[opensuse-support] openSUSE Tumbleweed installation blocked by "Wrong Digest" error
Hi Folks, I'm trying to install openSUSE Tumbleweed on a laptop and the installation errors early on when its trying to refresh the https://download.nvidia.com/opensuse/tumbleweed repository details. The error message reported is: ---snip--- Wrong Digest The expected checksum of file /var/tmp/AP_0xp8UPnm/repodata/susedata.xml.gz is fa47ae8244fe7640f149d28964e604bf7e756da989d7e520f67216a96bb6cfb2, but the current checksum is 1f4dc420bfbf3d1b423cd7c4e1ca6aa25d7a13daff70c64e412f0ed449602406. The file has been changed by accident or by an attacker since the repository creator signed it. Using it is a big risk for the integrity and security of your system. Use it anyway? [] Do not show this message again [ YES ] [ NO ] ---snip--- I can consistently reproduce this on the laptop as well as in a Virtualbox VM. Others have also experienced the same issue: - https://old.reddit.com/r/openSUSE/comments/iiuc4g/anybody_else_getting_a_wro... - https://lists.opensuse.org/opensuse-factory/2020-08/msg00329.html I've logged a bug report for it (https://bugzilla.opensuse.org/show_bug.cgi?id=1175968) but it may be misfiled as I wasn't sure which component was at fault. Is there anything I can try to unblock the installation short of clicking the [ YES ] button and using the repo with the wrong digest? I am hesitant to do so as this may be a security issue. regards, Jinesh-- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On Mon 31 Aug 2020 09:02:48 PM CDT, Jinesh Choksi wrote:
Hi Folks,
I'm trying to install openSUSE Tumbleweed on a laptop and the installation errors early on when its trying to refresh the https://download.nvidia.com/opensuse/tumbleweed repository details.
The error message reported is:
---snip--- Wrong Digest
The expected checksum of file /var/tmp/AP_0xp8UPnm/repodata/susedata.xml.gz is fa47ae8244fe7640f149d28964e604bf7e756da989d7e520f67216a96bb6cfb2, but the current checksum is 1f4dc420bfbf3d1b423cd7c4e1ca6aa25d7a13daff70c64e412f0ed449602406.
The file has been changed by accident or by an attacker since the repository creator signed it. Using it is a big risk for the integrity and security of your system.
Use it anyway?
[] Do not show this message again
[ YES ] [ NO ] ---snip---
I can consistently reproduce this on the laptop as well as in a Virtualbox VM.
Others have also experienced the same issue:
- https://old.reddit.com/r/openSUSE/comments/iiuc4g/anybody_else_getting_a_wro...
- https://lists.opensuse.org/opensuse-factory/2020-08/msg00329.html
I've logged a bug report for it (https://bugzilla.opensuse.org/show_bug.cgi?id=1175968) but it may be misfiled as I wasn't sure which component was at fault.
Is there anything I can try to unblock the installation short of clicking the [ YES ] button and using the repo with the wrong digest? I am hesitant to do so as this may be a security issue.
regards, Jinesh--
Hi All the openSUSE and SUSE Nvidia repositories are 404 (don't exist)..... https://download.nvidia.com/opensuse/ -- Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890) Tumbleweed 20200826 | GNOME Shell 3.36.5 | 5.8.2-1-default Intel DQ77MK MB | Xeon E3-1245 V2 X8 @ 3.40 GHz | Intel/Nvidia up 18:06, 2 users, load average: 3.10, 2.00, 1.26 -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On 31/08/2020 22.16, Malcolm wrote:
Hi All the openSUSE and SUSE Nvidia repositories are 404 (don't exist)..... https://download.nvidia.com/opensuse/
You get that result with a browser, it is the expected result. It should work with YaST or zypper. Look, I add the repo with --refresh --check: -c, --check Probe given URI. -f, --refresh Enable autorefresh of the repository. The autorefresh is disabled by default when adding new repositories. Telcontar:~ # zypper addrepo --refresh --check https://download.nvidia.com/opensuse/leap/15.1 NVIDIA Adding repository 'NVIDIA' ..........................................................................................................................................................................[done] Repository 'NVIDIA' successfully added URI : https://download.nvidia.com/opensuse/leap/15.1 Enabled : Yes GPG Check : Yes Autorefresh : Yes Priority : 99 (default priority) Repository priorities in effect: (See 'zypper lr -P' for details) 95 (raised priority) : 1 repository 98 (raised priority) : 1 repository 99 (default priority) : 11 repositories 100 (lowered priority) : 2 repositories 105 (lowered priority) : 4 repositories 106 (lowered priority) : 1 repository 107 (lowered priority) : 1 repository 109 (lowered priority) : 1 repository 111 (lowered priority) : 2 repositories Telcontar:~ # Telcontar:~ # zypper removerepo NVIDIA Removing repository 'NVIDIA' ........................................................................................................................................................................[done] Repository 'NVIDIA' has been removed. Telcontar:~ # -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On 31/08/2020 22.39, Carlos E. R. wrote:
On 31/08/2020 22.16, Malcolm wrote:
Hi All the openSUSE and SUSE Nvidia repositories are 404 (don't exist)..... https://download.nvidia.com/opensuse/
You get that result with a browser, it is the expected result. It should work with YaST or zypper.
