2bcfb9f00ac507c0a23ecb827e76feb8f816/setuptools-49.1.0-py3-none-any.whl
  Saved ./setuptools-49.1.0-py3-none-any.whl
Collecting requests (from Kivy-Garden>=0.1.4->kivy)
  Using cached https://files.pythonhosted.org/packages/45/1e/0c169c6a5381e241ba7404532c16a21d86ab872c9bed8bdcd4c423954103/requests-2.24.0-py2.py3-none-any.whl
  Saved ./requests-2.24.0-py2.py3-none-any.whl
Collecting chardet<4,>=3.0.2 (from requests->Kivy-Garden>=0.1.4->kivy)
  Using cached https://files.pythonhosted.org/packages/bc/a9/01ffebfb562e4274b6487b4bb1ddec7ca55ec7510b22e4c51f14098443b8/chardet-3.0.4-py2.py3-none-any.whl
  Saved ./chardet-3.0.4-py2.py3-none-any.whl
Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1 (from requests->Kivy-Garden>=0.1.4->kivy)
  Using cached https://files.pythonhosted.org/packages/e1/e5/df302e8017440f111c11cc41a6b432838672f5a70aa29227bf58149dc72f/urllib3-1.25.9-py2.py3-none-any.whl
  Saved ./urllib3-1.25.9-py2.py3-none-any.whl
Collecting idna<3,>=2.5 (from requests->Kivy-Garden>=0.1.4->kivy)
  Using cached https://files.pythonhosted.org/packages/a2/38/928ddce2273eaa564f6f50de919327bf3a00f091b5baba8dfa9460f3a8a8/idna-2.10-py2.py3-none-any.whl
  Saved ./idna-2.10-py2.py3-none-any.whl
Collecting certifi>=2017.4.17 (from requests->Kivy-Garden>=0.1.4->kivy)
  Using cached https://files.pythonhosted.org/packages/5e/c4/6c4fe722df5343c33226f0b4e0bb042e4dc13483228b4718baf286f86d87/certifi-2020.6.20-py2.py3-none-any.whl
  Saved ./certifi-2020.6.20-py2.py3-none-any.whl
Successfully downloaded kivy libusb1 pyinstaller altgraph macholib future pefile pywin32-ctypes Kivy-Garden docutils pygments setuptools requests chardet urllib3 idna certifi
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # pip (platform-specific binaries/wheels)
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-win_amd64.whl#'`
- --2020-07-06 20:50:35--  https://files.pythonhosted.org/packages/11/ec/e4f11fc9e0c5756efc20008ddfd26ae759006bc9ecd60bbd5307dda2fc20/Kivy-1.11.1-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4053770 (3.9M) [binary/octet-stream]
Saving to: ‘Kivy-1.11.1-cp37-cp37m-win_amd64.whl’

Kivy-1.11.1-cp37-cp37m-win_amd64. 100%[============================================================>]   3.87M   370KB/s    in 12s     

2020-07-06 20:50:48 (338 KB/s) - ‘Kivy-1.11.1-cp37-cp37m-win_amd64.whl’ saved [4053770/4053770]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl#'`
- --2020-07-06 20:50:51--  https://files.pythonhosted.org/packages/0f/51/1fdcd05217919e77016f8f241d19a87d1d15cf1c074d78a6f3c5ca44198b/Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6946562 (6.6M) [binary/octet-stream]
Saving to: ‘Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl’

Kivy-1.11.1-cp37-cp37m-macosx_10_ 100%[============================================================>]   6.62M   662KB/s    in 13s     

2020-07-06 20:51:06 (515 KB/s) - ‘Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl’ saved [6946562/6946562]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/pypiwin32/ | grep -oE 'https://.*pypiwin32-223-py3-none-any.whl#'`
- --2020-07-06 20:51:08--  https://files.pythonhosted.org/packages/d0/1b/2f292bbd742e369a100c91faa0483172cd91a1a422a6692055ac920946c5/pypiwin32-223-py3-none-any.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1674 (1.6K) [binary/octet-stream]
Saving to: ‘pypiwin32-223-py3-none-any.whl’

pypiwin32-223-py3-none-any.whl    100%[============================================================>]   1.63K  --.-KB/s    in 0s      

2020-07-06 20:51:10 (37.3 MB/s) - ‘pypiwin32-223-py3-none-any.whl’ saved [1674/1674]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/pywin32/ | grep -oE 'https://.*pywin32-228-cp37-cp37m-win_amd64.whl#'`
- --2020-07-06 20:51:12--  https://files.pythonhosted.org/packages/96/51/d46eb277182e0989a81cdc0933e97924b68b12519dfe62ae0ea5dec198dd/pywin32-228-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9100091 (8.7M) [application/octet-stream]
Saving to: ‘pywin32-228-cp37-cp37m-win_amd64.whl’

pywin32-228-cp37-cp37m-win_amd64. 100%[============================================================>]   8.68M   647KB/s    in 14s     

2020-07-06 20:51:27 (642 KB/s) - ‘pywin32-228-cp37-cp37m-win_amd64.whl’ saved [9100091/9100091]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-sdl2/ | grep -oE 'https://.*kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl#'`
- --2020-07-06 20:51:29--  https://files.pythonhosted.org/packages/8c/cf/c890b3f6ed53b2420759811edd5502ac87f6d9826f9f14d21f562b6059d1/kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2463621 (2.3M) [binary/octet-stream]
Saving to: ‘kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.sdl2-0.2.0-cp37-cp37m-w 100%[============================================================>]   2.35M   619KB/s    in 4.1s    

2020-07-06 20:51:35 (589 KB/s) - ‘kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl’ saved [2463621/2463621]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-glew/ | grep -oE 'https://.*kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl#'`
- --2020-07-06 20:51:37--  https://files.pythonhosted.org/packages/b5/1f/e4a96f43d46b1ebfa27efb8647d0233bd9d0442b1e03382011ade1a38a9f/kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 123590 (121K) [binary/octet-stream]
Saving to: ‘kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.glew-0.2.0-cp37-cp37m-w 100%[============================================================>] 120.69K   331KB/s    in 0.4s    

2020-07-06 20:51:39 (331 KB/s) - ‘kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl’ saved [123590/123590]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-angle/ | grep -oE 'https://.*kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl#'`
- --2020-07-06 20:51:42--  https://files.pythonhosted.org/packages/aa/aa/7cc02746604a09619a71c754a62f16ca2ebd305aee838d67bb28cfc3fa64/kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.113.63
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.113.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4775549 (4.6M) [binary/octet-stream]
Saving to: ‘kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.angle-0.2.0-cp37-cp37m- 100%[============================================================>]   4.55M   605KB/s    in 7.7s    

2020-07-06 20:51:51 (604 KB/s) - ‘kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl’ saved [4775549/4775549]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # misc linux
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
- --2020-07-06 20:51:51--  https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/251001753/634da600-be6c-11ea-8fe6-3ab6eba8b271?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200706%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200706T205154Z&X-Amz-Expires=300&X-Amz-Signature=83abb03d86d4d0018d63701ea0b161c0ee328201ef098cc8c6f1d63de81038e6&X-Amz-SignedHeaders=host&actor_id=0&repo_id=251001753&response-content-disposition=attachment%3B%20filename%3Dpython3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage&response-content-type=application%2Foctet-stream [following]
- --2020-07-06 20:51:54--  https://github-production-release-asset-2e65be.s3.amazonaws.com/251001753/634da600-be6c-11ea-8fe6-3ab6eba8b271?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200706%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200706T205154Z&X-Amz-Expires=300&X-Amz-Signature=83abb03d86d4d0018d63701ea0b161c0ee328201ef098cc8c6f1d63de81038e6&X-Amz-SignedHeaders=host&actor_id=0&repo_id=251001753&response-content-disposition=attachment%3B%20filename%3Dpython3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.184.51
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.184.51|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 17621032 (17M) [application/octet-stream]
Saving to: ‘python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage’

python3.7.8-cp37-cp37m-manylinux2 100%[============================================================>]  16.80M   214KB/s    in 55s     

2020-07-06 20:52:51 (315 KB/s) - ‘python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage’ saved [17621032/17621032]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
- --2020-07-06 20:52:51--  https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/9435153/b74f7000-6c54-11e9-90c2-1f11aaf02f75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200706%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200706T205253Z&X-Amz-Expires=300&X-Amz-Signature=cd35a5a4a132fe4822b5b269a8c6ad109e297ee1fe480f0a7500c9b76cddeb81&X-Amz-SignedHeaders=host&actor_id=0&repo_id=9435153&response-content-disposition=attachment%3B%20filename%3Dappimagetool-x86_64.AppImage&response-content-type=application%2Foctet-stream [following]
- --2020-07-06 20:52:53--  https://github-production-release-asset-2e65be.s3.amazonaws.com/9435153/b74f7000-6c54-11e9-90c2-1f11aaf02f75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200706%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200706T205253Z&X-Amz-Expires=300&X-Amz-Signature=cd35a5a4a132fe4822b5b269a8c6ad109e297ee1fe480f0a7500c9b76cddeb81&X-Amz-SignedHeaders=host&actor_id=0&repo_id=9435153&response-content-disposition=attachment%3B%20filename%3Dappimagetool-x86_64.AppImage&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.184.51
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.184.51|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1974248 (1.9M) [application/octet-stream]
Saving to: ‘appimagetool-x86_64.AppImage’

appimagetool-x86_64.AppImage      100%[============================================================>]   1.88M   534KB/s    in 3.6s    

2020-07-06 20:52:59 (534 KB/s) - ‘appimagetool-x86_64.AppImage’ saved [1974248/1974248]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} --output-document=squashfs4.4.tar.gz https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download
- --2020-07-06 20:52:59--  https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download
Resolving sourceforge.net (sourceforge.net)... 216.105.38.13
Connecting to sourceforge.net (sourceforge.net)|216.105.38.13|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://downloads.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz?r=&ts=1594068782&use_mirror=liquidtelecom [following]
- --2020-07-06 20:53:02--  https://downloads.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz?r=&ts=1594068782&use_mirror=liquidtelecom
Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 216.105.38.13
Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|216.105.38.13|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://liquidtelecom.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz [following]
- --2020-07-06 20:53:04--  https://liquidtelecom.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz
Resolving liquidtelecom.dl.sourceforge.net (liquidtelecom.dl.sourceforge.net)... 197.155.77.8
Connecting to liquidtelecom.dl.sourceforge.net (liquidtelecom.dl.sourceforge.net)|197.155.77.8|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 190797 (186K) [application/x-gzip]
Saving to: ‘squashfs4.4.tar.gz’

squashfs4.4.tar.gz                100%[============================================================>] 186.33K   116KB/s    in 1.6s    

2020-07-06 20:53:09 (116 KB/s) - ‘squashfs4.4.tar.gz’ saved [190797/190797]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # misc windows
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe
- --2020-07-06 20:53:09--  https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe
Resolving www.python.org (www.python.org)... 151.101.36.223
Connecting to www.python.org (www.python.org)|151.101.36.223|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 26993432 (26M) [application/octet-stream]
Saving to: ‘python-3.7.8-amd64.exe’

python-3.7.8-amd64.exe            100%[============================================================>]  25.74M   531KB/s    in 49s     

2020-07-06 20:54:00 (539 KB/s) - ‘python-3.7.8-amd64.exe’ saved [26993432/26993432]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # misc macos
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
- --2020-07-06 20:54:00--  https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/15120676/df4ea600-c99e-11e9-98f0-1fd214aa18e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200706%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200706T205402Z&X-Amz-Expires=300&X-Amz-Signature=46cc455b02d03bdd5c1206617a0474cc55eb24e7660f08a0365b33685ff57f76&X-Amz-SignedHeaders=host&actor_id=0&repo_id=15120676&response-content-disposition=attachment%3B%20filename%3Dlibusb-1.0.23.tar.bz2&response-content-type=application%2Foctet-stream [following]
- --2020-07-06 20:54:02--  https://github-production-release-asset-2e65be.s3.amazonaws.com/15120676/df4ea600-c99e-11e9-98f0-1fd214aa18e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200706%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200706T205402Z&X-Amz-Expires=300&X-Amz-Signature=46cc455b02d03bdd5c1206617a0474cc55eb24e7660f08a0365b33685ff57f76&X-Amz-SignedHeaders=host&actor_id=0&repo_id=15120676&response-content-disposition=attachment%3B%20filename%3Dlibusb-1.0.23.tar.bz2&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.184.51
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.184.51|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 602860 (589K) [application/octet-stream]
Saving to: ‘libusb-1.0.23.tar.bz2’

libusb-1.0.23.tar.bz2             100%[============================================================>] 588.73K   531KB/s    in 1.1s    

2020-07-06 20:54:05 (531 KB/s) - ‘libusb-1.0.23.tar.bz2’ saved [602860/602860]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
- --2020-07-06 20:54:05--  https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/ef/ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c?__gda__=exp=1594069569~hmac=f4558cacaa1a8b9a97b78ac04ac5275c7c709bbc0e8af7a94031bc13ce25e42b&response-content-disposition=attachment%3Bfilename%3D%22wget-1.20.3_2.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX18U-EzgfbM8yz3QpnPGInZZbdzckyPmDZ0dRDQEQZ5NtNmCElmWIaRJBqoHxFaNkxPYi0y0RRkIMAjUVWj3x8vX2NboOFH6vfbsTvCbUusl2uB0jS3J5f6XysmJbldHbimkUt4GnViq3w&response-X-Checksum-Sha1=4945368618ce4b78f1f0ae6531c7e17dfaf07ee0&response-X-Checksum-Sha2=ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c [following]
- --2020-07-06 20:54:09--  https://akamai.bintray.com/ef/ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c?__gda__=exp=1594069569~hmac=f4558cacaa1a8b9a97b78ac04ac5275c7c709bbc0e8af7a94031bc13ce25e42b&response-content-disposition=attachment%3Bfilename%3D%22wget-1.20.3_2.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX18U-EzgfbM8yz3QpnPGInZZbdzckyPmDZ0dRDQEQZ5NtNmCElmWIaRJBqoHxFaNkxPYi0y0RRkIMAjUVWj3x8vX2NboOFH6vfbsTvCbUusl2uB0jS3J5f6XysmJbldHbimkUt4GnViq3w&response-X-Checksum-Sha1=4945368618ce4b78f1f0ae6531c7e17dfaf07ee0&response-X-Checksum-Sha2=ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c
Resolving akamai.bintray.com (akamai.bintray.com)... 92.123.42.16
Connecting to akamai.bintray.com (akamai.bintray.com)|92.123.42.16|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1447728 (1.4M) [application/gzip]
Saving to: ‘wget-1.20.3_2.catalina.bottle.tar.gz’

wget-1.20.3_2.catalina.bottle.tar 100%[============================================================>]   1.38M   488KB/s    in 2.9s    

2020-07-06 20:54:13 (488 KB/s) - ‘wget-1.20.3_2.catalina.bottle.tar.gz’ saved [1447728/1447728]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
- --2020-07-06 20:54:13--  https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/f7/f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2?__gda__=exp=1594069577~hmac=61fcbf15e5801ae23d31a0eae5f47e25384fe5082b4f9a83f70d461baa4a826e&response-content-disposition=attachment%3Bfilename%3D%22python-3.7.8.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX197Qnqx0xYyq9U84cAMhR7EM56BBcS8oG35PYybHQbYKyWMA_LkRpLIQAlV2N2340dABC1Ep0feeM-_BnzIYPFdfwXDcyWnHg-O8IHxQ6kSLDsqbam35CrluRzj15HAk6KwwLpj3B7zxA&response-X-Checksum-Sha1=389922ed3f4fee99c77fcd1523958e8079e5d7e2&response-X-Checksum-Sha2=f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2 [following]
- --2020-07-06 20:54:17--  https://akamai.bintray.com/f7/f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2?__gda__=exp=1594069577~hmac=61fcbf15e5801ae23d31a0eae5f47e25384fe5082b4f9a83f70d461baa4a826e&response-content-disposition=attachment%3Bfilename%3D%22python-3.7.8.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX197Qnqx0xYyq9U84cAMhR7EM56BBcS8oG35PYybHQbYKyWMA_LkRpLIQAlV2N2340dABC1Ep0feeM-_BnzIYPFdfwXDcyWnHg-O8IHxQ6kSLDsqbam35CrluRzj15HAk6KwwLpj3B7zxA&response-X-Checksum-Sha1=389922ed3f4fee99c77fcd1523958e8079e5d7e2&response-X-Checksum-Sha2=f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2
Resolving akamai.bintray.com (akamai.bintray.com)... 92.123.42.16
Connecting to akamai.bintray.com (akamai.bintray.com)|92.123.42.16|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 15686427 (15M) [application/gzip]
Saving to: ‘python-3.7.8.catalina.bottle.tar.gz’

python-3.7.8.catalina.bottle.tar. 100%[============================================================>]  14.96M   598KB/s    in 24s     

