makepkg: failed integrity checks because of SRCDEST

I haven't experienced this issue until now, and only had this issue while upgrading the AUR package gibo-bin.

It took some time to realize what the issue was, as I deleted the local clone of the AUR package, checked if the b2sum is correct for the tar file (manually downloaded from GitHub) until I saw that the src/ directory contained symlinks to ~/.sources. And I also would've expected that --cleanbuild redownloads the sources, which also did not happen.

Steps to reproduce:

  1. Clone the package git clone https://aur.archlinux.org/gibo-bin
  2. Checkout commit of previous version git checkout d07accb11a9be7f881e0ea535efae7e9c53f3c4d
  3. Run makepkg (this should build if you haven't installed the package already)
  4. Checkout commit of the latest version, currently: git checkout 7e5a25129ba726e9e6568355a4ff10b053ba2127
  5. Run makepkg --cleanbuild
  6. ==> ERROR: One or more files did not pass the validity check!

This seemingly happens, because the file name doesn't change between versions, and makepkg/source/file.sh only checks if the filename already exists.

Edited by Jonas Wunderlich
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information