If you try https://download.nvidia.com/opensuse/ with a browser, it works. I think there is a trick to navigate further if you change the browser identification. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On Mon, 31 Aug 2020 22:39:48 +0200, "Carlos E. R."
On 31/08/2020 22.16, Malcolm wrote:
Hi All the openSUSE and SUSE Nvidia repositories are 404 (don't exist)..... https://download.nvidia.com/opensuse/
You get that result with a browser, it is the expected result. It should work with YaST or zypper.
Look, I add the repo with --refresh --check:
-c, --check Probe given URI.
-f, --refresh Enable autorefresh of the repository. The autorefresh is disabled by default when adding new repositories.
Telcontar:~ # zypper addrepo --refresh --check https://download.nvidia.com/opensuse/leap/15.1 NVIDIA Adding repository 'NVIDIA' ..........................................................................................................................................................................[done] Repository 'NVIDIA' successfully added
URI : https://download.nvidia.com/opensuse/leap/15.1 Enabled : Yes GPG Check : Yes Autorefresh : Yes Priority : 99 (default priority)
Repository priorities in effect: (See 'zypper lr -P' for details) 95 (raised priority) : 1 repository 98 (raised priority) : 1 repository 99 (default priority) : 11 repositories 100 (lowered priority) : 2 repositories 105 (lowered priority) : 4 repositories 106 (lowered priority) : 1 repository 107 (lowered priority) : 1 repository 109 (lowered priority) : 1 repository 111 (lowered priority) : 2 repositories Telcontar:~ #
Telcontar:~ # zypper removerepo NVIDIA Removing repository 'NVIDIA' ........................................................................................................................................................................[done] Repository 'NVIDIA' has been removed. Telcontar:~ #
Hi,
I tried the same on a openSUSE Tumbleweed VM I had around:
---snip---
localhost:~ # zypper lr -P
# | Alias | Name | Enabled | GPG Check | Refresh | Priority
--+----------------------------------+---------------------------+---------+-----------+---------+---------
1 | download.opensuse.org-non-oss | Main Repository (NON-OSS) | Yes | (r ) Yes | Yes | 99
2 | download.opensuse.org-oss | Main Repository (DEBUG) | Yes | (r ) Yes | Yes | 99
3 | download.opensuse.org-oss_1 | Main Repository (Sources) | Yes | (r ) Yes | Yes | 99
4 | download.opensuse.org-oss_2 | Main Repository (OSS) | Yes | (r ) Yes | Yes | 99
5 | download.opensuse.org-tumbleweed | Main Update Repository | Yes | (r ) Yes | Yes | 99
6 | openSUSE-20200824-0 | openSUSE-20200824-0 | Yes | (r ) Yes | Yes | 99
localhost:~ # zypper addrepo --refresh --check https://download.nvidia.com/opensuse/tumbleweed NVIDIA
Adding repository 'NVIDIA' ................................................................................................................................................................[done]
Repository 'NVIDIA' successfully added
URI : https://download.nvidia.com/opensuse/tumbleweed
Enabled : Yes
GPG Check : Yes
Autorefresh : Yes
Priority : 99 (default priority)
Repository priorities are without effect. All enabled repositories share the same priority.