2020-07-06 20:54:43 (636 KB/s) - ‘python-3.7.8.catalina.bottle.tar.gz’ saved [15686427/15686427]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
- --2020-07-06 20:54:43--  https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/4d/4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63?__gda__=exp=1594069605~hmac=1961d23ef2b7498fc8e56ed059e16153e2a881aded440918e0c9b08e6a603a0b&response-content-disposition=attachment%3Bfilename%3D%22sdl2-2.0.12_1.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX1_3vQXTjdDIKSgOcgZu_zBvQcerq83YxH3oiAUMqgy2WnCojpezZvy81Fot4PXXo0prd8SVV5imA6-NSRRJ1NN-KCitTtdpwAw1FLGruwaUTBin9c4hWW1Vj1u_BbQuefkvd5WWMKya5Q&response-X-Checksum-Sha1=5f49d6327da8376e1f11698a8698549c66b406be&response-X-Checksum-Sha2=4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63 [following]
- --2020-07-06 20:54:45--  https://akamai.bintray.com/4d/4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63?__gda__=exp=1594069605~hmac=1961d23ef2b7498fc8e56ed059e16153e2a881aded440918e0c9b08e6a603a0b&response-content-disposition=attachment%3Bfilename%3D%22sdl2-2.0.12_1.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX1_3vQXTjdDIKSgOcgZu_zBvQcerq83YxH3oiAUMqgy2WnCojpezZvy81Fot4PXXo0prd8SVV5imA6-NSRRJ1NN-KCitTtdpwAw1FLGruwaUTBin9c4hWW1Vj1u_BbQuefkvd5WWMKya5Q&response-X-Checksum-Sha1=5f49d6327da8376e1f11698a8698549c66b406be&response-X-Checksum-Sha2=4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63
Resolving akamai.bintray.com (akamai.bintray.com)... 92.123.42.16
Connecting to akamai.bintray.com (akamai.bintray.com)|92.123.42.16|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1340186 (1.3M) [application/gzip]
Saving to: ‘sdl2-2.0.12_1.catalina.bottle.tar.gz’

sdl2-2.0.12_1.catalina.bottle.tar 100%[============================================================>]   1.28M   589KB/s    in 2.2s    

2020-07-06 20:54:49 (589 KB/s) - ‘sdl2-2.0.12_1.catalina.bottle.tar.gz’ saved [1340186/1340186]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
- --2020-07-06 20:54:49--  https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 130381 (127K) [application/gzip]
Saving to: ‘sdl2_image-2.0.5.catalina.bottle.tar.gz’

sdl2_image-2.0.5.catalina.bottle. 100%[============================================================>] 127.33K   199KB/s    in 0.6s    

2020-07-06 20:54:53 (199 KB/s) - ‘sdl2_image-2.0.5.catalina.bottle.tar.gz’ saved [130381/130381]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
- --2020-07-06 20:54:53--  https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 24032 (23K) [application/gzip]
Saving to: ‘sdl2_ttf-2.0.15.catalina.bottle.tar.gz’

sdl2_ttf-2.0.15.catalina.bottle.t 100%[============================================================>]  23.47K   123KB/s    in 0.2s    

2020-07-06 20:54:55 (123 KB/s) - ‘sdl2_ttf-2.0.15.catalina.bottle.tar.gz’ saved [24032/24032]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz
- --2020-07-06 20:54:55--  https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 130686 (128K) [application/gzip]
Saving to: ‘sdl2_mixer-2.0.4.catalina.bottle.tar.gz’

sdl2_mixer-2.0.4.catalina.bottle. 100%[============================================================>] 127.62K   210KB/s    in 0.6s    

2020-07-06 20:54:58 (210 KB/s) - ‘sdl2_mixer-2.0.4.catalina.bottle.tar.gz’ saved [130686/130686]

amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ # get checksums
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ sha256sum *
c623e5f3408ca61d4016f23a681b9adb100802ca3e3da5e718915a9e4052cebe  altgraph-0.17-py2.py3-none-any.whl
d918b4df547b388ef253f3c9e7f6529ca81a885395c31f619d9aaf7030499a13  appimagetool-x86_64.AppImage
8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41  certifi-2020.6.20-py2.py3-none-any.whl
fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691  chardet-3.0.4-py2.py3-none-any.whl
0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af  docutils-0.16-py2.py3-none-any.whl
b1bead90b70cf6ec3f0710ae53a525360fa360d306a86583adc6bf83a4db537d  future-0.18.2.tar.gz
b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0  idna-2.10-py2.py3-none-any.whl
8819a27a09871af451760cb69486ced52e830c8a0a37480f22ef5e692f12c05b  Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
1d28b198a64c30db8d94a0488e85f3037af60d514ab0d7ad5ab45add3ab77090  Kivy-1.11.1-cp37-cp37m-win_amd64.whl
4d0e596f74271e901b551f77661dde238df4765484fce9f5d1c72e8022984e84  Kivy-1.11.1.tar.gz
5736da2eaadd9061a7921944126a8c8ad95fe8420ea96b1e4770b0b7a67af88e  kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl
738a222f16b032b5ccd4c686fc51e678d95e4c1f13c57f32233d3cb8aa2f34bf  kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl
c2e1721aac0709f21835c8dd4aec5adea2d58e5df92005585f94d13bed2a2e06  kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl
c256f42788421273a08fbb0a228f0fb0e80dd86b629fb8c0920507f645be6c72  kivy-garden-0.1.4.tar.gz
db11c06e958a82dac52cf3c65cb4dd2c3f339c8a988665110e0d24d19312ad8d  libusb-1.0.23.tar.bz2
240f65ac70ba3fab77749ec84a412e4e89624804cb80d6c9d394eef5af8878d6  libusb1-1.8.tar.gz
c500f02867515e6c60a27875b408920d18332ddf96b4035ef03beddd782d4281  macholib-1.14-py2.py3-none-any.whl
a5d6e8305c6b210849b47a6174ddf9c452b2888340b8177874b862ba6c207645  pefile-2019.4.18.tar.gz
ff7a40b4860b727ab48fad6360eb351cc1b33cbf9b15a0f689ca5353e9463324  Pygments-2.6.1-py3-none-any.whl
3730fa80d088f8bb7084d32480eb87cbb4ddb64123363763cf8f2a1378c1c4b7  PyInstaller-3.6.tar.gz
67adf399debc1d5d14dffc1ab5acacb800da569754fafdc576b2a039485aa775  pypiwin32-223-py3-none-any.whl
a43ed63251a5e0d2cf1bbe9f6a75389675d091aaeeaae5d1be27ffb2e329e373  python-3.7.8-amd64.exe
f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2  python-3.7.8.catalina.bottle.tar.gz
aafa857bdd6e01211e1dc11c00b2c207481606d869ae3ba73432db24a35add9f  python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
00eaf43dbd05ba6a9b0080c77e161e0b7a601f9a3f660727a952e40140537de7  pywin32-228-cp37-cp37m-win_amd64.whl
9dc2d991b3479cc2df15930958b674a48a227d5361d413827a4cfd0b5876fc98  pywin32_ctypes-0.2.0-py2.py3-none-any.whl
fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898  requests-2.24.0-py2.py3-none-any.whl
4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63  sdl2-2.0.12_1.catalina.bottle.tar.gz
691d5407fef2bc374ac3b7c2fafbe46a6bc0f9ed609f98812b24fec33ab9bd27  sdl2_image-2.0.5.catalina.bottle.tar.gz
419d988dc795842301df16d2e57f7759417708b0d61466fea7ec1685db77bf1d  sdl2_mixer-2.0.4.catalina.bottle.tar.gz
745d9593a0e07a70b617ace17d92b6a6555825484e47e569130eba8b05e82f2b  sdl2_ttf-2.0.15.catalina.bottle.tar.gz
daf2e1c215f805b0ddc3b4262886bb6667ae0d4563887a8374fb766adc47c324  setuptools-49.1.0-py3-none-any.whl
a981b3f3f2054b5a2e658851a3c06a2460ad04a9a8a645e0afe063a63fdbb07e  squashfs4.4.tar.gz
88206b0eb87e6d677d424843ac5209e3fb9d0190d0ee169599165ec25e9d9115  urllib3-1.25.9-py2.py3-none-any.whl
ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c  wget-1.20.3_2.catalina.bottle.tar.gz
amnesia@amnesia:/tmp/tmp.PI1KBgyv52$ 

-----BEGIN PGP SIGNATURE-----
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=GiV+
-----END PGP SIGNATURE-----

from buskill-app.

maltfield commented on June 14, 2024

Here's TOFU 2/3 through a vpn

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Today (2020-07-07) I downloaded all of the buskill-app dependencies for all three platforms and took their checksums to be used in pinning them to secure the build process.

This second check was done over a vpn server based in Belgium in debian 10. See the bottom of the log below for the sha256sum output.

user@disp35:/tmp/tmp.5cr2RH83z6$ CURL="/usr/bin/curl"
user@disp35:/tmp/tmp.5cr2RH83z6$ WGET="/usr/bin/wget"
user@disp35:/tmp/tmp.5cr2RH83z6$ PYTHON="/usr/bin/python3"
user@disp35:/tmp/tmp.5cr2RH83z6$ 
user@disp35:/tmp/tmp.5cr2RH83z6$ # in tails, we must torify
user@disp35:/tmp/tmp.5cr2RH83z6$ if [[ "`whoami`" == "amnesia" ]]; then
> CURL="/usr/bin/torify ${CURL}"
> WGET="/usr/bin/torify ${WGET}"
> PYTHON="/usr/bin/torify ${PYTHON}"
> fi
user@disp35:/tmp/tmp.5cr2RH83z6$ 
user@disp35:/tmp/tmp.5cr2RH83z6$ tmpDir=`mktemp -d`
user@disp35:/tmp/tmp.5cr2RH83z6$ pushd "${tmpDir}"
/tmp/tmp.ewxIYlCRlY /tmp/tmp.5cr2RH83z6 ~
user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # first get some info about our internet connection
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${CURL} -s https://ifconfig.co/country | head -n1
Belgium
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${CURL} -s https://check.torproject.org | grep Congratulations | head -n1
user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # and today's date
user@disp35:/tmp/tmp.ewxIYlCRlY$ date -u +"%Y-%m-%d"
2020-07-07
user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # pip (all platforms)
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${PYTHON} -m pip download kivy==1.11.1 libusb1==1.8 pyinstaller==3.6 altgraph==0.17 macholib==1.14 future==0.18.2 pefile==2019.4.18 pywin32-ctypes==0.2.0
Collecting kivy==1.11.1
  Downloading https://files.pythonhosted.org/packages/1b/4d/3f8a720f561dc1eabe036c0d87c6ce9d02823275391265538e606f45e37a/Kivy-1.11.1.tar.gz (23.6MB)
    100% || 23.6MB 18kB/s 
  Saved ./Kivy-1.11.1.tar.gz
Collecting libusb1==1.8
  Downloading https://files.pythonhosted.org/packages/27/5c/4d1ebbcfb19071832ac9b4e4674435f4a33e34b8d5186d4aac9ff374f83c/libusb1-1.8.tar.gz (78kB)
    100% || 81kB 132kB/s 
  Saved ./libusb1-1.8.tar.gz
Collecting pyinstaller==3.6
  Downloading https://files.pythonhosted.org/packages/3c/c9/c3f9bc64eb11eee6a824686deba6129884c8cbdf70e750661773b9865ee0/PyInstaller-3.6.tar.gz (3.5MB)
    100% || 3.5MB 129kB/s 
  Saved ./PyInstaller-3.6.tar.gz
  Installing build dependencies ... done
Collecting altgraph==0.17
  Downloading https://files.pythonhosted.org/packages/ee/3d/bfca21174b162f6ce674953f1b7a640c1498357fa6184776029557c25399/altgraph-0.17-py2.py3-none-any.whl
  Saved ./altgraph-0.17-py2.py3-none-any.whl
Collecting macholib==1.14
  Downloading https://files.pythonhosted.org/packages/3c/e1/c12f8d6af5d745ce88f270aeb243cb2bd6d8186320e5122df87fded29e4e/macholib-1.14-py2.py3-none-any.whl
  Saved ./macholib-1.14-py2.py3-none-any.whl
Collecting future==0.18.2
  Downloading https://files.pythonhosted.org/packages/45/0b/38b06fd9b92dc2b68d58b75f900e97884c45bedd2ff83203d933cf5851c9/future-0.18.2.tar.gz (829kB)
    100% || 829kB 205kB/s 
  Saved ./future-0.18.2.tar.gz
Collecting pefile==2019.4.18
  Downloading https://files.pythonhosted.org/packages/36/58/acf7f35859d541985f0a6ea3c34baaefbfaee23642cf11e85fe36453ae77/pefile-2019.4.18.tar.gz (62kB)
    100% || 71kB 614kB/s 
  Saved ./pefile-2019.4.18.tar.gz
Collecting pywin32-ctypes==0.2.0
  Downloading https://files.pythonhosted.org/packages/9e/4b/3ab2720f1fa4b4bc924ef1932b842edf10007e4547ea8157b0b9fc78599a/pywin32_ctypes-0.2.0-py2.py3-none-any.whl
  Saved ./pywin32_ctypes-0.2.0-py2.py3-none-any.whl
Collecting Kivy-Garden>=0.1.4 (from kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/7d/68/decaee596ff8168a39432eb3949fc7c0be952ebb9467806823bffc165d48/kivy-garden-0.1.4.tar.gz
  Saved ./kivy-garden-0.1.4.tar.gz
Collecting docutils (from kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/81/44/8a15e45ffa96e6cf82956dd8d7af9e666357e16b0d93b253903475ee947f/docutils-0.16-py2.py3-none-any.whl (548kB)
    100% || 552kB 240kB/s 
  Saved ./docutils-0.16-py2.py3-none-any.whl
Collecting pygments (from kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/2d/68/106af3ae51daf807e9cdcba6a90e518954eb8b70341cee52995540a53ead/Pygments-2.6.1-py3-none-any.whl (914kB)
    100% || 921kB 120kB/s 
  Saved ./Pygments-2.6.1-py3-none-any.whl
Collecting setuptools (from pyinstaller==3.6)
  Using cached https://files.pythonhosted.org/packages/41/fa/60888a1d591db07bc9c17dce2bcfb9f00ac507c0a23ecb827e76feb8f816/setuptools-49.1.0-py3-none-any.whl
  Saved ./setuptools-49.1.0-py3-none-any.whl
Collecting requests (from Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/45/1e/0c169c6a5381e241ba7404532c16a21d86ab872c9bed8bdcd4c423954103/requests-2.24.0-py2.py3-none-any.whl (61kB)
    100% || 71kB 160kB/s 
  Saved ./requests-2.24.0-py2.py3-none-any.whl
Collecting idna<3,>=2.5 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/a2/38/928ddce2273eaa564f6f50de919327bf3a00f091b5baba8dfa9460f3a8a8/idna-2.10-py2.py3-none-any.whl (58kB)
    100% || 61kB 150kB/s 
  Saved ./idna-2.10-py2.py3-none-any.whl
Collecting chardet<4,>=3.0.2 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/bc/a9/01ffebfb562e4274b6487b4bb1ddec7ca55ec7510b22e4c51f14098443b8/chardet-3.0.4-py2.py3-none-any.whl (133kB)
    100% || 143kB 190kB/s 
  Saved ./chardet-3.0.4-py2.py3-none-any.whl
Collecting certifi>=2017.4.17 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/5e/c4/6c4fe722df5343c33226f0b4e0bb042e4dc13483228b4718baf286f86d87/certifi-2020.6.20-py2.py3-none-any.whl (156kB)
    100% || 163kB 271kB/s 
  Saved ./certifi-2020.6.20-py2.py3-none-any.whl
Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/e1/e5/df302e8017440f111c11cc41a6b432838672f5a70aa29227bf58149dc72f/urllib3-1.25.9-py2.py3-none-any.whl (126kB)
    100% || 133kB 290kB/s 
  Saved ./urllib3-1.25.9-py2.py3-none-any.whl
Successfully downloaded kivy libusb1 pyinstaller altgraph macholib future pefile pywin32-ctypes Kivy-Garden docutils pygments setuptools requests idna chardet certifi urllib3
user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # pip (platform-specific binaries/wheels)
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-win_amd64.whl#'`
- - --2020-07-07 16:33:50--  https://files.pythonhosted.org/packages/11/ec/e4f11fc9e0c5756efc20008ddfd26ae759006bc9ecd60bbd5307dda2fc20/Kivy-1.11.1-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4053770 (3.9M) [binary/octet-stream]
Saving to: ‘Kivy-1.11.1-cp37-cp37m-win_amd64.whl’

Kivy-1.11.1-cp37-cp 100%[===================>]   3.87M   126KB/s    in 36s     

2020-07-07 16:34:32 (111 KB/s) - ‘Kivy-1.11.1-cp37-cp37m-win_amd64.whl’ saved [4053770/4053770]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl#'`
- - --2020-07-07 16:34:33--  https://files.pythonhosted.org/packages/0f/51/1fdcd05217919e77016f8f241d19a87d1d15cf1c074d78a6f3c5ca44198b/Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6946562 (6.6M) [binary/octet-stream]
Saving to: ‘Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl’

