Repository: pytorch
Issue: Sourceforge outage causing multiple CI failures
Labels: module: ci,triaged

> NOTE: Remember to label this issue with "`ci: sev`"

**MERGE BLOCKING** <!-- remove this line if you don't want this SEV to block merges -->

## Current Status
Mitigated
https://fosstodon.org/@sourceforgestatus

## Error looks like 
For example from this [log](https://github.com/pytorch/pytorch/actions/runs/6109608831/job/16581560231):
```
CMake Error at lzma--stamp/lzma--download-Release.cmake:37 (message):
        Command failed: 1
      
         '/opt/conda/envs/py_3.10/bin/cmake' '-Dmake=' '-Dconfig=' '-P' '/tmp/pip-req-build-2iudayl3/build/temp.linux-x86_64-cpython-310/third_party/lzma/src/lzma--stamp/lzma--download-Release-impl.cmake'
      
        See also
      
          /tmp/pip-req-build-2iudayl3/build/temp.linux-x86_64-cpython-310/third_party/lzma/src/lzma--stamp/lzma--download.log
      
      
      -- Log output is:
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd033078738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- File already exists but hash mismatch. Removing...
      -- Downloading...
         dst='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
         timeout='none'
         inactivity timeout='none'
      -- Using src='https://tukaani.org/xz/xz-5.2.5.tar.gz'
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd033078738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- Hash mismatch, removing...
      -- Using src='https://tukaani.org/xz/xz-5.2.5.tar.gz'
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd03[3078](https://github.com/pytorch/pytorch/actions/runs/6110480988/job/16585303917#step:15:3079)738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- Hash mismatch, removing...
      -- Using src='https://tukaani.org/xz/xz-5.2.5.tar.gz'
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd033078738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- Hash mismatch, removing...
      -- Using src='https://tukaani.org/xz/xz-5.2.5.tar.gz'
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd033078738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- Hash mismatch, removing...
      -- Using src='https://tukaani.org/xz/xz-5.2.5.tar.gz'
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd033078738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- Hash mismatch, removing...
      -- Using src='https://tukaani.org/xz/xz-5.2.5.tar.gz'
      -- verifying file...
             file='/tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz'
      -- SHA256 hash of
          /tmp/pip-req-build-2iudayl3/third_party/lzma/../archives/xz-5.2.5.tar.gz
        does not match expected value
          expected: 'f6f4910fd033078738bd82bfba4f49219d03b17eb0794eb91efbae419f4aba10'
            actual: '251a85b3bac687974f360d3796048c20ded3bf0bd69e0d1cfd1db23d013f89ed'
      -- Hash mismatch, removing...
      CMake Error at lzma--stamp/download-lzma-.cmake:170 (message):
        Each download failed!

....
  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for torchaudio
```

## Incident timeline (all times pacific)
*Include when the incident began, when it was detected, mitigated, root caused, and finally closed.*
Sept 6 - 9:27PM Began
Sept 7 - 5:30AM Detected
Sept 7 - 8:00AM Root Caused, SEV created
Sept 7 - 9:30AM Mitigated by Sourceforge

## User impact
Multiple jobs failing with error above

## Root cause
Sourceforge outage

## Mitigation
*How did we mitigate the issue?*

## Prevention/followups
*How do we prevent issues like this in the future?*


cc @seemethere @malfet @pytorch/pytorch-dev-infra