---------- Forwarded message ---------
From: Dave Howorth <dave@howorth.org.uk>
Date: Wed, Sep 14, 2022 at 2:21 PM
Subject: Re: checksum fails for downloaded ISO
To: <support@lists.opensuse.org>


On Wed, 14 Sep 2022 13:36:44 +0200 (CEST)
"Carlos E. R." <robin.listas@telefonica.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> El 2022-09-14 a las 11:47 +0100, Dave Howorth escribió:
> >> On Tuesday, 2022-09-13 at 17:22 -0600, Darryl Gregorash wrote: 
> >>> On 2022-09-13 16:26, Christian Boltz wrote: 
> >>>> Hello,
> >>>>
> >>>> Am Montag, 12. September 2022, 20:09:38 CEST schrieb Darryl
> >>>> Gregorash: 
> >>>>> On 2022-09-12 11:41, Andrei Borzenkov wrote: 
> >>>>>> On 12.09.2022 19:31, Darryl Gregorash wrote: 
> >>>>>>> Is this stupid thing still an issue? WTH, openSUSE guys, can't
> >>>>>>> you take about a minute and 13 seconds to correct this? 
> >>>>>>
> >>>>>> Why do not you step in and fix it if it is so simple? 
> >>>>>
> >>>>> I'm pretty sure I don't have the necessary privileges to do
> >>>>> that. Next? 
> >>>>
> >>>> Well, _yet_ ;-)
> >>>> https://en.opensuse.org/openSUSE:Heroes#Contributions
> >>>>
> >>>> Or if it's really that easy, just tell us what we need to
> >>>> configure on the server, and we'll do it. With your instructions,
> >>>> I'm sure it will even take us less than a minute. 
> >>>
> >>> On the download page, https://get.opensuse.org/leap/15.4/
> >>>
> >>> For all platforms, the links to the ISO image files point to
> >>> *Build243.2-Media.iso while the links to all the checksum files
> >>> are for files without the "Build243.2" in them. 
> >>
> >>
> >> You have to be more specific. What exact URL?
> >>
> >> I try:
> >> 
> >> - --> https://get.opensuse.org/leap/15.4/#download 
> >>
> >> https://fastmirror.pp.ua/opensuse/distribution/leap/15.4/iso/openSUSE-Leap-15.4-DVD-x86_64-Build243.2-Media.iso 
> >
> > I'm with Darryl on this one. *YOU* have to be more specific. You
> > need to explain how you got that fastmirror link. If I simply do
> > the obvious following Darryl's instructions, I don't see anything
> > like it. 
>
> Because the action is hidden, there is a rediretion to a mirror.
>
> Well, I simply clicked on download the file using firefox, then
> aborted it, and right clicked on the partial file obtained to the the
> actual download link that firefox was using. You get redirected to a
> mirror each time, that's the normal working of the
> download.opensuse.org server.
>
> Right click on the download icon, copy link in firefox, I obtain this
> address:
>
>    https://download.opensuse.org/distribution/leap/15.4/iso/openSUSE-Leap-15.4-DVD-x86_64-Media.iso

Agreed

> I download the checksum files:
>
>    cer@Telcontar:/data/storage_b/Isos/Leap/15.4/greg/tmp> wget -v
> https://download.opensuse.org/distribution/leap/15.4/iso/openSUSE-Leap-15.4-DVD-aarch64-Build243.2-Media.iso.sha256

But where does that URL come from? It certainly doesn't come as you
stated above from saving the URL from the right click (a) wrong
architecture, (b) wrong file iso vs sha256 (c) presence of build ID


[snip]

> I'm getting the non versioned file on each link :-?
>
> Let me try to download "checksum" using firefox.
> I get "openSUSE-Leap-15.4-DVD-x86_64-Media.iso". It is correct.
>
> Let's try the main download, not the drop list.
> I get "openSUSE-Leap-15.4-DVD-x86_64-Build243.2-Media.iso"
>
> Bingo! There is the issue.

So at last you agree there is a problem! We're getting somewhere :)

> Ok, but this is what the people in the
> factory mail list are saying it is a firefox issue.

Sorry, but I don't read the factory list, so posting a remark like that
without a URL is not very helpful. But I fail to see how it can be a
Firefox issue. The URLs are supplied by opensuse. And even if it is a
Firefox issue, the opensuse devs need to work around it. Don't use HTML
that provokes the issue, if that really is the problem. Just make the
page list the actual URLs in a straightforward text list. Or at worst
detect the problem FF version, add words that explain the problem and
suggest using another browser and point to the bug report.

But having said that, I just tried in chromium and saw the same
problem. So it's not an FF issue.

> > I see that it uses some intermediate host at
> > https://opensuse.ip-connect.info/distribution/leap/15.4/iso/ and can
> > clearly see the problem in the lists there of what actually gets
> > downloaded.
> >
> > The problem is in the translation between the links that
> > https://get.opensuse.org/leap/15.4/#download shows and what it
> > actually downloads if you click on them. 
>
> - --
> Cheers,
>         Carlos E. R.
>         (from openSUSE 15.3 x86_64 at Telcontar)