Kivy-1.11.1-cp37-cp 100%[===================>]   6.62M   108KB/s    in 73s     

2020-07-07 16:35:47 (93.3 KB/s) - ‘Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl’ saved [6946562/6946562]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/pypiwin32/ | grep -oE 'https://.*pypiwin32-223-py3-none-any.whl#'`
- - --2020-07-07 16:35:48--  https://files.pythonhosted.org/packages/d0/1b/2f292bbd742e369a100c91faa0483172cd91a1a422a6692055ac920946c5/pypiwin32-223-py3-none-any.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1674 (1.6K) [binary/octet-stream]
Saving to: ‘pypiwin32-223-py3-none-any.whl’

pypiwin32-223-py3-n 100%[===================>]   1.63K  --.-KB/s    in 0s      

2020-07-07 16:35:49 (15.9 MB/s) - ‘pypiwin32-223-py3-none-any.whl’ saved [1674/1674]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/pywin32/ | grep -oE 'https://.*pywin32-228-cp37-cp37m-win_amd64.whl#'`
- - --2020-07-07 16:35:50--  https://files.pythonhosted.org/packages/96/51/d46eb277182e0989a81cdc0933e97924b68b12519dfe62ae0ea5dec198dd/pywin32-228-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9100091 (8.7M) [application/octet-stream]
Saving to: ‘pywin32-228-cp37-cp37m-win_amd64.whl’

pywin32-228-cp37-cp 100%[===================>]   8.68M  78.7KB/s    in 1m 49s  

2020-07-07 16:37:40 (81.7 KB/s) - ‘pywin32-228-cp37-cp37m-win_amd64.whl’ saved [9100091/9100091]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-sdl2/ | grep -oE 'https://.*kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl#'`
- - --2020-07-07 16:37:41--  https://files.pythonhosted.org/packages/8c/cf/c890b3f6ed53b2420759811edd5502ac87f6d9826f9f14d21f562b6059d1/kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2463621 (2.3M) [binary/octet-stream]
Saving to: ‘kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl’

ps.sdl2-0.2.0-cp37-  20%[===>                ] 487.12K   117KB/s    eta 17s    ^kivy_deps.sdl2-0.2. 100%[===================>]   2.35M   119KB/s    in 24s     

2020-07-07 16:38:06 (98.6 KB/s) - ‘kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl’ saved [2463621/2463621]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-glew/ | grep -oE 'https://.*kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl#'`
- - --2020-07-07 16:38:07--  https://files.pythonhosted.org/packages/b5/1f/e4a96f43d46b1ebfa27efb8647d0233bd9d0442b1e03382011ade1a38a9f/kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 123590 (121K) [binary/octet-stream]
Saving to: ‘kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.glew-0.2. 100%[===================>] 120.69K   197KB/s    in 0.6s    

2020-07-07 16:38:09 (197 KB/s) - ‘kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl’ saved [123590/123590]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-angle/ | grep -oE 'https://.*kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl#'`
- - --2020-07-07 16:38:10--  https://files.pythonhosted.org/packages/aa/aa/7cc02746604a09619a71c754a62f16ca2ebd305aee838d67bb28cfc3fa64/kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.37.63, 2a04:4e42:9::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.37.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4775549 (4.6M) [binary/octet-stream]
Saving to: ‘kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.angle-0.2 100%[===================>]   4.55M  71.6KB/s    in 47s     

2020-07-07 16:38:57 (99.8 KB/s) - ‘kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl’ saved [4775549/4775549]

user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # misc linux
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
- - --2020-07-07 16:38:57--  https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/251001753/634da600-be6c-11ea-8fe6-3ab6eba8b271?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200707T105359Z&X-Amz-Expires=300&X-Amz-Signature=e12204d18ec2888311f20a0f73314fbf379161a40ee734d226b9a228a34fed90&X-Amz-SignedHeaders=host&actor_id=0&repo_id=251001753&response-content-disposition=attachment%3B%20filename%3Dpython3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage&response-content-type=application%2Foctet-stream [following]
- - --2020-07-07 16:38:59--  https://github-production-release-asset-2e65be.s3.amazonaws.com/251001753/634da600-be6c-11ea-8fe6-3ab6eba8b271?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200707T105359Z&X-Amz-Expires=300&X-Amz-Signature=e12204d18ec2888311f20a0f73314fbf379161a40ee734d226b9a228a34fed90&X-Amz-SignedHeaders=host&actor_id=0&repo_id=251001753&response-content-disposition=attachment%3B%20filename%3Dpython3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.217.17.236
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.217.17.236|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 17621032 (17M) [application/octet-stream]
Saving to: ‘python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage’

python3.7.8-cp37-cp 100%[===================>]  16.80M   200KB/s    in 2m 54s  

2020-07-07 16:41:54 (99.0 KB/s) - ‘python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage’ saved [17621032/17621032]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
- - --2020-07-07 16:41:54--  https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/9435153/b74f7000-6c54-11e9-90c2-1f11aaf02f75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200707T105656Z&X-Amz-Expires=300&X-Amz-Signature=e8fc3edf8d235da2c3ac0bd05007e6ffd0e81aea72752d5b092389623fe28cdb&X-Amz-SignedHeaders=host&actor_id=0&repo_id=9435153&response-content-disposition=attachment%3B%20filename%3Dappimagetool-x86_64.AppImage&response-content-type=application%2Foctet-stream [following]
- - --2020-07-07 16:41:56--  https://github-production-release-asset-2e65be.s3.amazonaws.com/9435153/b74f7000-6c54-11e9-90c2-1f11aaf02f75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200707T105656Z&X-Amz-Expires=300&X-Amz-Signature=e8fc3edf8d235da2c3ac0bd05007e6ffd0e81aea72752d5b092389623fe28cdb&X-Amz-SignedHeaders=host&actor_id=0&repo_id=9435153&response-content-disposition=attachment%3B%20filename%3Dappimagetool-x86_64.AppImage&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.76.52
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.76.52|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1974248 (1.9M) [application/octet-stream]
Saving to: ‘appimagetool-x86_64.AppImage’

appimagetool-x86_64 100%[===================>]   1.88M   934KB/s    in 2.1s    

2020-07-07 16:41:59 (934 KB/s) - ‘appimagetool-x86_64.AppImage’ saved [1974248/1974248]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} --output-document=squashfs4.4.tar.gz https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download
- - --2020-07-07 16:41:59--  https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download
Resolving sourceforge.net (sourceforge.net)... 216.105.38.13
Connecting to sourceforge.net (sourceforge.net)|216.105.38.13|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://downloads.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz?r=&ts=1594119422&use_mirror=netcologne [following]
- - --2020-07-07 16:42:02--  https://downloads.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz?r=&ts=1594119422&use_mirror=netcologne
Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 216.105.38.13
Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|216.105.38.13|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://netcologne.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz [following]
- - --2020-07-07 16:42:03--  https://netcologne.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz
Resolving netcologne.dl.sourceforge.net (netcologne.dl.sourceforge.net)... 78.35.24.46, 2001:4dd0:1234:6::5f
Connecting to netcologne.dl.sourceforge.net (netcologne.dl.sourceforge.net)|78.35.24.46|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 190797 (186K) [application/x-gzip]
Saving to: ‘squashfs4.4.tar.gz’

squashfs4.4.tar.gz  100%[===================>] 186.33K   472KB/s    in 0.4s    

2020-07-07 16:42:05 (472 KB/s) - ‘squashfs4.4.tar.gz’ saved [190797/190797]

user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # misc windows
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe
- - --2020-07-07 16:42:05--  https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe
Resolving www.python.org (www.python.org)... 151.101.36.223, 2a04:4e42:9::223
Connecting to www.python.org (www.python.org)|151.101.36.223|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 26993432 (26M) [application/octet-stream]
Saving to: ‘python-3.7.8-amd64.exe’

python-3.7.8-amd64. 100%[===================>]  25.74M   116KB/s    in 3m 59s  

2020-07-07 16:46:06 (110 KB/s) - ‘python-3.7.8-amd64.exe’ saved [26993432/26993432]

user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # misc macos
user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
- - --2020-07-07 16:46:06--  https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
Resolving github.com (github.com)... 140.82.118.3
Connecting to github.com (github.com)|140.82.118.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/15120676/df4ea600-c99e-11e9-98f0-1fd214aa18e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200707T110107Z&X-Amz-Expires=300&X-Amz-Signature=d3d6bf36c09726fad9cce859265536339aef087648a99920290f59c370e52cf2&X-Amz-SignedHeaders=host&actor_id=0&repo_id=15120676&response-content-disposition=attachment%3B%20filename%3Dlibusb-1.0.23.tar.bz2&response-content-type=application%2Foctet-stream [following]
- - --2020-07-07 16:46:07--  https://github-production-release-asset-2e65be.s3.amazonaws.com/15120676/df4ea600-c99e-11e9-98f0-1fd214aa18e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200707%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200707T110107Z&X-Amz-Expires=300&X-Amz-Signature=d3d6bf36c09726fad9cce859265536339aef087648a99920290f59c370e52cf2&X-Amz-SignedHeaders=host&actor_id=0&repo_id=15120676&response-content-disposition=attachment%3B%20filename%3Dlibusb-1.0.23.tar.bz2&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.93.131
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.93.131|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 602860 (589K) [application/octet-stream]
Saving to: ‘libusb-1.0.23.tar.bz2’

libusb-1.0.23.tar.b 100%[===================>] 588.73K  72.7KB/s    in 9.3s    

2020-07-07 16:46:18 (63.4 KB/s) - ‘libusb-1.0.23.tar.bz2’ saved [602860/602860]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
- - --2020-07-07 16:46:18--  https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.156.26.54, 35.158.88.158
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.156.26.54|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/ef/ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c?__gda__=exp=1594120399~hmac=4f9aeb835fd800b05724f04e5ba8e661233823589dd43c1fa300101700229851&response-content-disposition=attachment%3Bfilename%3D%22wget-1.20.3_2.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX19tuLy9Eib9JQoA89eN-_KkUDfxkdye3J8GS71N6n56t8Atpt4B1tQN2eWBw8YgyyRIaNUaMRldMyk_bp-gma4ncpK4Go1W4bhcc8LA1GUbv2ylgtt0P4H-nvZhSdBVrYdm-_HnM0xleQ&response-X-Checksum-Sha1=4945368618ce4b78f1f0ae6531c7e17dfaf07ee0&response-X-Checksum-Sha2=ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c [following]
- - --2020-07-07 16:46:19--  https://akamai.bintray.com/ef/ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c?__gda__=exp=1594120399~hmac=4f9aeb835fd800b05724f04e5ba8e661233823589dd43c1fa300101700229851&response-content-disposition=attachment%3Bfilename%3D%22wget-1.20.3_2.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX19tuLy9Eib9JQoA89eN-_KkUDfxkdye3J8GS71N6n56t8Atpt4B1tQN2eWBw8YgyyRIaNUaMRldMyk_bp-gma4ncpK4Go1W4bhcc8LA1GUbv2ylgtt0P4H-nvZhSdBVrYdm-_HnM0xleQ&response-X-Checksum-Sha1=4945368618ce4b78f1f0ae6531c7e17dfaf07ee0&response-X-Checksum-Sha2=ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c
Resolving akamai.bintray.com (akamai.bintray.com)... 92.122.255.240
Connecting to akamai.bintray.com (akamai.bintray.com)|92.122.255.240|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1447728 (1.4M) [application/gzip]
Saving to: ‘wget-1.20.3_2.catalina.bottle.tar.gz’

wget-1.20.3_2.catal 100%[===================>]   1.38M   834KB/s    in 1.7s    

2020-07-07 16:46:22 (834 KB/s) - ‘wget-1.20.3_2.catalina.bottle.tar.gz’ saved [1447728/1447728]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
- - --2020-07-07 16:46:22--  https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.158.88.158, 35.156.26.54
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.158.88.158|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/f7/f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2?__gda__=exp=1594120403~hmac=5d0f4a61732fed2603c453c214c73a7becd48d38f21fdf6891f106ea376701e8&response-content-disposition=attachment%3Bfilename%3D%22python-3.7.8.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX1-zjjOjRteryFS-j7pmciru_XWkzCle5f2GvyDFfFJiuKcepWR28brWJLdDRQluOGoKJ35_iDxGbVcP7ppiENkHqMjJ2fxbJbxPAJ6aPjdgA-4V8-EMkf-Dlgbt_G1cteHOf-a1wSY_Lw&response-X-Checksum-Sha1=389922ed3f4fee99c77fcd1523958e8079e5d7e2&response-X-Checksum-Sha2=f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2 [following]
- - --2020-07-07 16:46:23--  https://akamai.bintray.com/f7/f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2?__gda__=exp=1594120403~hmac=5d0f4a61732fed2603c453c214c73a7becd48d38f21fdf6891f106ea376701e8&response-content-disposition=attachment%3Bfilename%3D%22python-3.7.8.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX1-zjjOjRteryFS-j7pmciru_XWkzCle5f2GvyDFfFJiuKcepWR28brWJLdDRQluOGoKJ35_iDxGbVcP7ppiENkHqMjJ2fxbJbxPAJ6aPjdgA-4V8-EMkf-Dlgbt_G1cteHOf-a1wSY_Lw&response-X-Checksum-Sha1=389922ed3f4fee99c77fcd1523958e8079e5d7e2&response-X-Checksum-Sha2=f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2
Resolving akamai.bintray.com (akamai.bintray.com)... 92.122.255.240
Connecting to akamai.bintray.com (akamai.bintray.com)|92.122.255.240|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 15686427 (15M) [application/gzip]
Saving to: ‘python-3.7.8.catalina.bottle.tar.gz’

python-3.7.8.catali 100%[===================>]  14.96M  2.47MB/s    in 6.8s    

2020-07-07 16:46:31 (2.22 MB/s) - ‘python-3.7.8.catalina.bottle.tar.gz’ saved [15686427/15686427]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
- - --2020-07-07 16:46:31--  https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.156.26.54, 35.158.88.158
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.156.26.54|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://d29vzk4ow07wi7.cloudfront.net/4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63?response-content-disposition=attachment%3Bfilename%3D%22sdl2-2.0.12_1.catalina.bottle.tar.gz%22&Policy=eyJTdGF0ZW1lbnQiOiBbeyJSZXNvdXJjZSI6Imh0dHAqOi8vZDI5dnprNG93MDd3aTcuY2xvdWRmcm9udC5uZXQvNGRjZDYzNTQ2NWQxNjM3MmNhN2E3YmIyYjk0MjIxYWEyMWRlMDJmNjgxYTIyZTkyMzlkMDk1YjY2ZmIwMGM2Mz9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPWF0dGFjaG1lbnQlM0JmaWxlbmFtZSUzRCUyMnNkbDItMi4wLjEyXzEuY2F0YWxpbmEuYm90dGxlLnRhci5neiUyMiIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTU5NDEyMDQxMn0sIklwQWRkcmVzcyI6eyJBV1M6U291cmNlSXAiOiIwLjAuMC4wLzAifX19XX0_&Signature=luNHA6ACObClbxtsgHHlZ8GySjcyNa8sPZj10bMT685U9OlXPmt6Nr3lV2prMW4nAPJIDWRteJ1o-ID6bp~YK0QVIv2M5tkHZh~K~ZTirpoYMJqvcFaGDxWX8bAoN-1g3L4kmDA54TyXs-hDQ0CHjAiL3M1u9hiTUCw9DQxJ120iZMibw~E-D7l8QEUsUTC2F0P8~aJz9UwI1e~HjaBA3Z4rlB6UhnCJaq5Nid4~Gci1DhBGdr98Vsn0LwQZjXr2ze712lArtpNKVWuOFUvc4SwgCQ1cReXMRFdQGAdvkc6lZS31yelH0zhkG8enbTQsueKDC13fal~lpiE22G6g6A__&Key-Pair-Id=APKAIFKFWOMXM2UMTSFA [following]
- - --2020-07-07 16:46:32--  https://d29vzk4ow07wi7.cloudfront.net/4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63?response-content-disposition=attachment%3Bfilename%3D%22sdl2-2.0.12_1.catalina.bottle.tar.gz%22&Policy=eyJTdGF0ZW1lbnQiOiBbeyJSZXNvdXJjZSI6Imh0dHAqOi8vZDI5dnprNG93MDd3aTcuY2xvdWRmcm9udC5uZXQvNGRjZDYzNTQ2NWQxNjM3MmNhN2E3YmIyYjk0MjIxYWEyMWRlMDJmNjgxYTIyZTkyMzlkMDk1YjY2ZmIwMGM2Mz9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPWF0dGFjaG1lbnQlM0JmaWxlbmFtZSUzRCUyMnNkbDItMi4wLjEyXzEuY2F0YWxpbmEuYm90dGxlLnRhci5neiUyMiIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTU5NDEyMDQxMn0sIklwQWRkcmVzcyI6eyJBV1M6U291cmNlSXAiOiIwLjAuMC4wLzAifX19XX0_&Signature=luNHA6ACObClbxtsgHHlZ8GySjcyNa8sPZj10bMT685U9OlXPmt6Nr3lV2prMW4nAPJIDWRteJ1o-ID6bp~YK0QVIv2M5tkHZh~K~ZTirpoYMJqvcFaGDxWX8bAoN-1g3L4kmDA54TyXs-hDQ0CHjAiL3M1u9hiTUCw9DQxJ120iZMibw~E-D7l8QEUsUTC2F0P8~aJz9UwI1e~HjaBA3Z4rlB6UhnCJaq5Nid4~Gci1DhBGdr98Vsn0LwQZjXr2ze712lArtpNKVWuOFUvc4SwgCQ1cReXMRFdQGAdvkc6lZS31yelH0zhkG8enbTQsueKDC13fal~lpiE22G6g6A__&Key-Pair-Id=APKAIFKFWOMXM2UMTSFA
Resolving d29vzk4ow07wi7.cloudfront.net (d29vzk4ow07wi7.cloudfront.net)... 13.227.220.55, 13.227.220.137, 13.227.220.119, ...
Connecting to d29vzk4ow07wi7.cloudfront.net (d29vzk4ow07wi7.cloudfront.net)|13.227.220.55|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1340186 (1.3M) [application/gzip]
Saving to: ‘sdl2-2.0.12_1.catalina.bottle.tar.gz’

sdl2-2.0.12_1.catal 100%[===================>]   1.28M   931KB/s    in 1.4s    

2020-07-07 16:46:34 (931 KB/s) - ‘sdl2-2.0.12_1.catalina.bottle.tar.gz’ saved [1340186/1340186]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
- - --2020-07-07 16:46:34--  https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.156.26.54, 35.158.88.158
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.156.26.54|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 130381 (127K) [application/gzip]
Saving to: ‘sdl2_image-2.0.5.catalina.bottle.tar.gz’