localhost:~ # zypper refresh
Retrieving repository 'NVIDIA' metadata ------------------------------------------------------------------------------------------------------------------------------------------------------[\]
New repository or package signing key received:
Repository: NVIDIA
Key Name: NVIDIA Corporation
On Mon 31 Aug 2020 09:56:27 PM CDT, Jinesh Choksi wrote: <snip>
Regarding why the directory is non browseable, this old (15 Aug 2017) thread (https://lists.opensuse.org/opensuse-factory/2017-08/msg00397.html) mentions it is a known issue/limitation.
regards, Jinesh--
Hi I was browsing it about a week ago with no issues..... ;) It was an easy way to advise forum users if it was up to date since I use the hard way here.... -- Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890) Tumbleweed 20200829 | GNOME Shell 3.36.5 | 5.8.4-1-default Intel DQ77MK MB | Xeon E3-1245 V2 X8 @ 3.40 GHz | Intel/Nvidia up 0:02, 2 users, load average: 1.34, 0.90, 0.37 -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On 31/08/2020 23.04, Malcolm wrote:
On Mon 31 Aug 2020 09:56:27 PM CDT, Jinesh Choksi wrote: <snip>
Regarding why the directory is non browseable, this old (15 Aug 2017) thread (https://lists.opensuse.org/opensuse-factory/2017-08/msg00397.html) mentions it is a known issue/limitation.
regards, Jinesh--
Hi I was browsing it about a week ago with no issues..... ;) It was an easy way to advise forum users if it was up to date since I use the hard way here....
Oh - pity they reverted :-( -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
On Mon 31 Aug 2020 11:09:10 PM CDT, Carlos E. R. wrote:
Hi I was browsing it about a week ago with no issues..... ;) It was an easy way to advise forum users if it was up to date since I use the hard way here....
Oh - pity they reverted :-(
Hi It's back again..... https://download.nvidia.com/opensuse/ -- Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890) Tumbleweed 20200902 | GNOME Shell 3.36.5 | 5.8.4-1-default Intel DQ77MK MB | Xeon E3-1245 V2 X8 @ 3.40 GHz | Intel/Nvidia up 23:05, 2 users, load average: 0.57, 2.12, 2.03 -- To unsubscribe, e-mail: opensuse-support+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-support+owner@opensuse.org
On 31/08/2020 22.56, Jinesh Choksi wrote:
On Mon, 31 Aug 2020 22:39:48 +0200, "Carlos E. R." <> wrote:
Hi,
I tried the same on a openSUSE Tumbleweed VM I had around:
---snip--- localhost:~ # zypper lr -P # | Alias | Name | Enabled | GPG Check | Refresh | Priority --+----------------------------------+---------------------------+---------+-----------+---------+--------- 1 | download.opensuse.org-non-oss | Main Repository (NON-OSS) | Yes | (r ) Yes | Yes | 99 2 | download.opensuse.org-oss | Main Repository (DEBUG) | Yes | (r ) Yes | Yes | 99 3 | download.opensuse.org-oss_1 | Main Repository (Sources) | Yes | (r ) Yes | Yes | 99 4 | download.opensuse.org-oss_2 | Main Repository (OSS) | Yes | (r ) Yes | Yes | 99 5 | download.opensuse.org-tumbleweed | Main Update Repository | Yes | (r ) Yes | Yes | 99 6 | openSUSE-20200824-0 | openSUSE-20200824-0 | Yes | (r ) Yes | Yes | 99 localhost:~ # zypper addrepo --refresh --check https://download.nvidia.com/opensuse/tumbleweed NVIDIA Adding repository 'NVIDIA' ................................................................................................................................................................[done] Repository 'NVIDIA' successfully added
...
localhost:~ # zypper refresh
Good move :-) I don't have an nvidia card in this computer, so I did not try.
Retrieving repository 'NVIDIA' metadata ------------------------------------------------------------------------------------------------------------------------------------------------------[\]
New repository or package signing key received:
Ok, this proves that the server is active and lets zypper download things.
Warning: Digest verification failed for file 'susedata.xml.gz' [/var/tmp/AP_0xlApxLV/repodata/susedata.xml.gz]
And this is the problem, the file is bad and there is nothing we can do about it but report in bugzilla and wait.
Unblock or discard? [1f4d/...? shows all options] (discard): ---snip---
Regarding why the directory is non browseable, this old (15 Aug 2017) thread (https://lists.opensuse.org/opensuse-factory/2017-08/msg00397.html) mentions it is a known issue/limitation.
Yes, I remember that post or something similar from the past :-) -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)
participants (3)
-
Carlos E. R. -
Jinesh Choksi -
Malcolm