[opensuse-support] Multiple persistent 'Digest verification failed' errors when 'zypper dup' on tumbleweed

11 Apr 2020

      On OpenSUSE Tw

zypper lr
...
Repository priorities are without effect. All enabled repositories share
the same priority.
#  | Alias                               | Name                       |
Enabled | GPG Check | Refresh
---+-------------------------------------+----------------------------+---------+-----------+--------
 1 | download.opensuse.org-non-oss       | Main Repository (NON-OSS)  |
Yes     | (r ) Yes  | Yes
 2 | download.opensuse.org-oss           | Main Repository (OSS)      |
Yes     | (r ) Yes  | Yes
 3 | download.opensuse.org-tumbleweed    | Main Update Repository     |
Yes     | (r ) Yes  | Yes
 4 | http-download.opensuse.org-447cf2a7 | openSUSE:Factory           | No
     | ----      | ----
 5 | http-download.opensuse.org-6925c72a | hardware:razer             |
Yes     | (r ) Yes  | Yes
 6 | http-download.opensuse.org-e45a9633 | openSUSE:Tumbleweed        | No
     | ----      | ----
 7 | http-download.opensuse.org-f3a8d516 | home:Horst3180             |
Yes     | (r ) Yes  | Yes
 8 | http-ftp.gwdg.de-2eba93dd           | Packman Repository         |
Yes     | (r ) Yes  | Yes
 9 | http-opensuse-guide.org-da5f09af    | libdvdcss repository       |
Yes     | (r ) Yes  | Yes
10 | repo-debug                          | openSUSE-Tumbleweed-Debug  | No
     | ----      | ----
11 | repo-source                         | openSUSE-Tumbleweed-Source | No
     | ----      | ----
When I do zypper dup, I get :

Retrieving package glibc-2.31-3.2.x86_64
...
(5/418),   1.7 MiB (  5.9 MiB
unpacked)
Retrieving: glibc-2.31-3.2.x86_64.rpm
.......................................................................................................[done
(1.3 MiB/s)]
Warning: Digest verification failed for file 'glibc-2.31-3.2.x86_64.rpm'
[/var/tmp/AP_0xTh4ctF/x86_64/glibc-2.31-3.2.x86_64.rpm]
expected 5d1bb5abf4e3b5abbf191469151c2923a80c3545a7add6b2d6051617102bbaba
  but got  a89ae86e05e55440b3cdf4cf39ae1323fb87459a7968aaeafed6c9f1d2f2f066
For consistently the same packages. I have tried:
# zypper ref (tried --force too)
# zypper clean
# zypper dup

multiple times but keep getting the same issue.

Some packages are even reporting multiple different digests on retrying:
(Following is from one run)