sdl2_image-2.0.5.ca 100%[===================>] 127.33K   121KB/s    in 1.1s    

2020-07-07 16:46:36 (121 KB/s) - ‘sdl2_image-2.0.5.catalina.bottle.tar.gz’ saved [130381/130381]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
- - --2020-07-07 16:46:36--  https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.158.88.158, 35.156.26.54
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.158.88.158|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 24032 (23K) [application/gzip]
Saving to: ‘sdl2_ttf-2.0.15.catalina.bottle.tar.gz’

sdl2_ttf-2.0.15.cat 100%[===================>]  23.47K   105KB/s    in 0.2s    

2020-07-07 16:46:38 (105 KB/s) - ‘sdl2_ttf-2.0.15.catalina.bottle.tar.gz’ saved [24032/24032]

user@disp35:/tmp/tmp.ewxIYlCRlY$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz
- - --2020-07-07 16:46:38--  https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.158.88.158, 35.156.26.54
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.158.88.158|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 130686 (128K) [application/gzip]
Saving to: ‘sdl2_mixer-2.0.4.catalina.bottle.tar.gz’

sdl2_mixer-2.0.4.ca 100%[===================>] 127.62K   154KB/s    in 0.8s    

2020-07-07 16:46:40 (154 KB/s) - ‘sdl2_mixer-2.0.4.catalina.bottle.tar.gz’ saved [130686/130686]

user@disp35:/tmp/tmp.ewxIYlCRlY$ 
user@disp35:/tmp/tmp.ewxIYlCRlY$ # get checksums
user@disp35:/tmp/tmp.ewxIYlCRlY$ sha256sum *
c623e5f3408ca61d4016f23a681b9adb100802ca3e3da5e718915a9e4052cebe  altgraph-0.17-py2.py3-none-any.whl
d918b4df547b388ef253f3c9e7f6529ca81a885395c31f619d9aaf7030499a13  appimagetool-x86_64.AppImage
8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41  certifi-2020.6.20-py2.py3-none-any.whl
fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691  chardet-3.0.4-py2.py3-none-any.whl
0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af  docutils-0.16-py2.py3-none-any.whl
b1bead90b70cf6ec3f0710ae53a525360fa360d306a86583adc6bf83a4db537d  future-0.18.2.tar.gz
b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0  idna-2.10-py2.py3-none-any.whl
8819a27a09871af451760cb69486ced52e830c8a0a37480f22ef5e692f12c05b  Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
1d28b198a64c30db8d94a0488e85f3037af60d514ab0d7ad5ab45add3ab77090  Kivy-1.11.1-cp37-cp37m-win_amd64.whl
4d0e596f74271e901b551f77661dde238df4765484fce9f5d1c72e8022984e84  Kivy-1.11.1.tar.gz
5736da2eaadd9061a7921944126a8c8ad95fe8420ea96b1e4770b0b7a67af88e  kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl
738a222f16b032b5ccd4c686fc51e678d95e4c1f13c57f32233d3cb8aa2f34bf  kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl
c2e1721aac0709f21835c8dd4aec5adea2d58e5df92005585f94d13bed2a2e06  kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl
c256f42788421273a08fbb0a228f0fb0e80dd86b629fb8c0920507f645be6c72  kivy-garden-0.1.4.tar.gz
db11c06e958a82dac52cf3c65cb4dd2c3f339c8a988665110e0d24d19312ad8d  libusb-1.0.23.tar.bz2
240f65ac70ba3fab77749ec84a412e4e89624804cb80d6c9d394eef5af8878d6  libusb1-1.8.tar.gz
c500f02867515e6c60a27875b408920d18332ddf96b4035ef03beddd782d4281  macholib-1.14-py2.py3-none-any.whl
a5d6e8305c6b210849b47a6174ddf9c452b2888340b8177874b862ba6c207645  pefile-2019.4.18.tar.gz
ff7a40b4860b727ab48fad6360eb351cc1b33cbf9b15a0f689ca5353e9463324  Pygments-2.6.1-py3-none-any.whl
3730fa80d088f8bb7084d32480eb87cbb4ddb64123363763cf8f2a1378c1c4b7  PyInstaller-3.6.tar.gz
67adf399debc1d5d14dffc1ab5acacb800da569754fafdc576b2a039485aa775  pypiwin32-223-py3-none-any.whl
a43ed63251a5e0d2cf1bbe9f6a75389675d091aaeeaae5d1be27ffb2e329e373  python-3.7.8-amd64.exe
f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2  python-3.7.8.catalina.bottle.tar.gz
aafa857bdd6e01211e1dc11c00b2c207481606d869ae3ba73432db24a35add9f  python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
00eaf43dbd05ba6a9b0080c77e161e0b7a601f9a3f660727a952e40140537de7  pywin32-228-cp37-cp37m-win_amd64.whl
9dc2d991b3479cc2df15930958b674a48a227d5361d413827a4cfd0b5876fc98  pywin32_ctypes-0.2.0-py2.py3-none-any.whl
fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898  requests-2.24.0-py2.py3-none-any.whl
4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63  sdl2-2.0.12_1.catalina.bottle.tar.gz
691d5407fef2bc374ac3b7c2fafbe46a6bc0f9ed609f98812b24fec33ab9bd27  sdl2_image-2.0.5.catalina.bottle.tar.gz
419d988dc795842301df16d2e57f7759417708b0d61466fea7ec1685db77bf1d  sdl2_mixer-2.0.4.catalina.bottle.tar.gz
745d9593a0e07a70b617ace17d92b6a6555825484e47e569130eba8b05e82f2b  sdl2_ttf-2.0.15.catalina.bottle.tar.gz
daf2e1c215f805b0ddc3b4262886bb6667ae0d4563887a8374fb766adc47c324  setuptools-49.1.0-py3-none-any.whl
a981b3f3f2054b5a2e658851a3c06a2460ad04a9a8a645e0afe063a63fdbb07e  squashfs4.4.tar.gz
88206b0eb87e6d677d424843ac5209e3fb9d0190d0ee169599165ec25e9d9115  urllib3-1.25.9-py2.py3-none-any.whl
ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c  wget-1.20.3_2.catalina.bottle.tar.gz
user@disp35:/tmp/tmp.ewxIYlCRlY$ 

-----BEGIN PGP SIGNATURE-----
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=Qzzv
-----END PGP SIGNATURE-----

from buskill-app.

maltfield commented on June 14, 2024

Here's TOFU 3/3 through my ISP

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Today (2020-07-08) I downloaded all of the buskill-app dependencies for all three platforms and took their checksums to be used in pinning them to secure the build process.

This thrid check was done over my ISP's connection (in Nepal) in debian 10. See the bottom of the log below for the sha256sum output.

user@disp5769:/tmp/tmp.qooEkS5vSG$ CURL="/usr/bin/curl"
user@disp5769:/tmp/tmp.qooEkS5vSG$ WGET="/usr/bin/wget --retry-on-host-error --retry-connrefused"
user@disp5769:/tmp/tmp.qooEkS5vSG$ PYTHON="/usr/bin/python3"
user@disp5769:/tmp/tmp.qooEkS5vSG$ 
user@disp5769:/tmp/tmp.qooEkS5vSG$ # in tails, we must torify
user@disp5769:/tmp/tmp.qooEkS5vSG$ if [[ "`whoami`" == "amnesia" ]]; then
> CURL="/usr/bin/torify ${CURL}"
> WGET="/usr/bin/torify ${WGET}"
> PYTHON="/usr/bin/torify ${PYTHON}"
> fi
user@disp5769:/tmp/tmp.qooEkS5vSG$ 
user@disp5769:/tmp/tmp.qooEkS5vSG$ tmpDir=`mktemp -d`
user@disp5769:/tmp/tmp.qooEkS5vSG$ pushd "${tmpDir}"
/tmp/tmp.gIvKNLsGZt /tmp/tmp.qooEkS5vSG /tmp/tmp.911iJ8lEtL /tmp/tmp.VCNXlhB2ch /tmp/tmp.zNusd3l9K5 /tmp/tmp.v8ymuOgPuk /tmp/tmp.xQt5JMVo4P /tmp/tmp.dSq3Y8z3gK ~
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # first get some info about our internet connection
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${CURL} -s https://ifconfig.co/country | head -n1
Nepal
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${CURL} -s https://check.torproject.org | grep Congratulations | head -n1
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # and today's date
user@disp5769:/tmp/tmp.gIvKNLsGZt$ date -u +"%Y-%m-%d"
2020-07-08
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # pip (all platforms)
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${PYTHON} -m pip download --no-cache-dir kivy==1.11.1 libusb1==1.8 pyinstaller==3.6 altgraph==0.17 macholib==1.14 future==0.18.2 pefile==2019.4.18 pywin32-ctypes==0.2.0
Collecting kivy==1.11.1
  Downloading https://files.pythonhosted.org/packages/1b/4d/3f8a720f561dc1eabe036c0d87c6ce9d02823275391265538e606f45e37a/Kivy-1.11.1.tar.gz (23.6MB)
    100% || 23.6MB 3.7MB/s 
  Saved ./Kivy-1.11.1.tar.gz
Collecting libusb1==1.8
  Downloading https://files.pythonhosted.org/packages/27/5c/4d1ebbcfb19071832ac9b4e4674435f4a33e34b8d5186d4aac9ff374f83c/libusb1-1.8.tar.gz (78kB)
    100% || 81kB 5.4MB/s 
  Saved ./libusb1-1.8.tar.gz
Collecting pyinstaller==3.6
  Downloading https://files.pythonhosted.org/packages/3c/c9/c3f9bc64eb11eee6a824686deba6129884c8cbdf70e750661773b9865ee0/PyInstaller-3.6.tar.gz (3.5MB)
    100% || 3.5MB 2.0MB/s 
  Saved ./PyInstaller-3.6.tar.gz
  Installing build dependencies ... done
Collecting altgraph==0.17
  Downloading https://files.pythonhosted.org/packages/ee/3d/bfca21174b162f6ce674953f1b7a640c1498357fa6184776029557c25399/altgraph-0.17-py2.py3-none-any.whl
  Saved ./altgraph-0.17-py2.py3-none-any.whl
Collecting macholib==1.14
  Downloading https://files.pythonhosted.org/packages/3c/e1/c12f8d6af5d745ce88f270aeb243cb2bd6d8186320e5122df87fded29e4e/macholib-1.14-py2.py3-none-any.whl
  Saved ./macholib-1.14-py2.py3-none-any.whl
Collecting future==0.18.2
  Downloading https://files.pythonhosted.org/packages/45/0b/38b06fd9b92dc2b68d58b75f900e97884c45bedd2ff83203d933cf5851c9/future-0.18.2.tar.gz (829kB)
    100% || 829kB 1.0MB/s 
  Saved ./future-0.18.2.tar.gz
Collecting pefile==2019.4.18
  Downloading https://files.pythonhosted.org/packages/36/58/acf7f35859d541985f0a6ea3c34baaefbfaee23642cf11e85fe36453ae77/pefile-2019.4.18.tar.gz (62kB)
    100% || 71kB 3.8MB/s 
  Saved ./pefile-2019.4.18.tar.gz
Collecting pywin32-ctypes==0.2.0
  Downloading https://files.pythonhosted.org/packages/9e/4b/3ab2720f1fa4b4bc924ef1932b842edf10007e4547ea8157b0b9fc78599a/pywin32_ctypes-0.2.0-py2.py3-none-any.whl
  Saved ./pywin32_ctypes-0.2.0-py2.py3-none-any.whl
Collecting Kivy-Garden>=0.1.4 (from kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/7d/68/decaee596ff8168a39432eb3949fc7c0be952ebb9467806823bffc165d48/kivy-garden-0.1.4.tar.gz
  Saved ./kivy-garden-0.1.4.tar.gz
Collecting docutils (from kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/81/44/8a15e45ffa96e6cf82956dd8d7af9e666357e16b0d93b253903475ee947f/docutils-0.16-py2.py3-none-any.whl (548kB)
    100% || 552kB 2.2MB/s 
  Saved ./docutils-0.16-py2.py3-none-any.whl
Collecting pygments (from kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/2d/68/106af3ae51daf807e9cdcba6a90e518954eb8b70341cee52995540a53ead/Pygments-2.6.1-py3-none-any.whl (914kB)
    100% || 921kB 3.1MB/s 
  Saved ./Pygments-2.6.1-py3-none-any.whl
Collecting setuptools (from pyinstaller==3.6)
  Downloading https://files.pythonhosted.org/packages/41/fa/60888a1d591db07bc9c17dce2bcfb9f00ac507c0a23ecb827e76feb8f816/setuptools-49.1.0-py3-none-any.whl (789kB)
    100% || 798kB 2.0MB/s 
  Saved ./setuptools-49.1.0-py3-none-any.whl
Collecting requests (from Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/45/1e/0c169c6a5381e241ba7404532c16a21d86ab872c9bed8bdcd4c423954103/requests-2.24.0-py2.py3-none-any.whl (61kB)
    100% || 71kB 3.2MB/s 
  Saved ./requests-2.24.0-py2.py3-none-any.whl
Collecting chardet<4,>=3.0.2 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/bc/a9/01ffebfb562e4274b6487b4bb1ddec7ca55ec7510b22e4c51f14098443b8/chardet-3.0.4-py2.py3-none-any.whl (133kB)
    100% || 143kB 44.2MB/s 
  Saved ./chardet-3.0.4-py2.py3-none-any.whl
Collecting idna<3,>=2.5 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/a2/38/928ddce2273eaa564f6f50de919327bf3a00f091b5baba8dfa9460f3a8a8/idna-2.10-py2.py3-none-any.whl (58kB)
    100% || 61kB 1.9MB/s 
  Saved ./idna-2.10-py2.py3-none-any.whl
Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/e1/e5/df302e8017440f111c11cc41a6b432838672f5a70aa29227bf58149dc72f/urllib3-1.25.9-py2.py3-none-any.whl (126kB)
    100% || 133kB 1.6MB/s 
  Saved ./urllib3-1.25.9-py2.py3-none-any.whl
Collecting certifi>=2017.4.17 (from requests->Kivy-Garden>=0.1.4->kivy==1.11.1)
  Downloading https://files.pythonhosted.org/packages/5e/c4/6c4fe722df5343c33226f0b4e0bb042e4dc13483228b4718baf286f86d87/certifi-2020.6.20-py2.py3-none-any.whl (156kB)
    100% || 163kB 527kB/s 
  Saved ./certifi-2020.6.20-py2.py3-none-any.whl
Successfully downloaded kivy libusb1 pyinstaller altgraph macholib future pefile pywin32-ctypes Kivy-Garden docutils pygments setuptools requests chardet idna urllib3 certifi
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # pip (platform-specific binaries/wheels)
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-win_amd64.whl#'`
- --2020-07-08 20:01:09--  https://files.pythonhosted.org/packages/11/ec/e4f11fc9e0c5756efc20008ddfd26ae759006bc9ecd60bbd5307dda2fc20/Kivy-1.11.1-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4053770 (3.9M) [binary/octet-stream]
Saving to: ‘Kivy-1.11.1-cp37-cp37m-win_amd64.whl’

Kivy-1.11.1-cp37-cp 100%[===================>]   3.87M   590KB/s    in 5.7s    

2020-07-08 20:01:18 (689 KB/s) - ‘Kivy-1.11.1-cp37-cp37m-win_amd64.whl’ saved [4053770/4053770]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy/ | grep -oE 'https://.*Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl#'`
- --2020-07-08 20:01:19--  https://files.pythonhosted.org/packages/0f/51/1fdcd05217919e77016f8f241d19a87d1d15cf1c074d78a6f3c5ca44198b/Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6946562 (6.6M) [binary/octet-stream]
Saving to: ‘Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl’

Kivy-1.11.1-cp37-cp 100%[===================>]   6.62M  2.68MB/s    in 2.5s    

2020-07-08 20:01:21 (2.68 MB/s) - ‘Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl’ saved [6946562/6946562]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/pypiwin32/ | grep -oE 'https://.*pypiwin32-223-py3-none-any.whl#'`
- --2020-07-08 20:01:53--  https://files.pythonhosted.org/packages/d0/1b/2f292bbd742e369a100c91faa0483172cd91a1a422a6692055ac920946c5/pypiwin32-223-py3-none-any.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1674 (1.6K) [binary/octet-stream]
Saving to: ‘pypiwin32-223-py3-none-any.whl’

pypiwin32-223-py3-n 100%[===================>]   1.63K  --.-KB/s    in 0.001s  

2020-07-08 20:01:54 (2.01 MB/s) - ‘pypiwin32-223-py3-none-any.whl’ saved [1674/1674]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/pywin32/ | grep -oE 'https://.*pywin32-228-cp37-cp37m-win_amd64.whl#'`
- --2020-07-08 20:02:26--  https://files.pythonhosted.org/packages/96/51/d46eb277182e0989a81cdc0933e97924b68b12519dfe62ae0ea5dec198dd/pywin32-228-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9100091 (8.7M) [application/octet-stream]
Saving to: ‘pywin32-228-cp37-cp37m-win_amd64.whl’

pywin32-228-cp37-cp 100%[===================>]   8.68M  4.15MB/s    in 2.1s    

2020-07-08 20:02:28 (4.15 MB/s) - ‘pywin32-228-cp37-cp37m-win_amd64.whl’ saved [9100091/9100091]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-sdl2/ | grep -oE 'https://.*kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl#'`
- --2020-07-08 20:02:28--  https://files.pythonhosted.org/packages/8c/cf/c890b3f6ed53b2420759811edd5502ac87f6d9826f9f14d21f562b6059d1/kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2463621 (2.3M) [binary/octet-stream]
Saving to: ‘kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.sdl2-0.2. 100%[===================>]   2.35M  2.26MB/s    in 1.0s    

