Arch Linux User Repository

Validating source_x86_64 files with md5sums... curl-impersonate_x86_64.tar.gz ... FAILED

Report: fixed, working fine now, thanks !

You are correct, the latest github binary includes firefox. That was not the case previously.

$ yay -Ss curl impersonate

aur/libcurl-impersonate-bin 1.0.0rc2-1 (+3 0.62)
    Special compilation of libcurl that makes it impersonate Firefox and Chrome

aur/curl-impersonate-firefox 1.0.0rc2-1 (+1 0.00)
    A special compilation of curl that makes it impersonate Firefox
aur/curl-impersonate-chrome 1:1.0.0rc2-1 (+3 0.14)
    A special compilation of curl that makes it impersonate Chrome
aur/curl-impersonate-bin 1.0.0rc2-1 (+3 0.08) (Installed)
    Special compilation of curl that makes it impersonate Firefox and Chrome

You might want to update these tags for the PKGBUILD "curl-impersonate-bin" though, they currently say,

Provides        : curl-impersonate-chrome
Conflicts With  : curl-impersonate-chrome
Replaces        : None

@m040601 It currently ships curl_firefox135 and curl_firefox133. What is wrong with the description? I think what you showed was not from the latest version.

EDIT: You probably missed my latest commit. Sorry for the untested updates and thanks for reporting.

  Description:   Special compilation of curl that makes it impersonate Firefox and Chrome

Please remember to correct that description.

"... Firefox and Chrome...".

Remove the "Firefox" word .

In the , current case, of this specific PKGBUILD, "curl-impersonate-bin", no Firefox impersonator is installed. Only Chrome impersonators .

No "fox" here,

$ pacman -Qql curl-impersonate-bin

/usr/bin/curl-impersonate-chrome
/usr/bin/curl_chrome100
/usr/bin/curl_chrome101
/usr/bin/curl_chrome104
/usr/bin/curl_chrome107
/usr/bin/curl_chrome110
/usr/bin/curl_chrome116
/usr/bin/curl_chrome119
/usr/bin/curl_chrome120
/usr/bin/curl_chrome123
/usr/bin/curl_chrome124
/usr/bin/curl_chrome131
/usr/bin/curl_chrome131_android
/usr/bin/curl_chrome133a
/usr/bin/curl_chrome99
/usr/bin/curl_chrome99_android
/usr/bin/curl_edge101
/usr/bin/curl_edge99
/usr/bin/curl_safari15_3
/usr/bin/curl_safari15_5
/usr/bin/curl_safari17_0
/usr/bin/curl_safari17_2_ios
/usr/bin/curl_safari18_0
/usr/bin/curl_safari18_0_ios

The upstream binary release tar.gz on github,

$ wget https://github.com/lexiforest/curl-impersonate/releases/download/v1.0.0rc2/curl-impersonate-v1.0.0rc2.x86_64-linux-gnu.tar.gz

It does ship a "curl-firefox" inside there,

$ tar tf curl-impersonate-v1.0.0rc2.x86_64-linux-gnu.tar.gz

curl-impersonate
curl_chrome100
curl_chrome101
curl_chrome104
curl_chrome107
curl_chrome110
curl_chrome116
curl_chrome119
curl_chrome120
curl_chrome123
curl_chrome124
curl_chrome131
curl_chrome131_android
curl_chrome133a
curl_chrome99
curl_chrome99_android
curl_edge101
curl_edge99
curl_firefox133
curl_firefox135
curl_safari15_3
curl_safari15_5
curl_safari17_0
curl_safari17_2_ios
curl_safari18_0
curl_safari18_0_ios

This last changes,

   Age         Commit message 
6 hours    Update to v1.0.0rc2

Cause the PKGBUILD to fail,

==> Extracting sources...
  -> Extracting curl-impersonate_x86_64.tar.gz with bsdtar
==> Sources are ready.
==> Making package: curl-impersonate-bin 1.0.0rc2-1 (Tue 06 May 2025 01:17:54 PM WEST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> WARNING: Using existing $srcdir/ tree
==> Entering fakeroot environment...
==> Starting package()...
install: cannot stat 'curl-impersonate-*': No such file or directory
==> ERROR: A failure occurred in package().
    Aborting...
 -> error making: curl-impersonate-bin-exit status 4
 -> Failed to install the following packages. Manual intervention is required:
curl-impersonate-bin - exit status 4

Please test the PKGBUILD on the local computer before uploading to the AUR.

Sorry for my late reply. Yes, as there are no checksums provided by upstream b2 should be favoured according to https://wiki.archlinux.org/title/PKGBUILD#Integrity . To prevent breaking AUR helpers I'd recommend removing the custom filenames from the sources. You can consider adding all archives to noextract=() and extract them manually in prepare() so they end up in a versioned directory in $srcdir so globs don't match leftovers from previous builds. Including armv7h makes things a bit messy, but something like this would work:

diff --git a/PKGBUILD b/PKGBUILD
index 354c870..0cc974b 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer mattf <matheusfillipeag@gmail.com>

 pkgname=curl-impersonate-bin
-pkgver=0.9.5
+pkgver=1.0.0rc2
 pkgrel=1
 pkgdesc="Special compilation of curl that makes it impersonate Firefox and Chrome"
 url="https://github.com/lexiforest/curl-impersonate"
@@ -12,24 +12,26 @@ provides=(curl-impersonate-chrome)
 conflicts=(curl-impersonate-chrome)

 source_x86_64=(
-  "curl-impersonate_x86_64.tar.gz::https://github.com/lexiforest/curl-impersonate/releases/download/v${pkgver}/curl-impersonate-v${pkgver}.x86_64-linux-gnu.tar.gz"
+  "https://github.com/lexiforest/curl-impersonate/releases/download/v${pkgver}/curl-impersonate-v${pkgver}.x86_64-linux-gnu.tar.gz"
 )
 source_aarch64=( 
-  "curl-impersonate_aarch64.tar.gz::https://github.com/lexiforest/curl-impersonate/releases/download/v${pkgver}/curl-impersonate-v${pkgver}.aarch64-linux-gnu.tar.gz"
+  "https://github.com/lexiforest/curl-impersonate/releases/download/v${pkgver}/curl-impersonate-v${pkgver}.aarch64-linux-gnu.tar.gz"
 )
 source_armv7h=( 
-  "curl-impersonate_aarch64.tar.gz::https://github.com/lexiforest/curl-impersonate/releases/download/v${pkgver}/curl-impersonate-v${pkgver}.arm-linux-gnueabihf.tar.gz"
+  "curl-impersonate-v${pkgver}.armv7h-linux-gnu.tar.gz::https://github.com/lexiforest/curl-impersonate/releases/download/v${pkgver}/curl-impersonate-v${pkgver}.arm-linux-gnueabihf.tar.gz"
 )
+noextract=("${source_x86_64[@]##*/}" "${source_aarch64[@]##*/}" "curl-impersonate-v${pkgver}.armv7h-linux-gnu.tar.gz")

-md5sums_x86_64=('1492e0b15f8cc61c78ac6e3d31ab3beb')
-md5sums_aarch64=('e9831d2a59ccaf40dd85696c4ea06f22')
-md5sums_armv7h=('e9831d2a59ccaf40dd85696c4ea06f22')
+b2sums_x86_64=('a339b292c5da3ddd1c13f527ef764a3f3d6be5fe8fc6ad1d7f918ae12eca18e9015f2c02fcb4168829733bbd60e1d23ba2ba13fa895bca800ecb3885d0f729e3')
+b2sums_aarch64=('4fc68a1211e6c34e7202e731f0431a95136e004b0f2c016534a2d78b07bbfd9e6022a11b65ceef20da047480bb0911486617d285be80bae658c5e3d7fed6fbdf')
+b2sums_armv7h=('b723e038faa4b02411a6f52d8e62d189dd265083fb000895c276b540d04b140b4f16daf9bc63039ab4960db6944bf68969250903d598bdc8674d0f26a52f862a')
+
+prepare() {
+  mkdir "curl-impersonate-v${pkgver}.${CARCH}"
+  bsdtar -C "curl-impersonate-v${pkgver}.${CARCH}" -xf "curl-impersonate-v${pkgver}.${CARCH}-linux-gnu.tar.gz"
+}

 package () {
-  mkdir -p "${pkgdir}/usr/bin/"
-  for executable in $(find . -maxdepth 1 -type f -name "curl_*" ! -name "*.*")
-  do
-    install -Dm755 $executable "${pkgdir}/usr/bin/"
-  done
-  install -Dm755 curl-impersonate-* "${pkgdir}/usr/bin/"
+  cd "$srcdir/curl-impersonate-v${pkgver}.${CARCH}"
+  install -Dm755 curl_* curl-impersonate* -t "${pkgdir}/usr/bin"
 }

Similar changes also make sense for your other curl-impersonate-related packages.

Please remove all of the .bat files from /usr/bin.

Thanks for the heads up @Neurognostic. I have pushed a fix.

Please remove all of the .bat files from /usr/bin.

@hrdl You suggest using sha256 or b2 instead of md5sum or are you talking about something else I am not aware of?

In the current PKGBUILD we have:

md5sums_x86_64=('8d391919e0fdf618d1dc6ae6fa0f865c')
md5sums_aarch64=('855fec111935d18999014a8a4ad204f1')
md5sums_armv7h=('855fec111935d18999014a8a4ad204f1')

Not versioning the source destinations filenames causes makepkg to inadvertently cache them, not downloading newer sources after an update until the old ones are removed manually.

Integrity checks nowadays default to sha256, with b2 being a modern alternative.