Retrieving package gcc9-info-9.2.1+git1192-1.3.noarch
...
(174/418),   2.3 MiB (  2.2 MiB
unpacked)
Retrieving: gcc9-info-9.2.1+git1192-1.3.noarch.rpm
........................................................................................[done
(790.2 KiB/s)]
Warning: Digest verification failed for file
'gcc9-info-9.2.1+git1192-1.3.noarch.rpm'
[/var/tmp/AP_0xTh4ctF/noarch/gcc9-info-9.2.1+git1192-1.3.noarch.rpm]
expected 0474686086f939eaa42921d38542824b8066fb0f49902ac29b16876693e37802
  but got  b13c9fde9d2dbcf03cdf49048fa0088c56ae19e4e925020f41cbf1ac67a5a845
Accepting packages with wrong checksums can lead to a corrupted system and
in extreme cases even to a system compromise.
However if you made certain that the file with checksum 'b13c..' is
secure, correct
and should be used within this operation, enter the first 4 characters of
the checksum
to unblock using this file on your own risk. Empty input will discard the
file.
Unblock or discard? [b13c/...? shows all options] (discard):
Package gcc9-info-9.2.1+git1192-1.3.noarch (Main Repository (OSS)) seems
to be corrupted during transfer. Do you want to retry retrieval?
Abort, retry, ignore? [a/r/i] (a): r
Retrieving package gcc9-info-9.2.1+git1192-1.3.noarch
                                            (174/418),   2.3 MiB (  2.2 MiB
unpacked)
Retrieving: gcc9-info-9.2.1+git1192-1.3.noarch.rpm
..........................................................................................[done
(1.5 MiB/s)]
Warning: Digest verification failed for file
'gcc9-info-9.2.1+git1192-1.3.noarch.rpm'
[/var/tmp/AP_0xTh4ctF/noarch/gcc9-info-9.2.1+git1192-1.3.noarch.rpm]
expected 0474686086f939eaa42921d38542824b8066fb0f49902ac29b16876693e37802
  but got  d544e4e1439a2a79ea65173bb2c142a26f1ca1818d21a4d2c9264ccc853fe0ae
Accepting packages with wrong checksums can lead to a corrupted system and
in extreme cases even to a system compromise.
However if you made certain that the file with checksum 'd544..' is
secure, correct
and should be used within this operation, enter the first 4 characters of
the checksum
to unblock using this file on your own risk. Empty input will discard the
file.
Unblock or discard? [d544/...? shows all options] (discard):
Package gcc9-info-9.2.1+git1192-1.3.noarch (Main Repository (OSS)) seems
to be corrupted during transfer. Do you want to retry retrieval?
Abort, retry, ignore? [a/r/i] (a): r
Retrieving package gcc9-info-9.2.1+git1192-1.3.noarch
                                            (174/418),   2.3 MiB (  2.2 MiB
unpacked)
Retrieving: gcc9-info-9.2.1+git1192-1.3.noarch.rpm
..........................................................................................[done
(1.3 MiB/s)]
Warning: Digest verification failed for file
'gcc9-info-9.2.1+git1192-1.3.noarch.rpm'
[/var/tmp/AP_0xTh4ctF/noarch/gcc9-info-9.2.1+git1192-1.3.noarch.rpm]
expected 0474686086f939eaa42921d38542824b8066fb0f49902ac29b16876693e37802
  but got  d544e4e1439a2a79ea65173bb2c142a26f1ca1818d21a4d2c9264ccc853fe0ae
Accepting packages with wrong checksums can lead to a corrupted system and
in extreme cases even to a system compromise.
However if you made certain that the file with checksum 'd544..' is
secure, correct
and should be used within this operation, enter the first 4 characters of
the checksum
to unblock using this file on your own risk. Empty input will discard the
file.
Unblock or discard? [d544/...? shows all options] (discard):
Package gcc9-info-9.2.1+git1192-1.3.noarch (Main Repository (OSS)) seems
to be corrupted during transfer. Do you want to retry retrieval?
Abort, retry, ignore? [a/r/i] (a): r
Retrieving package gcc9-info-9.2.1+git1192-1.3.noarch
                                            (174/418),   2.3 MiB (  2.2 MiB
unpacked)
Retrieving: gcc9-info-9.2.1+git1192-1.3.noarch.rpm
..........................................................................................[done
(1.3 MiB/s)]
Warning: Digest verification failed for file
'gcc9-info-9.2.1+git1192-1.3.noarch.rpm'
[/var/tmp/AP_0xTh4ctF/noarch/gcc9-info-9.2.1+git1192-1.3.noarch.rpm]
expected 0474686086f939eaa42921d38542824b8066fb0f49902ac29b16876693e37802
  but got  b13c9fde9d2dbcf03cdf49048fa0088c56ae19e4e925020f41cbf1ac67a5a845
Accepting packages with wrong checksums can lead to a corrupted system and
in extreme cases even to a system compromise.
However if you made certain that the file with checksum 'b13c..' is
secure, correct
and should be used within this operation, enter the first 4 characters of
the checksum
to unblock using this file on your own risk. Empty input will discard the
file.
Unblock or discard? [b13c/...? shows all options] (discard):

Vibhav Sharma

Axel Braun

Vibhav Sharma

Vibhav Sharma

tags

participants (2)