2020-07-08 20:02:30 (2.26 MB/s) - ‘kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl’ saved [2463621/2463621]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-glew/ | grep -oE 'https://.*kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl#'`
- --2020-07-08 20:03:02--  https://files.pythonhosted.org/packages/b5/1f/e4a96f43d46b1ebfa27efb8647d0233bd9d0442b1e03382011ade1a38a9f/kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 123590 (121K) [binary/octet-stream]
Saving to: ‘kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.glew-0.2. 100%[===================>] 120.69K   649KB/s    in 0.2s    

2020-07-08 20:03:02 (649 KB/s) - ‘kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl’ saved [123590/123590]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} `${CURL} -s https://pypi.org/simple/kivy-deps-angle/ | grep -oE 'https://.*kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl#'`
- --2020-07-08 20:03:03--  https://files.pythonhosted.org/packages/aa/aa/7cc02746604a09619a71c754a62f16ca2ebd305aee838d67bb28cfc3fa64/kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl
Resolving files.pythonhosted.org (files.pythonhosted.org)... 151.101.153.63, 2a04:4e42:24::319
Connecting to files.pythonhosted.org (files.pythonhosted.org)|151.101.153.63|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4775549 (4.6M) [binary/octet-stream]
Saving to: ‘kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl’

kivy_deps.angle-0.2 100%[===================>]   4.55M  2.72MB/s    in 1.7s    

2020-07-08 20:03:05 (2.72 MB/s) - ‘kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl’ saved [4775549/4775549]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # misc linux
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
- --2020-07-08 20:03:05--  https://github.com/niess/python-appimage/releases/download/python3.7/python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
Resolving github.com (github.com)... 140.82.114.3
Connecting to github.com (github.com)|140.82.114.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/251001753/634da600-be6c-11ea-8fe6-3ab6eba8b271?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200708%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200708T141807Z&X-Amz-Expires=300&X-Amz-Signature=7a700b40a3c565b37f06822d7ee944a86d781f0f9f6c2dabc066af447a0dced3&X-Amz-SignedHeaders=host&actor_id=0&repo_id=251001753&response-content-disposition=attachment%3B%20filename%3Dpython3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage&response-content-type=application%2Foctet-stream [following]
- --2020-07-08 20:03:06--  https://github-production-release-asset-2e65be.s3.amazonaws.com/251001753/634da600-be6c-11ea-8fe6-3ab6eba8b271?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200708%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200708T141807Z&X-Amz-Expires=300&X-Amz-Signature=7a700b40a3c565b37f06822d7ee944a86d781f0f9f6c2dabc066af447a0dced3&X-Amz-SignedHeaders=host&actor_id=0&repo_id=251001753&response-content-disposition=attachment%3B%20filename%3Dpython3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.217.65.4
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.217.65.4|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 17621032 (17M) [application/octet-stream]
Saving to: ‘python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage’

python3.7.8-cp37-cp 100%[===================>]  16.80M   342KB/s    in 50s     

2020-07-08 20:03:57 (343 KB/s) - ‘python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage’ saved [17621032/17621032]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
- --2020-07-08 20:03:57--  https://github.com/AppImage/AppImageKit/releases/download/12/appimagetool-x86_64.AppImage
Resolving github.com (github.com)... 140.82.114.3
Connecting to github.com (github.com)|140.82.114.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/9435153/b74f7000-6c54-11e9-90c2-1f11aaf02f75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200708%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200708T141859Z&X-Amz-Expires=300&X-Amz-Signature=af11af131803c645e7684d47ef3f9d66ea003c0538ef0bd6835bebf33f26e0ad&X-Amz-SignedHeaders=host&actor_id=0&repo_id=9435153&response-content-disposition=attachment%3B%20filename%3Dappimagetool-x86_64.AppImage&response-content-type=application%2Foctet-stream [following]
- --2020-07-08 20:03:59--  https://github-production-release-asset-2e65be.s3.amazonaws.com/9435153/b74f7000-6c54-11e9-90c2-1f11aaf02f75?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200708%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200708T141859Z&X-Amz-Expires=300&X-Amz-Signature=af11af131803c645e7684d47ef3f9d66ea003c0538ef0bd6835bebf33f26e0ad&X-Amz-SignedHeaders=host&actor_id=0&repo_id=9435153&response-content-disposition=attachment%3B%20filename%3Dappimagetool-x86_64.AppImage&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.248.28
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.248.28|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1974248 (1.9M) [application/octet-stream]
Saving to: ‘appimagetool-x86_64.AppImage’

appimagetool-x86_64 100%[===================>]   1.88M   248KB/s    in 9.9s    

2020-07-08 20:04:10 (194 KB/s) - ‘appimagetool-x86_64.AppImage’ saved [1974248/1974248]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} --output-document=squashfs4.4.tar.gz https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download
- --2020-07-08 20:04:10--  https://sourceforge.net/projects/squashfs/files/squashfs/squashfs4.4/squashfs4.4.tar.gz/download
Resolving sourceforge.net (sourceforge.net)... 216.105.38.13
Connecting to sourceforge.net (sourceforge.net)|216.105.38.13|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://downloads.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz?r=&ts=1594217952&use_mirror=nchc [following]
- --2020-07-08 20:04:12--  https://downloads.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz?r=&ts=1594217952&use_mirror=nchc
Resolving downloads.sourceforge.net (downloads.sourceforge.net)... 216.105.38.13
Connecting to downloads.sourceforge.net (downloads.sourceforge.net)|216.105.38.13|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://nchc.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz [following]
- --2020-07-08 20:04:14--  https://nchc.dl.sourceforge.net/project/squashfs/squashfs/squashfs4.4/squashfs4.4.tar.gz
Resolving nchc.dl.sourceforge.net (nchc.dl.sourceforge.net)... 140.110.96.69, 2001:e10:ffff:1f02::17
Connecting to nchc.dl.sourceforge.net (nchc.dl.sourceforge.net)|140.110.96.69|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 190797 (186K) [application/x-gzip]
Saving to: ‘squashfs4.4.tar.gz’

squashfs4.4.tar.gz  100%[===================>] 186.33K   126KB/s    in 1.5s    

2020-07-08 20:04:17 (126 KB/s) - ‘squashfs4.4.tar.gz’ saved [190797/190797]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # misc windows
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe
- --2020-07-08 20:04:17--  https://www.python.org/ftp/python/3.7.8/python-3.7.8-amd64.exe
Resolving www.python.org (www.python.org)... 151.101.152.223, 2a04:4e42:24::223
Connecting to www.python.org (www.python.org)|151.101.152.223|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 26993432 (26M) [application/octet-stream]
Saving to: ‘python-3.7.8-amd64.exe’

python-3.7.8-amd64. 100%[===================>]  25.74M   144KB/s    in 48s     

2020-07-08 20:05:05 (549 KB/s) - ‘python-3.7.8-amd64.exe’ saved [26993432/26993432]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # misc macos
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
- --2020-07-08 20:05:05--  https://github.com/libusb/libusb/releases/download/v1.0.23/libusb-1.0.23.tar.bz2
Resolving github.com (github.com)... 140.82.112.3
Connecting to github.com (github.com)|140.82.112.3|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/15120676/df4ea600-c99e-11e9-98f0-1fd214aa18e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200708%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200708T142009Z&X-Amz-Expires=300&X-Amz-Signature=0479b639893d0ca39276a3622d0f13161487ea337c37bb81ca2bcb2e02c03e42&X-Amz-SignedHeaders=host&actor_id=0&repo_id=15120676&response-content-disposition=attachment%3B%20filename%3Dlibusb-1.0.23.tar.bz2&response-content-type=application%2Foctet-stream [following]
- --2020-07-08 20:05:09--  https://github-production-release-asset-2e65be.s3.amazonaws.com/15120676/df4ea600-c99e-11e9-98f0-1fd214aa18e3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200708%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200708T142009Z&X-Amz-Expires=300&X-Amz-Signature=0479b639893d0ca39276a3622d0f13161487ea337c37bb81ca2bcb2e02c03e42&X-Amz-SignedHeaders=host&actor_id=0&repo_id=15120676&response-content-disposition=attachment%3B%20filename%3Dlibusb-1.0.23.tar.bz2&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.216.18.48
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.216.18.48|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 602860 (589K) [application/octet-stream]
Saving to: ‘libusb-1.0.23.tar.bz2’

libusb-1.0.23.tar.b 100%[===================>] 588.73K   225KB/s    in 2.6s    

2020-07-08 20:05:14 (225 KB/s) - ‘libusb-1.0.23.tar.bz2’ saved [602860/602860]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
- --2020-07-08 20:05:14--  https://homebrew.bintray.com/bottles/wget-1.20.3_2.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 52.41.115.189, 52.88.32.158, 54.148.239.199, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|52.41.115.189|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/ef/ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c?__gda__=exp=1594218736~hmac=ce7e18d85575352591c66eedf88445fec867b39c87ef3050c93261d8fac12c61&response-content-disposition=attachment%3Bfilename%3D%22wget-1.20.3_2.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX18kU_ZsbBZpc4nNvyjBivybI64lbMw7zQR5dY_kmkx0gg2JPp3-vVsW86K1I5PSCCQweYE3TgXE3DYdR4zrBjC3WRjwHBDZeEbZOY-sHom1WtzcMvaDSs__CGYs7QTFpEDy1SPyEFs9JQ&response-X-Checksum-Sha1=4945368618ce4b78f1f0ae6531c7e17dfaf07ee0&response-X-Checksum-Sha2=ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c [following]
- --2020-07-08 20:05:15--  https://akamai.bintray.com/ef/ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c?__gda__=exp=1594218736~hmac=ce7e18d85575352591c66eedf88445fec867b39c87ef3050c93261d8fac12c61&response-content-disposition=attachment%3Bfilename%3D%22wget-1.20.3_2.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX18kU_ZsbBZpc4nNvyjBivybI64lbMw7zQR5dY_kmkx0gg2JPp3-vVsW86K1I5PSCCQweYE3TgXE3DYdR4zrBjC3WRjwHBDZeEbZOY-sHom1WtzcMvaDSs__CGYs7QTFpEDy1SPyEFs9JQ&response-X-Checksum-Sha1=4945368618ce4b78f1f0ae6531c7e17dfaf07ee0&response-X-Checksum-Sha2=ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c
Resolving akamai.bintray.com (akamai.bintray.com)... 23.210.77.116
Connecting to akamai.bintray.com (akamai.bintray.com)|23.210.77.116|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1447728 (1.4M) [application/gzip]
Saving to: ‘wget-1.20.3_2.catalina.bottle.tar.gz’

wget-1.20.3_2.catal 100%[===================>]   1.38M  2.99MB/s    in 0.5s    

2020-07-08 20:05:17 (2.99 MB/s) - ‘wget-1.20.3_2.catalina.bottle.tar.gz’ saved [1447728/1447728]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
- --2020-07-08 20:05:17--  https://homebrew.bintray.com/bottles/python-3.7.8.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 52.41.115.189, 52.88.32.158, 54.148.239.199, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|52.41.115.189|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/f7/f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2?__gda__=exp=1594218738~hmac=741431ae50c560e3228bb56e3fd1276018c04aec9ae82ff73621b886d7c4a1e8&response-content-disposition=attachment%3Bfilename%3D%22python-3.7.8.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX182bKEU_bz7h3G43MEuR74MNZUXGB-BuDQfrXcH3nn3XPy6h8L2Cs_RkxMbhPTkj-ADf3nhijq18q1CXXu50RKOa4sILZ_PPMWm_cr4BMksdPuN552o6Gl8q4S6zABTIXmnt6CovAvm1g&response-X-Checksum-Sha1=389922ed3f4fee99c77fcd1523958e8079e5d7e2&response-X-Checksum-Sha2=f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2 [following]
- --2020-07-08 20:05:18--  https://akamai.bintray.com/f7/f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2?__gda__=exp=1594218738~hmac=741431ae50c560e3228bb56e3fd1276018c04aec9ae82ff73621b886d7c4a1e8&response-content-disposition=attachment%3Bfilename%3D%22python-3.7.8.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX182bKEU_bz7h3G43MEuR74MNZUXGB-BuDQfrXcH3nn3XPy6h8L2Cs_RkxMbhPTkj-ADf3nhijq18q1CXXu50RKOa4sILZ_PPMWm_cr4BMksdPuN552o6Gl8q4S6zABTIXmnt6CovAvm1g&response-X-Checksum-Sha1=389922ed3f4fee99c77fcd1523958e8079e5d7e2&response-X-Checksum-Sha2=f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2
Resolving akamai.bintray.com (akamai.bintray.com)... 23.210.77.116
Connecting to akamai.bintray.com (akamai.bintray.com)|23.210.77.116|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 15686427 (15M) [application/gzip]
Saving to: ‘python-3.7.8.catalina.bottle.tar.gz’

python-3.7.8.catali 100%[===================>]  14.96M  3.49MB/s    in 7.2s    

2020-07-08 20:05:25 (2.07 MB/s) - ‘python-3.7.8.catalina.bottle.tar.gz’ saved [15686427/15686427]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
- --2020-07-08 20:05:25--  https://homebrew.bintray.com/bottles/sdl2-2.0.12_1.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.161.162.245, 52.41.115.189, 52.88.32.158, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.161.162.245|:443... connected.
HTTP request sent, awaiting response... 302 
Location: https://akamai.bintray.com/4d/4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63?__gda__=exp=1594218748~hmac=5956bdedb869c105bda0b14780d9303ff0dcfc433d4589e0a38ec912d396aa51&response-content-disposition=attachment%3Bfilename%3D%22sdl2-2.0.12_1.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX1_PYRLZo3tEe_00-1MlFVDx4qGh-9OujkHID4g0uwLipOOAGTVNkO1x9cE5ASM29gjUYJAbp06fPmpkl_ZKC-4S8KraV1WGJQUJe32QUmoWdIdaKorWgvH7pq69bnreMxM710jx3rhAcw&response-X-Checksum-Sha1=5f49d6327da8376e1f11698a8698549c66b406be&response-X-Checksum-Sha2=4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63 [following]
- --2020-07-08 20:05:27--  https://akamai.bintray.com/4d/4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63?__gda__=exp=1594218748~hmac=5956bdedb869c105bda0b14780d9303ff0dcfc433d4589e0a38ec912d396aa51&response-content-disposition=attachment%3Bfilename%3D%22sdl2-2.0.12_1.catalina.bottle.tar.gz%22&response-content-type=application%2Fgzip&requestInfo=U2FsdGVkX1_PYRLZo3tEe_00-1MlFVDx4qGh-9OujkHID4g0uwLipOOAGTVNkO1x9cE5ASM29gjUYJAbp06fPmpkl_ZKC-4S8KraV1WGJQUJe32QUmoWdIdaKorWgvH7pq69bnreMxM710jx3rhAcw&response-X-Checksum-Sha1=5f49d6327da8376e1f11698a8698549c66b406be&response-X-Checksum-Sha2=4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63
Resolving akamai.bintray.com (akamai.bintray.com)... 23.210.77.116
Connecting to akamai.bintray.com (akamai.bintray.com)|23.210.77.116|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1340186 (1.3M) [application/gzip]
Saving to: ‘sdl2-2.0.12_1.catalina.bottle.tar.gz’

sdl2-2.0.12_1.catal 100%[===================>]   1.28M  1.07MB/s    in 1.2s    

2020-07-08 20:05:29 (1.07 MB/s) - ‘sdl2-2.0.12_1.catalina.bottle.tar.gz’ saved [1340186/1340186]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
- --2020-07-08 20:05:29--  https://homebrew.bintray.com/bottles/sdl2_image-2.0.5.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 52.41.115.189, 52.88.32.158, 54.148.239.199, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|52.41.115.189|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 130381 (127K) [application/gzip]
Saving to: ‘sdl2_image-2.0.5.catalina.bottle.tar.gz’

sdl2_image-2.0.5.ca 100%[===================>] 127.33K  50.0KB/s    in 2.5s    

2020-07-08 20:05:34 (50.0 KB/s) - ‘sdl2_image-2.0.5.catalina.bottle.tar.gz’ saved [130381/130381]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
- --2020-07-08 20:05:34--  https://homebrew.bintray.com/bottles/sdl2_ttf-2.0.15.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 54.148.239.199, 35.161.162.245, 52.41.115.189, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|54.148.239.199|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 24032 (23K) [application/gzip]
Saving to: ‘sdl2_ttf-2.0.15.catalina.bottle.tar.gz’

sdl2_ttf-2.0.15.cat 100%[===================>]  23.47K  85.9KB/s    in 0.3s    

2020-07-08 20:05:35 (85.9 KB/s) - ‘sdl2_ttf-2.0.15.catalina.bottle.tar.gz’ saved [24032/24032]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ ${WGET} https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz
- --2020-07-08 20:05:35--  https://homebrew.bintray.com/bottles/sdl2_mixer-2.0.4.catalina.bottle.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 35.161.162.245, 52.41.115.189, 52.88.32.158, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|35.161.162.245|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 130686 (128K) [application/gzip]
Saving to: ‘sdl2_mixer-2.0.4.catalina.bottle.tar.gz’

