[CI][Packaging] Wheels for manylinux arm64 are failing due to failures installing thrift from vcpkg

[raulcd]

Describe the bug, including details regarding any error messages, version, and platform.

For the last couple of days the nightlies for the arm64 wheels on manylinux have been failing with errors like:

#20 4225.8 [DEBUG] 1000: execute_process(curl --fail -L https://github.com/apache/thrift/archive/0.20.0.tar.gz --create-dirs --output /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part)
#20 4225.8 [DEBUG] 1000: cmd_execute_and_stream_data() returned 0 after  1177311 us
#20 4225.8 [DEBUG] Trying to hash /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part
#20 4225.8 [DEBUG] /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part has hash 86a609f5725506abc2109902b338cbaad85abf980f9d28c63e6e50a5c265dc10699372c4e91f5ee85d8d09fbcbb0dc17c19745b86d215b96bbf7d0a9270f0932
#20 4225.8 error: Failed to download from mirror set
#20 4225.8 error: File does not have the expected hash:
#20 4225.8 url: https://github.com/apache/thrift/archive/0.20.0.tar.gz
#20 4225.8 File: /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part
#20 4225.8 Expected hash: 5e4ee9870b30fe5ba484d39781c435716f7f3903793dc8aae96594ca813b1a5a73363b84719038ca8fa3ab8ef0a419a28410d936ff7b3bbadf36fc085a6883ae
#20 4225.8 Actual hash: 86a609f5725506abc2109902b338cbaad85abf980f9d28c63e6e50a5c265dc10699372c4e91f5ee85d8d09fbcbb0dc17c19745b86d215b96bbf7d0a9270f0932
#20 4225.8 [DEBUG] /opt/vcpkg/buildtrees/_vcpkg/src/vcpkg-tool-2024-04-23/src/vcpkg/base/downloads.cpp(997): 
#20 4225.8 [DEBUG] Time in subprocesses: 1177311us
#20 4225.8 [DEBUG] Time in parsing JSON: 6us
#20 4225.8 [DEBUG] Time in JSON reader: 0us
#20 4225.8 [DEBUG] Time in filesystem: 75us
#20 4225.8 [DEBUG] Time in loading ports: 0us
#20 4225.8 [DEBUG] Exiting after 1.2 s (1194295us)

This is also affecting the RC1 for 17.0.0

Component(s)

Continuous Integration, Packaging

[raulcd]

Not all of them are related to thrift, some of them seem like connection problems.

[raulcd]

I've downloaded locally and the sha is the vcpkg expected one:

$ sha512sum thrift-0.20.0.tar.gz 
5e4ee9870b30fe5ba484d39781c435716f7f3903793dc8aae96594ca813b1a5a73363b84719038ca8fa3ab8ef0a419a28410d936ff7b3bbadf36fc085a6883ae  thrift-0.20.0.tar.gz

[raulcd]

The java-jars job is failing with the same issue on the aarch64 build:
https://github.com/ursacomputing/crossbow/actions/runs/9860012456/job/27257219621#step:8:4965
I am investigating if there is any issue on the k8s-cluster on the arm64 hosts

[raulcd]

With the help from @midnattsol we have tried on the arm64 boxes:

[root@ip-10-20-24-127 ~]# curl --fail -L https://github.com/apache/thrift/archive/0.20.0.tar.gz --create-dirs --output /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part
[root@ip-10-20-24-127 ~]# sha512sum /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part
86a609f5725506abc2109902b338cbaad85abf980f9d28c63e6e50a5c265dc10699372c4e91f5ee85d8d09fbcbb0dc17c19745b86d215b96bbf7d0a9270f0932  /opt/vcpkg/downloads/apache-thrift-0.20.0.tar.gz.62659.part

and the sha is not the correct one.
The problem seems to be the https://github.com/apache/thrift/archive/0.20.0.tar.gz is wrong versus https://github.com/apache/thrift/archive/refs/tags/v0.20.0.tar.gz which is correct. I am not sure how to proceed at this point, maybe raise an issue on vcpkg?

[raulcd]

This seems to be tracked here: microsoft/vcpkg#39786