sdl2_mixer-2.0.4.ca 100%[===================>] 127.62K  78.7KB/s    in 1.6s    

2020-07-08 20:05:38 (78.7 KB/s) - ‘sdl2_mixer-2.0.4.catalina.bottle.tar.gz’ saved [130686/130686]

user@disp5769:/tmp/tmp.gIvKNLsGZt$ echo $?
0
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 
user@disp5769:/tmp/tmp.gIvKNLsGZt$ # get checksums
user@disp5769:/tmp/tmp.gIvKNLsGZt$ sha256sum *
c623e5f3408ca61d4016f23a681b9adb100802ca3e3da5e718915a9e4052cebe  altgraph-0.17-py2.py3-none-any.whl
d918b4df547b388ef253f3c9e7f6529ca81a885395c31f619d9aaf7030499a13  appimagetool-x86_64.AppImage
8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41  certifi-2020.6.20-py2.py3-none-any.whl
fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691  chardet-3.0.4-py2.py3-none-any.whl
0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af  docutils-0.16-py2.py3-none-any.whl
b1bead90b70cf6ec3f0710ae53a525360fa360d306a86583adc6bf83a4db537d  future-0.18.2.tar.gz
b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0  idna-2.10-py2.py3-none-any.whl
8819a27a09871af451760cb69486ced52e830c8a0a37480f22ef5e692f12c05b  Kivy-1.11.1-cp37-cp37m-macosx_10_6_intel.macosx_10_9_intel.macosx_10_9_x86_64.macosx_10_10_intel.macosx_10_10_x86_64.whl
1d28b198a64c30db8d94a0488e85f3037af60d514ab0d7ad5ab45add3ab77090  Kivy-1.11.1-cp37-cp37m-win_amd64.whl
4d0e596f74271e901b551f77661dde238df4765484fce9f5d1c72e8022984e84  Kivy-1.11.1.tar.gz
5736da2eaadd9061a7921944126a8c8ad95fe8420ea96b1e4770b0b7a67af88e  kivy_deps.angle-0.2.0-cp37-cp37m-win_amd64.whl
738a222f16b032b5ccd4c686fc51e678d95e4c1f13c57f32233d3cb8aa2f34bf  kivy_deps.glew-0.2.0-cp37-cp37m-win_amd64.whl
c2e1721aac0709f21835c8dd4aec5adea2d58e5df92005585f94d13bed2a2e06  kivy_deps.sdl2-0.2.0-cp37-cp37m-win_amd64.whl
c256f42788421273a08fbb0a228f0fb0e80dd86b629fb8c0920507f645be6c72  kivy-garden-0.1.4.tar.gz
db11c06e958a82dac52cf3c65cb4dd2c3f339c8a988665110e0d24d19312ad8d  libusb-1.0.23.tar.bz2
240f65ac70ba3fab77749ec84a412e4e89624804cb80d6c9d394eef5af8878d6  libusb1-1.8.tar.gz
c500f02867515e6c60a27875b408920d18332ddf96b4035ef03beddd782d4281  macholib-1.14-py2.py3-none-any.whl
a5d6e8305c6b210849b47a6174ddf9c452b2888340b8177874b862ba6c207645  pefile-2019.4.18.tar.gz
ff7a40b4860b727ab48fad6360eb351cc1b33cbf9b15a0f689ca5353e9463324  Pygments-2.6.1-py3-none-any.whl
3730fa80d088f8bb7084d32480eb87cbb4ddb64123363763cf8f2a1378c1c4b7  PyInstaller-3.6.tar.gz
67adf399debc1d5d14dffc1ab5acacb800da569754fafdc576b2a039485aa775  pypiwin32-223-py3-none-any.whl
a43ed63251a5e0d2cf1bbe9f6a75389675d091aaeeaae5d1be27ffb2e329e373  python-3.7.8-amd64.exe
f7fb660ba03f202d739f38ded3ac5952569103855d8a8e9aa1a7bfff764bdfc2  python-3.7.8.catalina.bottle.tar.gz
aafa857bdd6e01211e1dc11c00b2c207481606d869ae3ba73432db24a35add9f  python3.7.8-cp37-cp37m-manylinux2014_x86_64.AppImage
00eaf43dbd05ba6a9b0080c77e161e0b7a601f9a3f660727a952e40140537de7  pywin32-228-cp37-cp37m-win_amd64.whl
9dc2d991b3479cc2df15930958b674a48a227d5361d413827a4cfd0b5876fc98  pywin32_ctypes-0.2.0-py2.py3-none-any.whl
fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898  requests-2.24.0-py2.py3-none-any.whl
4dcd635465d16372ca7a7bb2b94221aa21de02f681a22e9239d095b66fb00c63  sdl2-2.0.12_1.catalina.bottle.tar.gz
691d5407fef2bc374ac3b7c2fafbe46a6bc0f9ed609f98812b24fec33ab9bd27  sdl2_image-2.0.5.catalina.bottle.tar.gz
419d988dc795842301df16d2e57f7759417708b0d61466fea7ec1685db77bf1d  sdl2_mixer-2.0.4.catalina.bottle.tar.gz
745d9593a0e07a70b617ace17d92b6a6555825484e47e569130eba8b05e82f2b  sdl2_ttf-2.0.15.catalina.bottle.tar.gz
daf2e1c215f805b0ddc3b4262886bb6667ae0d4563887a8374fb766adc47c324  setuptools-49.1.0-py3-none-any.whl
a981b3f3f2054b5a2e658851a3c06a2460ad04a9a8a645e0afe063a63fdbb07e  squashfs4.4.tar.gz
88206b0eb87e6d677d424843ac5209e3fb9d0190d0ee169599165ec25e9d9115  urllib3-1.25.9-py2.py3-none-any.whl
ef65c759c5097a36323fa9c77756468649e8d1980a3a4e05695c05e39568967c  wget-1.20.3_2.catalina.bottle.tar.gz
user@disp5769:/tmp/tmp.gIvKNLsGZt$ 

-----BEGIN PGP SIGNATURE-----
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=JMUR
-----END PGP SIGNATURE-----

from buskill-app.

maltfield commented on June 14, 2024

I updated the linux build script to install kivy from the files downloaded (I ended up downloading and using the assets at build-time without re-downloading [rather than just adding the hash check] to prevent 404s from breaking the build scripts years into the future), but it fails with the error:

2020-07-08T21:09:24.0804277Z + /usr/bin/firejail --noprofile --net=none /tmp/kivy_appdir/opt/python3.7/bin/python3.7 -m pip install --ignore-installed --upgrade --cache-dir build/deps/ build/deps/Kivy-1.11.1.tar.gz
2020-07-08T21:09:24.0804603Z /__w/buskill-app/buskill-app
2020-07-08T21:09:24.0812980Z Warning: an existing sandbox was detected. /tmp/kivy_appdir/opt/python3.7/bin/python3.7 will run without any additional sandboxing features
2020-07-08T21:09:25.3953139Z Processing ./build/deps/Kivy-1.11.1.tar.gz
2020-07-08T21:09:26.5699201Z     ERROR: Command errored out with exit status 1:
2020-07-08T21:09:26.5701026Z      command: /tmp/kivy_appdir/opt/python3.7/bin/python3.7 -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-req-build-e4kkhr3_/setup.py'"'"'; __file__='"'"'/tmp/pip-req-build-e4kkhr3_/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(__file__);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, __file__, '"'"'exec'"'"'))' egg_info --egg-base /tmp/pip-pip-egg-info-kfdsg8a0
2020-07-08T21:09:26.5701553Z          cwd: /tmp/pip-req-build-e4kkhr3_/
2020-07-08T21:09:26.5701703Z     Complete output (42 lines):
2020-07-08T21:09:26.5701831Z      Traceback (most recent call last):
2020-07-08T21:09:26.5701969Z        File "<string>", line 1, in <module>
2020-07-08T21:09:26.5702318Z        File "/tmp/pip-req-build-e4kkhr3_/setup.py", line 1075, in <module>
2020-07-08T21:09:26.5702466Z          version=get_version(),
2020-07-08T21:09:26.5702807Z        File "/tmp/pip-req-build-e4kkhr3_/setup.py", line 56, in get_version
2020-07-08T21:09:26.5703140Z          epoch = int(environ.get('SOURCE_DATE_EPOCH', time()))
2020-07-08T21:09:26.5703470Z      ValueError: invalid literal for int() with base 10: ''
2020-07-08T21:09:26.5703610Z     Using setuptools
2020-07-08T21:09:26.5703729Z     Using this graphics system: OpenGL
2020-07-08T21:09:26.5704109Z     WARNING: A problem occurred while running pkg-config --libs --cflags gstreamer-1.0 (code 127)
2020-07-08T21:09:26.5704262Z     
2020-07-08T21:09:26.5704565Z     b'/bin/sh: 1: pkg-config: not found\n'
2020-07-08T21:09:26.5704696Z     
2020-07-08T21:09:26.5705087Z     WARNING: A problem occurred while running pkg-config --libs --cflags sdl2 SDL2_ttf SDL2_image SDL2_mixer (code 127)
2020-07-08T21:09:26.5705241Z     
2020-07-08T21:09:26.5705526Z     b'/bin/sh: 1: pkg-config: not found\n'
2020-07-08T21:09:26.5705659Z     
2020-07-08T21:09:26.5705993Z     WARNING: A problem occurred while running pkg-config --libs --cflags pangoft2 (code 127)
2020-07-08T21:09:26.5706144Z     
2020-07-08T21:09:26.5706430Z     b'/bin/sh: 1: pkg-config: not found\n'
2020-07-08T21:09:26.5706558Z     
2020-07-08T21:09:26.5706692Z     ERROR: Dependency for context.pyx not resolved: config.pxi
2020-07-08T21:09:26.5706842Z     ERROR: Dependency for compiler.pyx not resolved: config.pxi
2020-07-08T21:09:26.5706996Z     ERROR: Dependency for context_instructions.pyx not resolved: config.pxi
2020-07-08T21:09:26.5707139Z     ERROR: Dependency for fbo.pyx not resolved: config.pxi
2020-07-08T21:09:26.5707435Z     ERROR: Dependency for gl_instructions.pyx not resolved: config.pxi
2020-07-08T21:09:26.5707591Z     ERROR: Dependency for instructions.pyx not resolved: config.pxi
2020-07-08T21:09:26.5707747Z     ERROR: Dependency for opengl.pyx not resolved: config.pxi
2020-07-08T21:09:26.5707900Z     ERROR: Dependency for opengl_utils.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708050Z     ERROR: Dependency for shader.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708201Z     ERROR: Dependency for stencil_instructions.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708358Z     ERROR: Dependency for scissor_instructions.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708513Z     ERROR: Dependency for texture.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708646Z     ERROR: Dependency for vbo.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708799Z     ERROR: Dependency for vertex.pyx not resolved: config.pxi
2020-07-08T21:09:26.5708947Z     ERROR: Dependency for vertex_instructions.pyx not resolved: config.pxi
2020-07-08T21:09:26.5709108Z     ERROR: Dependency for cgl.pyx not resolved: config.pxi
2020-07-08T21:09:26.5709254Z     ERROR: Dependency for cgl_mock.pyx not resolved: config.pxi
2020-07-08T21:09:26.5709405Z     ERROR: Dependency for cgl_gl.pyx not resolved: config.pxi
2020-07-08T21:09:26.5709552Z     ERROR: Dependency for cgl_glew.pyx not resolved: config.pxi
2020-07-08T21:09:26.5709699Z     ERROR: Dependency for cgl_sdl2.pyx not resolved: config.pxi
2020-07-08T21:09:26.5709848Z     ERROR: Dependency for svg.pyx not resolved: config.pxi
2020-07-08T21:09:26.5710192Z     ----------------------------------------
2020-07-08T21:09:26.5710357Z ERROR: Command errored out with exit status 1: python setup.py egg_info Check the logs for full command output.

I noticed that the pip download kivy==1.11.1 from the above runs downloads a Kivy-1.11.1.tar.gz file, which I guess is the Kivy sources that have to be compiled. That's what's failing here.

user@disp6960:~$ pushd `mktemp -d`
/tmp/tmp.M7PRPpJTeK ~
user@disp6960:/tmp/tmp.M7PRPpJTeK$ python3 -m pip download kivy==1.11.1
...
user@disp6960:/tmp/tmp.M7PRPpJTeK$ ls
certifi-2020.6.20-py2.py3-none-any.whl  kivy-garden-0.1.4.tar.gz
chardet-3.0.4-py2.py3-none-any.whl      Pygments-2.6.1-py3-none-any.whl
docutils-0.16-py2.py3-none-any.whl      requests-2.24.0-py2.py3-none-any.whl
idna-2.10-py2.py3-none-any.whl          urllib3-1.25.9-py2.py3-none-any.whl
Kivy-1.11.1.tar.gz
user@disp6960:/tmp/tmp.M7PRPpJTeK$

I know I've gotten the wheel to download in the past, but I've been unable to force it unless I explicitly set the platform like so

user@disp389:/tmp/tmp.GTEytVvcwi$ python3 -m pip download --no-deps --platform manylinux2010_x86_64 kivy==1.11.1
Collecting kivy==1.11.1
  Using cached https://files.pythonhosted.org/packages/aa/20/8d5553d7bb57dfae0ac9c1a68532f8cbdb017baee154f649b90ee012317b/Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
  Saved ./Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
Successfully downloaded kivy
user@disp389:/tmp/tmp.GTEytVvcwi$ ls
Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
user@disp389:/tmp/tmp.GTEytVvcwi$

from buskill-app.

maltfield commented on June 14, 2024

Ah, I think the reason that the kivy manylinux2010_x86_64 binaries wouldn't be downloaded was becuase pip was too old of a version.

user@disp6906:~$ pushd `mktemp -d`
/tmp/tmp.x9XZhLhn0a ~
user@disp6906:/tmp/tmp.x9XZhLhn0a$ python3 -m pip --version
pip 18.1 from /usr/lib/python3/dist-packages/pip (python 3.7)
user@disp6906:/tmp/tmp.x9XZhLhn0a$ python3 -m pip download --no-cache-dir --no-deps kivy==1.11.1
Collecting kivy==1.11.1
  Downloading https://files.pythonhosted.org/packages/1b/4d/3f8a720f561dc1eabe036c0d87c6ce9d02823275391265538e606f45e37a/Kivy-1.11.1.tar.gz (23.6MB)
    100% || 23.6MB 5.8MB/s 
  Saved ./Kivy-1.11.1.tar.gz
Successfully downloaded kivy
user@disp6906:/tmp/tmp.x9XZhLhn0a$ ls
Kivy-1.11.1.tar.gz
user@disp6906:/tmp/tmp.x9XZhLhn0a$

When I upgrade pip (from v18.1 to v20.1.1), then it gets the wheel instead of the tarball.

user@disp6906:/tmp/tmp.x9XZhLhn0a$ python3 -m pip install --upgrade pip
Collecting pip
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 561kB/s 
Installing collected packages: pip
Successfully installed pip-20.1.1
user@disp6906:/tmp/tmp.x9XZhLhn0a$ python3 -m pip download --no-cache-dir --no-deps kivy==1.11.1
Collecting kivy==1.11.1
  Downloading Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl (28.3 MB)
     || 28.3 MB 539 kB/s 
  Saved ./Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
Successfully downloaded kivy
user@disp6906:/tmp/tmp.x9XZhLhn0a$ ls
Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl  Kivy-1.11.1.tar.gz
user@disp6906:/tmp/tmp.x9XZhLhn0a$

Per the pypa/manylinux github repo, manylinux2010 requires pip >= 19.0.

from buskill-app.

maltfield commented on June 14, 2024

I was successfully able to build the app for linux without downloading any files using insecure package managers/wget/curl for the first time here:

https://github.com/BusKill/buskill-app/releases/tag/162637988_linux

Tomorrow I'll try to get this working for mac and Windows. I'll keep a record of all the packages missed in the above TOFU checks below, and after I get it working I'll do a fresh 3TOFU with all these additional assets, verify the checksums in the repo match all three of my tests, and then this ticket will be done.

sudo apt-get update
sudo apt-get -y install python3-pip python3-setuptools

CURL="/usr/bin/curl"
WGET="/usr/bin/wget --retry-on-host-error --retry-connrefused"
PYTHON="/usr/bin/python3"

# in tails, we must torify
if [[ "`whoami`" == "amnesia" ]]; then
	CURL="/usr/bin/torify ${CURL}"
	WGET="/usr/bin/torify ${WGET}"
	PYTHON="/usr/bin/torify ${PYTHON}"
fi

tmpDir=`mktemp -d`
pushd "${tmpDir}"

# first get some info about our internet connection
${CURL} -s https://ifconfig.co/country | head -n1
${CURL} -s https://check.torproject.org | grep Congratulations | head -n1

# and today's date
date -u +"%Y-%m-%d"

# first download and upgrade pip (required to get some wheels)
${PYTHON} -m pip download --no-cache-dir pip==20.1.1
${PYTHON} -m pip install --upgrade pip==20.1.1

# pip (all platforms)
${PYTHON} -m pip download --no-cache-dir kivy==1.11.1 setuptools==49.1.0 wheel==0.34.2 virtualenv==20.0.26

# misc macos
${WGET} https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz

# get checksums
sha256sum *

from buskill-app.

maltfield commented on June 14, 2024

I finished updating the MacOS build script to install all its depends from the repo without downloading anything.

I had to add setuptoolls & wheel to the pip assets and libmodplug to the brew assets; they've been added to the second-round checksum validation script above; I'll finish it after I do the windows script.

from buskill-app.

maltfield commented on June 14, 2024

I finished updating the Windows build script to install all its depends from the repo without downloading anything.

I didn't have to add any depends to our build/depends/ asset dir to get the windows build functional, so next I'll be doing 3TOFU to confirm the integrity of the files added to the repo.

from buskill-app.

maltfield commented on June 14, 2024

Here's TOFU 1/3 in tails for the second round of dependencies

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Today (2020-07-10) I downloaded the second round of buskill-app dependencies and took their checksums.

This first check was done in tails over tor. See the bottom of the log below for the sha256sum output.

amnesia@amnesia:~$ CURL="/usr/bin/curl"
amnesia@amnesia:~$ WGET="/usr/bin/wget --retry-on-host-error --retry-connrefused"
amnesia@amnesia:~$ PYTHON="/usr/bin/python3"
amnesia@amnesia:~$ 
amnesia@amnesia:~$ # in tails, we must torify
amnesia@amnesia:~$ if [[ "`whoami`" == "amnesia" ]]; then
> CURL="/usr/bin/torify ${CURL}"
> WGET="/usr/bin/torify ${WGET}"
> PYTHON="/usr/bin/torify ${PYTHON}"
> fi
amnesia@amnesia:~$ 
amnesia@amnesia:~$ tmpDir=`mktemp -d`
amnesia@amnesia:~$ pushd "${tmpDir}"
/tmp/tmp.yUaHuS5dHe ~
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ # first get some info about our internet connection
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ ${CURL} -s https://ifconfig.co/country | head -n1
<!DOCTYPE html>
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ ${CURL} -s https://check.torproject.org | grep Congratulations | head -n1
      Congratulations. This browser is configured to use Tor.
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ # and today's date
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ date -u +"%Y-%m-%d"
2020-07-10
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ # first download and upgrade pip (required to get some wheels)
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ ${PYTHON} -m pip download --no-cache-dir pip==20.1.1
Collecting pip==20.1.1
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 185kB/s 
  Saved ./pip-20.1.1-py2.py3-none-any.whl
Successfully downloaded pip
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ ${PYTHON} -m pip install --upgrade pip==20.1.1
Collecting pip==20.1.1
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 283kB/s 
Installing collected packages: pip
Successfully installed pip-20.1.1
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ # pip (all platforms)
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ ${PYTHON} -m pip download --no-cache-dir kivy==1.11.1 setuptools==49.1.0 wheel==0.34.2 virtualenv==20.0.26
Collecting kivy==1.11.1
  Downloading Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl (28.3 MB)
     || 28.3 MB 539 kB/s 
  Saved ./Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
Collecting setuptools==49.1.0
  Downloading setuptools-49.1.0-py3-none-any.whl (789 kB)
     || 789 kB 393 kB/s 
  Saved ./setuptools-49.1.0-py3-none-any.whl
Collecting wheel==0.34.2
  Downloading wheel-0.34.2-py2.py3-none-any.whl (26 kB)
  Saved ./wheel-0.34.2-py2.py3-none-any.whl
Collecting virtualenv==20.0.26
  Downloading virtualenv-20.0.26-py2.py3-none-any.whl (4.9 MB)
     || 4.9 MB 298 kB/s 
  Saved ./virtualenv-20.0.26-py2.py3-none-any.whl
Collecting Kivy-Garden>=0.1.4
  Downloading kivy-garden-0.1.4.tar.gz (6.8 kB)
  Saved ./kivy-garden-0.1.4.tar.gz
Collecting pygments
  Downloading Pygments-2.6.1-py3-none-any.whl (914 kB)
     || 914 kB 291 kB/s 
  Saved ./Pygments-2.6.1-py3-none-any.whl
Collecting docutils
  Downloading docutils-0.16-py2.py3-none-any.whl (548 kB)
     || 548 kB 330 kB/s 
  Saved ./docutils-0.16-py2.py3-none-any.whl
Collecting importlib-metadata<2,>=0.12; python_version < "3.8"
  Downloading importlib_metadata-1.7.0-py2.py3-none-any.whl (31 kB)
  Saved ./importlib_metadata-1.7.0-py2.py3-none-any.whl
Collecting distlib<1,>=0.3.1
  Downloading distlib-0.3.1-py2.py3-none-any.whl (335 kB)
     || 335 kB 346 kB/s 
  Saved ./distlib-0.3.1-py2.py3-none-any.whl
Collecting appdirs<2,>=1.4.3
  Downloading appdirs-1.4.4-py2.py3-none-any.whl (9.6 kB)
  Saved ./appdirs-1.4.4-py2.py3-none-any.whl
Collecting filelock<4,>=3.0.0
  Downloading filelock-3.0.12-py3-none-any.whl (7.6 kB)
  Saved ./filelock-3.0.12-py3-none-any.whl
Collecting six<2,>=1.9.0
  Downloading six-1.15.0-py2.py3-none-any.whl (10 kB)
  Saved ./six-1.15.0-py2.py3-none-any.whl
Collecting requests
  Downloading requests-2.24.0-py2.py3-none-any.whl (61 kB)
     || 61 kB 333 kB/s 
  Saved ./requests-2.24.0-py2.py3-none-any.whl
Collecting zipp>=0.5
  Downloading zipp-3.1.0-py3-none-any.whl (4.9 kB)
  Saved ./zipp-3.1.0-py3-none-any.whl
Collecting chardet<4,>=3.0.2
  Downloading chardet-3.0.4-py2.py3-none-any.whl (133 kB)
     || 133 kB 57 kB/s 
  Saved ./chardet-3.0.4-py2.py3-none-any.whl
Collecting idna<3,>=2.5
  Downloading idna-2.10-py2.py3-none-any.whl (58 kB)
     || 58 kB 83 kB/s 
  Saved ./idna-2.10-py2.py3-none-any.whl
Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1
  Downloading urllib3-1.25.9-py2.py3-none-any.whl (126 kB)
     || 126 kB 72 kB/s 
  Saved ./urllib3-1.25.9-py2.py3-none-any.whl
Collecting certifi>=2017.4.17
  Downloading certifi-2020.6.20-py2.py3-none-any.whl (156 kB)
     || 156 kB 83 kB/s 
  Saved ./certifi-2020.6.20-py2.py3-none-any.whl
Successfully downloaded kivy setuptools wheel virtualenv Kivy-Garden pygments docutils importlib-metadata distlib appdirs filelock six requests zipp chardet idna urllib3 certifi
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ # misc macos
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ ${WGET} https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
- --2020-07-10 23:49:40--  https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 18.184.66.30
Connecting to homebrew.bintray.com (homebrew.bintray.com)|18.184.66.30|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 172703 (169K) [application/gzip]
Saving to: ‘libmodplug-0.8.9.0.catalina.bottle.1.tar.gz’

libmodplug-0.8.9.0. 100%[===================>] 168.66K  93.3KB/s    in 1.8s    

2020-07-10 23:49:44 (93.3 KB/s) - ‘libmodplug-0.8.9.0.catalina.bottle.1.tar.gz’ saved [172703/172703]

amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ # get checksums
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ sha256sum *
a841dacd6b99318a741b166adb07e19ee71a274450e68237b4650ca1055ab128  appdirs-1.4.4-py2.py3-none-any.whl
8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41  certifi-2020.6.20-py2.py3-none-any.whl
fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691  chardet-3.0.4-py2.py3-none-any.whl
8c09de2c67b3e7deef7184574fc060ab8a793e7adbb183d942c389c8b13c52fb  distlib-0.3.1-py2.py3-none-any.whl
0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af  docutils-0.16-py2.py3-none-any.whl
929b7d63ec5b7d6b71b0fa5ac14e030b3f70b75747cef1b10da9b879fef15836  filelock-3.0.12-py3-none-any.whl
b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0  idna-2.10-py2.py3-none-any.whl
dc15b2969b4ce36305c51eebe62d418ac7791e9a157911d58bfb1f9ccd8e2070  importlib_metadata-1.7.0-py2.py3-none-any.whl
1a1ff32f8a95f1e175198cbab81fcd2596783b180d4eafe63e87d171aa7fdb5e  Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
c256f42788421273a08fbb0a228f0fb0e80dd86b629fb8c0920507f645be6c72  kivy-garden-0.1.4.tar.gz
62cb39e81cea4111f72a3f594ac78557f6f6992ae964321632fda16a16c97bd2  libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
b27c4dedae8c41aa59108f2fa38bf78e0890e590545bc8ece7cdceb4ba60f6e4  pip-20.1.1-py2.py3-none-any.whl
ff7a40b4860b727ab48fad6360eb351cc1b33cbf9b15a0f689ca5353e9463324  Pygments-2.6.1-py3-none-any.whl
fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898  requests-2.24.0-py2.py3-none-any.whl
daf2e1c215f805b0ddc3b4262886bb6667ae0d4563887a8374fb766adc47c324  setuptools-49.1.0-py3-none-any.whl
8b74bedcbbbaca38ff6d7491d76f2b06b3592611af620f8426e82dddb04a5ced  six-1.15.0-py2.py3-none-any.whl
88206b0eb87e6d677d424843ac5209e3fb9d0190d0ee169599165ec25e9d9115  urllib3-1.25.9-py2.py3-none-any.whl
c11a475400e98450403c0364eb3a2d25d42f71cf1493da64390487b666de4324  virtualenv-20.0.26-py2.py3-none-any.whl
df277cb51e61359aba502208d680f90c0493adec6f0e848af94948778aed386e  wheel-0.34.2-py2.py3-none-any.whl
aa36550ff0c0b7ef7fa639055d797116ee891440eac1a56f378e2d3179e0320b  zipp-3.1.0-py3-none-any.whl
amnesia@amnesia:/tmp/tmp.yUaHuS5dHe$ 

-----BEGIN PGP SIGNATURE-----
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=eOMd
-----END PGP SIGNATURE-----

from buskill-app.

maltfield commented on June 14, 2024

Here's TOFU 2/3 in tails for the second round of dependencies

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Today (2020-07-11) I downloaded the second round of buskill-app dependencies and took their checksums.

This second check was done in through my ISP based in Nepal. See the bottom of the log below for the sha256sum output.

user@disp4709:~$ CURL="/usr/bin/curl"
user@disp4709:~$ WGET="/usr/bin/wget --retry-on-host-error --retry-connrefused"
user@disp4709:~$ PYTHON="/usr/bin/python3"
user@disp4709:~$ 
user@disp4709:~$ # in tails, we must torify
user@disp4709:~$ if [[ "`whoami`" == "amnesia" ]]; then
> CURL="/usr/bin/torify ${CURL}"
> WGET="/usr/bin/torify ${WGET}"
> PYTHON="/usr/bin/torify ${PYTHON}"
> fi
user@disp4709:~$ 
user@disp4709:~$ tmpDir=`mktemp -d`
user@disp4709:~$ pushd "${tmpDir}"
/tmp/tmp.CAS9OQ86KS ~
user@disp4709:/tmp/tmp.CAS9OQ86KS$ 
user@disp4709:/tmp/tmp.CAS9OQ86KS$ # first get some info about our internet connection
user@disp4709:/tmp/tmp.CAS9OQ86KS$ ${CURL} -s https://ifconfig.co/country | head -n1
Nepal
user@disp4709:/tmp/tmp.CAS9OQ86KS$ ${CURL} -s https://check.torproject.org | grep Congratulations | head -n1
user@disp4709:/tmp/tmp.CAS9OQ86KS$ 
user@disp4709:/tmp/tmp.CAS9OQ86KS$ # and today's date
user@disp4709:/tmp/tmp.CAS9OQ86KS$ date -u +"%Y-%m-%d"
2020-07-11
user@disp4709:/tmp/tmp.CAS9OQ86KS$ 
user@disp4709:/tmp/tmp.CAS9OQ86KS$ # first download and upgrade pip (required to get some wheels)
user@disp4709:/tmp/tmp.CAS9OQ86KS$ ${PYTHON} -m pip download --no-cache-dir pip==20.1.1
Collecting pip==20.1.1
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 6.2MB/s 
  Saved ./pip-20.1.1-py2.py3-none-any.whl
Successfully downloaded pip
user@disp4709:/tmp/tmp.CAS9OQ86KS$ ${PYTHON} -m pip install --upgrade pip==20.1.1
Collecting pip==20.1.1
  Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x73ed04a13668>: Failed to establish a new connection: [Errno 101] Network is unreachable')': /packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 507kB/s 
Installing collected packages: pip
Successfully installed pip-20.1.1
user@disp4709:/tmp/tmp.CAS9OQ86KS$ 
user@disp4709:/tmp/tmp.CAS9OQ86KS$ # pip (all platforms)
user@disp4709:/tmp/tmp.CAS9OQ86KS$ ${PYTHON} -m pip download --no-cache-dir kivy==1.11.1 setuptools==49.1.0 wheel==0.34.2 virtualenv==20.0.26
Collecting kivy==1.11.1
  Downloading Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl (28.3 MB)
     || 28.3 MB 2.0 MB/s 
  Saved ./Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
Collecting setuptools==49.1.0
  Downloading setuptools-49.1.0-py3-none-any.whl (789 kB)
     || 789 kB 2.4 MB/s 
  Saved ./setuptools-49.1.0-py3-none-any.whl
Collecting wheel==0.34.2
  Downloading wheel-0.34.2-py2.py3-none-any.whl (26 kB)
  Saved ./wheel-0.34.2-py2.py3-none-any.whl
Collecting virtualenv==20.0.26
  Downloading virtualenv-20.0.26-py2.py3-none-any.whl (4.9 MB)
     || 4.9 MB 2.5 MB/s 
  Saved ./virtualenv-20.0.26-py2.py3-none-any.whl
Collecting Kivy-Garden>=0.1.4
  Downloading kivy-garden-0.1.4.tar.gz (6.8 kB)
  Saved ./kivy-garden-0.1.4.tar.gz
Collecting docutils
  Downloading docutils-0.16-py2.py3-none-any.whl (548 kB)
     || 548 kB 2.1 MB/s 
  Saved ./docutils-0.16-py2.py3-none-any.whl
Collecting pygments
  Downloading Pygments-2.6.1-py3-none-any.whl (914 kB)
     || 914 kB 2.7 MB/s 
  Saved ./Pygments-2.6.1-py3-none-any.whl
Collecting appdirs<2,>=1.4.3
  Downloading appdirs-1.4.4-py2.py3-none-any.whl (9.6 kB)
  Saved ./appdirs-1.4.4-py2.py3-none-any.whl
Collecting distlib<1,>=0.3.1
  Downloading distlib-0.3.1-py2.py3-none-any.whl (335 kB)
     || 335 kB 2.9 MB/s 
  Saved ./distlib-0.3.1-py2.py3-none-any.whl
Collecting importlib-metadata<2,>=0.12; python_version < "3.8"
  Downloading importlib_metadata-1.7.0-py2.py3-none-any.whl (31 kB)
  Saved ./importlib_metadata-1.7.0-py2.py3-none-any.whl
Collecting six<2,>=1.9.0
  Downloading six-1.15.0-py2.py3-none-any.whl (10 kB)
  Saved ./six-1.15.0-py2.py3-none-any.whl
Collecting filelock<4,>=3.0.0
  Downloading filelock-3.0.12-py3-none-any.whl (7.6 kB)
  Saved ./filelock-3.0.12-py3-none-any.whl
Collecting requests
  Downloading requests-2.24.0-py2.py3-none-any.whl (61 kB)
     || 61 kB 2.5 MB/s 
  Saved ./requests-2.24.0-py2.py3-none-any.whl
Collecting zipp>=0.5
  Downloading zipp-3.1.0-py3-none-any.whl (4.9 kB)
  Saved ./zipp-3.1.0-py3-none-any.whl
Collecting chardet<4,>=3.0.2
  Downloading chardet-3.0.4-py2.py3-none-any.whl (133 kB)
     || 133 kB 2.5 MB/s 
  Saved ./chardet-3.0.4-py2.py3-none-any.whl
Collecting idna<3,>=2.5
  Downloading idna-2.10-py2.py3-none-any.whl (58 kB)
     || 58 kB 156 kB/s 
  Saved ./idna-2.10-py2.py3-none-any.whl
Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1
  Downloading urllib3-1.25.9-py2.py3-none-any.whl (126 kB)
     || 126 kB 2.3 MB/s 
  Saved ./urllib3-1.25.9-py2.py3-none-any.whl
Collecting certifi>=2017.4.17
  Downloading certifi-2020.6.20-py2.py3-none-any.whl (156 kB)
     || 156 kB 2.6 MB/s 
  Saved ./certifi-2020.6.20-py2.py3-none-any.whl
Successfully downloaded kivy setuptools wheel virtualenv Kivy-Garden docutils pygments appdirs distlib importlib-metadata six filelock requests zipp chardet idna urllib3 certifi
user@disp4709:/tmp/tmp.CAS9OQ86KS$ 
user@disp4709:/tmp/tmp.CAS9OQ86KS$ # misc macos
user@disp4709:/tmp/tmp.CAS9OQ86KS$ ${WGET} https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
- --2020-07-11 17:17:44--  https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 52.88.32.158, 35.161.162.245, 52.41.115.189, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|52.88.32.158|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 172703 (169K) [application/gzip]
Saving to: ‘libmodplug-0.8.9.0.catalina.bottle.1.tar.gz’

libmodplug-0.8.9.0. 100%[===================>] 168.66K   150KB/s    in 1.1s    

2020-07-11 17:17:46 (150 KB/s) - ‘libmodplug-0.8.9.0.catalina.bottle.1.tar.gz’ saved [172703/172703]

user@disp4709:/tmp/tmp.CAS9OQ86KS$ 
user@disp4709:/tmp/tmp.CAS9OQ86KS$ # get checksums
user@disp4709:/tmp/tmp.CAS9OQ86KS$ sha256sum *
a841dacd6b99318a741b166adb07e19ee71a274450e68237b4650ca1055ab128  appdirs-1.4.4-py2.py3-none-any.whl
8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41  certifi-2020.6.20-py2.py3-none-any.whl
fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691  chardet-3.0.4-py2.py3-none-any.whl
8c09de2c67b3e7deef7184574fc060ab8a793e7adbb183d942c389c8b13c52fb  distlib-0.3.1-py2.py3-none-any.whl
0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af  docutils-0.16-py2.py3-none-any.whl
929b7d63ec5b7d6b71b0fa5ac14e030b3f70b75747cef1b10da9b879fef15836  filelock-3.0.12-py3-none-any.whl
b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0  idna-2.10-py2.py3-none-any.whl
dc15b2969b4ce36305c51eebe62d418ac7791e9a157911d58bfb1f9ccd8e2070  importlib_metadata-1.7.0-py2.py3-none-any.whl
1a1ff32f8a95f1e175198cbab81fcd2596783b180d4eafe63e87d171aa7fdb5e  Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
c256f42788421273a08fbb0a228f0fb0e80dd86b629fb8c0920507f645be6c72  kivy-garden-0.1.4.tar.gz
62cb39e81cea4111f72a3f594ac78557f6f6992ae964321632fda16a16c97bd2  libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
b27c4dedae8c41aa59108f2fa38bf78e0890e590545bc8ece7cdceb4ba60f6e4  pip-20.1.1-py2.py3-none-any.whl
ff7a40b4860b727ab48fad6360eb351cc1b33cbf9b15a0f689ca5353e9463324  Pygments-2.6.1-py3-none-any.whl
fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898  requests-2.24.0-py2.py3-none-any.whl
daf2e1c215f805b0ddc3b4262886bb6667ae0d4563887a8374fb766adc47c324  setuptools-49.1.0-py3-none-any.whl
8b74bedcbbbaca38ff6d7491d76f2b06b3592611af620f8426e82dddb04a5ced  six-1.15.0-py2.py3-none-any.whl
88206b0eb87e6d677d424843ac5209e3fb9d0190d0ee169599165ec25e9d9115  urllib3-1.25.9-py2.py3-none-any.whl
c11a475400e98450403c0364eb3a2d25d42f71cf1493da64390487b666de4324  virtualenv-20.0.26-py2.py3-none-any.whl
df277cb51e61359aba502208d680f90c0493adec6f0e848af94948778aed386e  wheel-0.34.2-py2.py3-none-any.whl
aa36550ff0c0b7ef7fa639055d797116ee891440eac1a56f378e2d3179e0320b  zipp-3.1.0-py3-none-any.whl
user@disp4709:/tmp/tmp.CAS9OQ86KS$ 

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETSFov343j4FFQAEg+FUO1ULCyRkFAl8JpCMACgkQ+FUO1ULC
yRk0xhAAkjJYMocRuD1M9Ghw+X0gTRQb+v0RKbZtweJOxqnlzjw3uxBP13Urkz12
Bq8mKxeRH6on2s5uNQ5b2j2VwSRcXvRphTaxHo9WXSeF0hKDTCV+DsPG41hIsI0I
XZ1dhNfrU1bROb1xyqgliwBe3YXF+NB0z3TBARP4ExU2ie1RKvBerDhMPk5G/ONy
XXmxIYaKA4TQCtTElQfrEfH5mfTvtFvhdt5WOx9EYQoN91VM/V2heeMnTUq3XBgm
pK1OCZzMKefv8M7rC/qYqgRxvgd96w+OFEMUaSMxi9Dyz+i3beySIX1uXQ2+8goS
7NSdYhHq58XEk1rsnI5bc3PvB5EcY8ccXraIRxUhwt4A814I6AhNKbnqWDzDE01z
lpqjp4srqxVN9Wyl7liLPZhOWswLRLFI4w8r0KrUDNQ9LF65yo1ola7olDFVY16Q
QVJ0AIdW+jxnDYsZwN65Y0IyVfqkoB8GHCBqtJhhEU74C0k5YCS7/YzgvpCVkzZy
u85/Y5TDGuSFiOsGhsiVI1rXdAWNUq1tS8Bpa1dn1ft/+T/GSs8aBAh4xfIr4UcE
dIa0q7A47amxhHnYSLMxR7aJfU53VZxpxIKsETB1SU5iA7cp+rTQhg6RD9jUzG/r
T6y26Pl3dfgBk6kWVSCbgA54q5k1F+42CuhcU2A+6SgMPyRP7Rk=
=pOD+
-----END PGP SIGNATURE-----

from buskill-app.

maltfield commented on June 14, 2024

Here's TOFU 3/3 over vpn for the second round of dependencies

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Today (2020-07-12) I downloaded the second round of buskill-app dependencies and took their checksums.

This third check was done in over a vpn server in the United States. See the bottom of the log below for the sha256sum output.

user@disp3835:/tmp/tmp.lPAZbbWd6m$ CURL="/usr/bin/curl"
user@disp3835:/tmp/tmp.lPAZbbWd6m$ WGET="/usr/bin/wget --retry-on-host-error --retry-connrefused"
user@disp3835:/tmp/tmp.lPAZbbWd6m$ PYTHON="/usr/bin/python3"
user@disp3835:/tmp/tmp.lPAZbbWd6m$ 
user@disp3835:/tmp/tmp.lPAZbbWd6m$ # in tails, we must torify
user@disp3835:/tmp/tmp.lPAZbbWd6m$ if [[ "`whoami`" == "amnesia" ]]; then
> CURL="/usr/bin/torify ${CURL}"
> WGET="/usr/bin/torify ${WGET}"
> PYTHON="/usr/bin/torify ${PYTHON}"
> fi
user@disp3835:/tmp/tmp.lPAZbbWd6m$ 
user@disp3835:/tmp/tmp.lPAZbbWd6m$ tmpDir=`mktemp -d`
user@disp3835:/tmp/tmp.lPAZbbWd6m$ pushd "${tmpDir}"
/tmp/tmp.w8O8V8zPZ4 /tmp/tmp.lPAZbbWd6m ~
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ # first get some info about our internet connection
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ ${CURL} -s https://ifconfig.co/country | head -n1
United States
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ ${CURL} -s https://check.torproject.org | grep Congratulations | head -n1
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ # and today's date
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ date -u +"%Y-%m-%d"
2020-07-12
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ # first download and upgrade pip (required to get some wheels)
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ ${PYTHON} -m pip download --no-cache-dir pip==20.1.1
Collecting pip==20.1.1
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 4.9MB/s 
  Saved ./pip-20.1.1-py2.py3-none-any.whl
Successfully downloaded pip
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ ${PYTHON} -m pip install --upgrade pip==20.1.1
Collecting pip==20.1.1
  Downloading https://files.pythonhosted.org/packages/43/84/23ed6a1796480a6f1a2d38f2802901d078266bda38388954d01d3f2e821d/pip-20.1.1-py2.py3-none-any.whl (1.5MB)
    100% || 1.5MB 508kB/s 
Installing collected packages: pip
Successfully installed pip-20.1.1
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ # pip (all platforms)
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ ${PYTHON} -m pip download --no-cache-dir kivy==1.11.1 setuptools==49.1.0 wheel==0.34.2 virtualenv==20.0.26
Collecting kivy==1.11.1
  Downloading Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl (28.3 MB)
     || 28.3 MB 3.2 MB/s 
  Saved ./Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
Collecting setuptools==49.1.0
  Downloading setuptools-49.1.0-py3-none-any.whl (789 kB)
     || 789 kB 3.2 MB/s 
  Saved ./setuptools-49.1.0-py3-none-any.whl
Collecting wheel==0.34.2
  Downloading wheel-0.34.2-py2.py3-none-any.whl (26 kB)
  Saved ./wheel-0.34.2-py2.py3-none-any.whl
Collecting virtualenv==20.0.26
  Downloading virtualenv-20.0.26-py2.py3-none-any.whl (4.9 MB)
     || 4.9 MB 2.5 MB/s 
  Saved ./virtualenv-20.0.26-py2.py3-none-any.whl
Collecting docutils
  Downloading docutils-0.16-py2.py3-none-any.whl (548 kB)
     || 548 kB 3.3 MB/s 
  Saved ./docutils-0.16-py2.py3-none-any.whl
Collecting pygments
  Downloading Pygments-2.6.1-py3-none-any.whl (914 kB)
     || 914 kB 3.0 MB/s 
  Saved ./Pygments-2.6.1-py3-none-any.whl
Collecting Kivy-Garden>=0.1.4
  Downloading kivy-garden-0.1.4.tar.gz (6.8 kB)
  Saved ./kivy-garden-0.1.4.tar.gz
Collecting distlib<1,>=0.3.1
  Downloading distlib-0.3.1-py2.py3-none-any.whl (335 kB)
     || 335 kB 4.4 MB/s 
  Saved ./distlib-0.3.1-py2.py3-none-any.whl
Collecting six<2,>=1.9.0
  Downloading six-1.15.0-py2.py3-none-any.whl (10 kB)
  Saved ./six-1.15.0-py2.py3-none-any.whl
Collecting appdirs<2,>=1.4.3
  Downloading appdirs-1.4.4-py2.py3-none-any.whl (9.6 kB)
  Saved ./appdirs-1.4.4-py2.py3-none-any.whl
Collecting filelock<4,>=3.0.0
  Downloading filelock-3.0.12-py3-none-any.whl (7.6 kB)
  Saved ./filelock-3.0.12-py3-none-any.whl
Collecting importlib-metadata<2,>=0.12; python_version < "3.8"
  Downloading importlib_metadata-1.7.0-py2.py3-none-any.whl (31 kB)
  Saved ./importlib_metadata-1.7.0-py2.py3-none-any.whl
Collecting requests
  Downloading requests-2.24.0-py2.py3-none-any.whl (61 kB)
     || 61 kB 4.2 MB/s 
  Saved ./requests-2.24.0-py2.py3-none-any.whl
Collecting zipp>=0.5
  Downloading zipp-3.1.0-py3-none-any.whl (4.9 kB)
  Saved ./zipp-3.1.0-py3-none-any.whl
Collecting certifi>=2017.4.17
  Downloading certifi-2020.6.20-py2.py3-none-any.whl (156 kB)
     || 156 kB 2.8 MB/s 
  Saved ./certifi-2020.6.20-py2.py3-none-any.whl
Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1
  Downloading urllib3-1.25.9-py2.py3-none-any.whl (126 kB)
     || 126 kB 3.3 MB/s 
  Saved ./urllib3-1.25.9-py2.py3-none-any.whl
Collecting idna<3,>=2.5
  Downloading idna-2.10-py2.py3-none-any.whl (58 kB)
     || 58 kB 4.3 MB/s 
  Saved ./idna-2.10-py2.py3-none-any.whl
Collecting chardet<4,>=3.0.2
  Downloading chardet-3.0.4-py2.py3-none-any.whl (133 kB)
     || 133 kB 3.1 MB/s 
  Saved ./chardet-3.0.4-py2.py3-none-any.whl
Successfully downloaded kivy setuptools wheel virtualenv docutils pygments Kivy-Garden distlib six appdirs filelock importlib-metadata requests zipp certifi urllib3 idna chardet
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ # misc macos
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ ${WGET} https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
- --2020-07-12 08:38:52--  https://homebrew.bintray.com/bottles/libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
Resolving homebrew.bintray.com (homebrew.bintray.com)... 52.88.32.158, 54.148.239.199, 35.161.162.245, ...
Connecting to homebrew.bintray.com (homebrew.bintray.com)|52.88.32.158|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 172703 (169K) [application/gzip]
Saving to: ‘libmodplug-0.8.9.0.catalina.bottle.1.tar.gz’

libmodplug-0.8.9.0. 100%[===================>] 168.66K   143KB/s    in 1.2s    

2020-07-12 08:38:55 (143 KB/s) - ‘libmodplug-0.8.9.0.catalina.bottle.1.tar.gz’ saved [172703/172703]

user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ # get checksums
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ sha256sum *
a841dacd6b99318a741b166adb07e19ee71a274450e68237b4650ca1055ab128  appdirs-1.4.4-py2.py3-none-any.whl
8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41  certifi-2020.6.20-py2.py3-none-any.whl
fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691  chardet-3.0.4-py2.py3-none-any.whl
8c09de2c67b3e7deef7184574fc060ab8a793e7adbb183d942c389c8b13c52fb  distlib-0.3.1-py2.py3-none-any.whl
0c5b78adfbf7762415433f5515cd5c9e762339e23369dbe8000d84a4bf4ab3af  docutils-0.16-py2.py3-none-any.whl
929b7d63ec5b7d6b71b0fa5ac14e030b3f70b75747cef1b10da9b879fef15836  filelock-3.0.12-py3-none-any.whl
b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0  idna-2.10-py2.py3-none-any.whl
dc15b2969b4ce36305c51eebe62d418ac7791e9a157911d58bfb1f9ccd8e2070  importlib_metadata-1.7.0-py2.py3-none-any.whl
1a1ff32f8a95f1e175198cbab81fcd2596783b180d4eafe63e87d171aa7fdb5e  Kivy-1.11.1-cp37-cp37m-manylinux2010_x86_64.whl
c256f42788421273a08fbb0a228f0fb0e80dd86b629fb8c0920507f645be6c72  kivy-garden-0.1.4.tar.gz
62cb39e81cea4111f72a3f594ac78557f6f6992ae964321632fda16a16c97bd2  libmodplug-0.8.9.0.catalina.bottle.1.tar.gz
b27c4dedae8c41aa59108f2fa38bf78e0890e590545bc8ece7cdceb4ba60f6e4  pip-20.1.1-py2.py3-none-any.whl
ff7a40b4860b727ab48fad6360eb351cc1b33cbf9b15a0f689ca5353e9463324  Pygments-2.6.1-py3-none-any.whl
fe75cc94a9443b9246fc7049224f75604b113c36acb93f87b80ed42c44cbb898  requests-2.24.0-py2.py3-none-any.whl
daf2e1c215f805b0ddc3b4262886bb6667ae0d4563887a8374fb766adc47c324  setuptools-49.1.0-py3-none-any.whl
8b74bedcbbbaca38ff6d7491d76f2b06b3592611af620f8426e82dddb04a5ced  six-1.15.0-py2.py3-none-any.whl
88206b0eb87e6d677d424843ac5209e3fb9d0190d0ee169599165ec25e9d9115  urllib3-1.25.9-py2.py3-none-any.whl
c11a475400e98450403c0364eb3a2d25d42f71cf1493da64390487b666de4324  virtualenv-20.0.26-py2.py3-none-any.whl
df277cb51e61359aba502208d680f90c0493adec6f0e848af94948778aed386e  wheel-0.34.2-py2.py3-none-any.whl
aa36550ff0c0b7ef7fa639055d797116ee891440eac1a56f378e2d3179e0320b  zipp-3.1.0-py3-none-any.whl
user@disp3835:/tmp/tmp.w8O8V8zPZ4$ 

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETSFov343j4FFQAEg+FUO1ULCyRkFAl8Ke54ACgkQ+FUO1ULC
yRljdg//RK6a5iPn9NfvYYx2M66RcvI4BsdHQgp/+oW+Lc+TVNcvC5qbii6kiT4h
CuhgB/h7ymCJvvTtQyVqUtvkm6aj8TstsWWcvXzZZQQEutH/EeX/udmUU9MiDYB0
Q6GehtXpILFzufL3KW+iOixeNCuJ2INdIE1sbVMq2FSSB775t0PbLHcT0MMjlCSc
VEg1BilnKJXIJUfZB7QulVvKZ6eGUrJ+3+GTu1KVU4ZDNTPLzKRPyrORtj0aRuoY
lG78Qs0obP1r0M6aG4ls06JNd+t8IObnR/t+TymWWgCnd++U9f2SH3r7CG38TQP1
j85cu6JnYQIv7EFGQEF7NBo96Ul6kxSKg5hjDYjPxsa8qutLAO4FR3N8gF3E3vLy
rLAnixA+KnW40lKGTTwD3yr0hi+IJ5s3VkXPbY3NBCyIjmJwB+dX0dyGRz4Mspsk
c7szcCBeK3pojDYz9Y0QhpILX3i2BqqR+oq+CdX2AHn2gKLzJ0g7L6RjZIyhkOKS
uemV6uriAsZR1mTF8sdonVPy7eA3+32hooAh+7kNJrp9jZdAdiF9vssSzZodEH8v
XUAiz+GEMyPI7pOtK0T8Is1AIDeiauuKFW/vdzfV6QYC6XAotFnl7uuSbX8pQNz3
gazn6Odl2IcMB8/qvdX2nkPaFraZM5k3u2Kf4XJZJR545p03xxA=
=cUbs
-----END PGP SIGNATURE-----

from buskill-app.

maltfield commented on June 14, 2024

I confirmed that all the above checksums obtained for all our depends match on all attempts spanning across my ISP's connection, a vpn connection, and a tor connection through tails.

I then confirmed that all of the checksums of our static assets in deps dir match what I found above.

All of our build scripts have been updated to use these static assets; nothing is downloaded from the Internet (other than files from github.com) in our build workflow anymore. This task is done.

from buskill-app.

Add checksum checks to all downloaded depends in build scripts about buskill-app HOT 13 CLOSED

Comments (13)

Related Issues (20)

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent