[uyuni-users] RE: Failed digest verification for bind-formula package during upgrade to 2020.07

newer
[uyuni-users] Upgrading Clients to...

Bidault, Philippe

24 Jul 2020 24 Jul '20

15:03

Well, no luck for the moment. How can I spot the failing mirror ? Regards, Philippe. From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07 CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh? I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more. Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe mailto:Philippe.Bidault@Getronics.com> Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07 Hi all, I have an error while executing the server-migrator.sh script: Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm .............................................................................................................[done] Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm] expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise. However if you made certain that the file with checksum 'e3a4..' is secure, correct and should be used within this operation, enter the first 4 characters of the checksum to unblock using this file on your own risk. Empty input will discard the file. Unblock or discard? [e3a4/...? shows all options] (discard): discard Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval? Abort, retry, ignore? [a/r/i] (a): a Problem occurred during or after installation or removal of packages: Installation has been aborted as directed. Please see the above error message for a hint. I guess that this is something that needs to be fixed at the repository level ? Regards, Philippe. Philippe Bidault | Unix Engineer Getronics ________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]https://www.linkedin.com/company/2077785 [cid:image003.png@01D661DC.4B604CB0] https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/

Attachments:

image002.png (image/png — 468 bytes)
image003.png (image/png — 619 bytes)
attachment.htm (text/html — 13.2 KB)
image001.png (image/png — 137.8 KB)
image004.png (image/png — 817 bytes)
attachment.png (image/png — 137.8 KB)
attachment.png (image/png — 468 bytes)
attachment.png (image/png — 619 bytes)
attachment.png (image/png — 817 bytes)

Show replies by date

Julio González Gil

24 Jul 24 Jul

15:09

New subject: [uyuni-users] Re: Failed digest verification for bind-formula package during upgrade to 2020.07

...

$ curl http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/openSUSE_Leap_15.2/noarch/bind-

I verified with my mirror, and indeed it looks like a problem with your mirror or the network between you and your mirror. From the server, run: http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable/ openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm That will tell you the mirror you are using, for example in my case: formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm

...

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved https://ftp.gwdg.de/pub/opensuse/

repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>

...

<hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port 80</address> </body></html>

...

$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind-

So ftp.gwdg.de In my mirror, if I get the package: formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm And if then I check the metadata at http://download.opensuse.org/repositories/ systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/repodata/ 2f851f9245e626dd720310239808309614b398d0d674e8b941edd8e06b5f2fd6- primary.xml.gz I see: pkgid="YES">039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 So at least on this mirror, it seems things are OK. On viernes, 24 de julio de 2020 17:03:06 (CEST) Bidault, Philippe wrote:

...

Well, no luck for the moment. How can I spot the failing mirror ?

Regards, Philippe.

From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh?

I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more.

Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe mailto:Philippe.Bidault@Getronics.com> Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07

Hi all,

I have an error while executing the server-migrator.sh script:

Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm ........................................................................... ..................................[done]

Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'

[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.n oarch.rpm]

expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'e3a4..' is secure, correct

and should be used within this operation, enter the first 4 characters of the checksum

to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [e3a4/...? shows all options] (discard): discard

Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval?

Abort, retry, ignore? [a/r/i] (a): a

Problem occurred during or after installation or removal of packages:

Installation has been aborted as directed.

Please see the above error message for a hint.

I guess that this is something that needs to be fixed at the repository level ?

Regards,

Philippe.

Philippe Bidault | Unix Engineer

Getronics

________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/company/207778 5> [cid:image003.png@01D661DC.4B604CB0] https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.

The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

Bidault, Philippe

15:25

Thanks !! I have done the same, I am using the mirror ftp.gwdg.de, and the sha256sum give me the same result as yours. What I am not sure to understand is that the digest we get (039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4) does not correspond at all with those displayed during the upgrade: "Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xbYw8c1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm] expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d" I don't think that this is a network issue, as 368 RPMs are downloaded before the bind-formula one without issue. Regards, Philippe. Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:09 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07 I verified with my mirror, and indeed it looks like a problem with your mirror or the network between you and your mirror.

...

From the server, run:

...

$ curl http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/openSUSE_Leap_15.2/noarch/bind-

http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable/ openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm That will tell you the mirror you are using, for example in my case: formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm

...

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved https://ftp.gwdg.de/pub/opensuse/

repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>

...

<hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port 80</address> </body></html>

...

$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind-

So ftp.gwdg.de In my mirror, if I get the package: formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

Well, no luck for the moment. How can I spot the failing mirror ?

Regards, Philippe.

From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh?

I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more.

Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe mailto:Philippe.Bidault@Getronics.com

...
Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07

Hi all,

I have an error while executing the server-migrator.sh script:

Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm ........................................................................... ..................................[done]

Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'

[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1.u yuni.n oarch.rpm]

expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'e3a4..' is secure, correct

and should be used within this operation, enter the first 4 characters of the checksum

to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [e3a4/...? shows all options] (discard): discard

Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval?

Abort, retry, ignore? [a/r/i] (a): a

Problem occurred during or after installation or removal of packages:

Installation has been aborted as directed.

Please see the above error message for a hint.

I guess that this is something that needs to be fixed at the repository level ?

Regards,

Philippe.

Philippe Bidault | Unix Engineer

Getronics

________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/company/ 207778 5> [cid:image003.png@01D661DC.4B604CB0] 5> https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.

The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com -- To unsubscribe, e-mail: uyuni-users+unsubscribe@opensuse.org To contact the owner, e-mail: uyuni-users+owner@opensuse.org

Julio González Gil

15:35

New subject: [uyuni-users] Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I wonder why neither the expected of the actual sha256sum matches in your case. I guess if you run `sha256sum /var/tmp/AP_0xbYw8c1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm` you will get e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d Right? Could it be you configured the Uyuni Server to use a proxy? In that case you will not be using the proxy while running the commands I pasted before, so that could explain the difference. Can you paste the .repo file at /etc/zypper/repos.d for the server? On viernes, 24 de julio de 2020 17:25:12 (CEST) Bidault, Philippe wrote:

...

Thanks !!

I have done the same, I am using the mirror ftp.gwdg.de, and the sha256sum give me the same result as yours.

What I am not sure to understand is that the digest we get (039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4) does not correspond at all with those displayed during the upgrade:

"Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xbYw8c1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni. noarch.rpm]

expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d"

I don't think that this is a network issue, as 368 RPMs are downloaded before the bind-formula one without issue.

Regards, Philippe.

Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:09 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I verified with my mirror, and indeed it looks like a problem with your mirror or the network between you and your mirror.

From the server, run:

http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable/ openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

That will tell you the mirror you are using, for example in my case:

...
$ curl http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/

Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm

...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved https://ftp.gwdg.de/pub/opensuse/

repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind - formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>

...
<hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port

80</address>

...
</body></html>

So ftp.gwdg.de

In my mirror, if I get the package:

...
$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/

Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

And if then I check the metadata at http://download.opensuse.org/repositories/ systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/repodata/ 2f851f9245e626dd720310239808309614b398d0d674e8b941edd8e06b5f2fd6- primary.xml.gz

I see:

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

pkgid="YES">039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4

So at least on this mirror, it seems things are OK.

On viernes, 24 de julio de 2020 17:03:06 (CEST) Bidault, Philippe wrote:

...
Well, no luck for the moment. How can I spot the failing mirror ?

Regards, Philippe.

From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh?

I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more.

Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe mailto:Philippe.Bidault@Getronics.com

Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07

Hi all,

I have an error while executing the server-migrator.sh script:

Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm .......................................................................... . ..................................[done]

Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'

[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1.u yuni.n oarch.rpm]

expected

87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

but got

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'e3a4..' is secure, correct

and should be used within this operation, enter the first 4 characters of the checksum

to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [e3a4/...? shows all options] (discard): discard

Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval?

Abort, retry, ignore? [a/r/i] (a): a

Problem occurred during or after installation or removal of packages:

Installation has been aborted as directed.

Please see the above error message for a hint.

I guess that this is something that needs to be fixed at the repository level ?

Regards,

Philippe.

Philippe Bidault | Unix Engineer

Getronics

________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/company/ 207778 5> [cid:image003.png@01D661DC.4B604CB0] 5> https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.

The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

Bidault, Philippe

15:54

No way to be able to have the checksum of the downloaded rpm, it is not there so I guess directly removed after the failed check attempt. Yes, I am using a proxy on the Uyuni server to be able to access to the net. Regarding the repo files, they were updated by the update script: uyuni:/etc/zypp/repos.d # ls -lrt total 20 -rw-r--r-- 1 root root 148 Jul 24 13:50 repo-non-oss.repo -rw-r--r-- 1 root root 137 Jul 24 13:50 repo-oss.repo -rw-r--r-- 1 root root 136 Jul 24 13:50 repo-update.repo -rw-r--r-- 1 root root 154 Jul 24 13:50 repo-update-non-oss.repo -rw-r--r-- 1 root root 212 Jul 24 13:50 uyuni-server-stable.repo Regards, Philippe. Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:35 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07 I wonder why neither the expected of the actual sha256sum matches in your case. I guess if you run `sha256sum /var/tmp/AP_0xbYw8c1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm` you will get e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d Right? Could it be you configured the Uyuni Server to use a proxy? In that case you will not be using the proxy while running the commands I pasted before, so that could explain the difference. Can you paste the .repo file at /etc/zypper/repos.d for the server? On viernes, 24 de julio de 2020 17:25:12 (CEST) Bidault, Philippe wrote:

...

Thanks !!

I have done the same, I am using the mirror ftp.gwdg.de, and the sha256sum give me the same result as yours.

What I am not sure to understand is that the digest we get (039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4) does not correspond at all with those displayed during the upgrade:

"Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xbYw8c1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni. noarch.rpm]

expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d"

I don't think that this is a network issue, as 368 RPMs are downloaded before the bind-formula one without issue.

Regards, Philippe.

Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:09 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I verified with my mirror, and indeed it looks like a problem with your mirror or the network between you and your mirror.

From the server, run:

http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/St able/ openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

That will tell you the mirror you are using, for example in my case:

...
$ curl http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/

Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm

...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved https://ftp.gwdg.de/pub/opensuse/

repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarc h/bind - formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>

...
<hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port

80</address>

...
</body></html>

So ftp.gwdg.de

In my mirror, if I get the package:

...
$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/

Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

And if then I check the metadata at http://download.opensuse.org/repositories/ systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/repodata/ 2f851f9245e626dd720310239808309614b398d0d674e8b941edd8e06b5f2fd6- primary.xml.gz

I see:

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

pkgid="YES">039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0c fbf3e4

So at least on this mirror, it seems things are OK.

On viernes, 24 de julio de 2020 17:03:06 (CEST) Bidault, Philippe wrote:

...
Well, no luck for the moment. How can I spot the failing mirror ?

Regards, Philippe.

From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh?

I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more.

Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe

Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07

Hi all,

I have an error while executing the server-migrator.sh script:

Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm .......................................................................... . ..................................[done]

Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'

[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1 .u yuni.n oarch.rpm]

expected

87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

but got

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'e3a4..' is secure, correct

and should be used within this operation, enter the first 4 characters of the checksum

to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [e3a4/...? shows all options] (discard): discard

Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval?

Abort, retry, ignore? [a/r/i] (a): a

Problem occurred during or after installation or removal of packages:

Installation has been aborted as directed.

Please see the above error message for a hint.

I guess that this is something that needs to be fixed at the repository level ?

Regards,

Philippe.

Philippe Bidault | Unix Engineer

Getronics

________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/compan y/ 207778 5> [cid:image003.png@01D661DC.4B604CB0] 5> https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.

The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

Julio González Gil

15:58

New subject: [uyuni-users] Re: Failed digest verification for bind-formula package during upgrade to 2020.07

On viernes, 24 de julio de 2020 17:54:04 (CEST) Bidault, Philippe wrote:

...

No way to be able to have the checksum of the downloaded rpm, it is not there so I guess directly removed after the failed check attempt.

Yes, I am using a proxy on the Uyuni server to be able to access to the net.

Can you try to wget the metadata and the package *with* the proxy enabled for wget? https://stackoverflow.com/questions/11211705/how-to-set-proxy-for-wget#11211... And try to verify checksums again.

...

Regarding the repo files, they were updated by the update script:

uyuni:/etc/zypp/repos.d # ls -lrt total 20 -rw-r--r-- 1 root root 148 Jul 24 13:50 repo-non-oss.repo -rw-r--r-- 1 root root 137 Jul 24 13:50 repo-oss.repo -rw-r--r-- 1 root root 136 Jul 24 13:50 repo-update.repo -rw-r--r-- 1 root root 154 Jul 24 13:50 repo-update-non-oss.repo -rw-r--r-- 1 root root 212 Jul 24 13:50 uyuni-server-stable.repo

That seems to be correct, right. If you check uyuni-server-stable.repo, the URL for the Stable repository should be present.

...

Regards, Philippe.

Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:35 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I wonder why neither the expected of the actual sha256sum matches in your case.

I guess if you run `sha256sum /var/tmp/AP_0xbYw8c1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm` you will get

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Right?

Could it be you configured the Uyuni Server to use a proxy? In that case you will not be using the proxy while running the commands I pasted before, so that could explain the difference.

Can you paste the .repo file at /etc/zypper/repos.d for the server?

On viernes, 24 de julio de 2020 17:25:12 (CEST) Bidault, Philippe wrote:

...
Thanks !!

I have done the same, I am using the mirror ftp.gwdg.de, and the sha256sum give me the same result as yours.

What I am not sure to understand is that the digest we get (039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4) does not correspond at all with those displayed during the upgrade:

"Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xbYw8c1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni . noarch.rpm]

expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d"

I don't think that this is a network issue, as 368 RPMs are downloaded before the bind-formula one without issue.

Regards, Philippe.

Philippe Bidault | Unix Engineer Getronics

M. 34617301667 | E. Philippe.Bidault@Getronics.com | W.

www.getronics.com

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:09 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I verified with my mirror, and indeed it looks like a problem with your mirror or the network between you and your mirror.

From the server, run:

http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/St able/ openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

That will tell you the mirror you are using, for example in my case:

...
$ curl http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/

Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm

...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved https://ftp.gwdg.de/pub/opensuse/

repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarc h/bind - formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>

...
<hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port

80</address>

...
</body></html>

So ftp.gwdg.de

In my mirror, if I get the package:

...
$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/

Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

And if then I check the metadata at http://download.opensuse.org/repositories/ systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/repodata/ 2f851f9245e626dd720310239808309614b398d0d674e8b941edd8e06b5f2fd6- primary.xml.gz

I see:

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

pkgid="YES">039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0c fbf3e4

So at least on this mirror, it seems things are OK.

On viernes, 24 de julio de 2020 17:03:06 (CEST) Bidault, Philippe wrote:

...
Well, no luck for the moment. How can I spot the failing mirror ?

Regards, Philippe.

From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh?

I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more.

Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe

Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07

Hi all,

I have an error while executing the server-migrator.sh script:

Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm ........................................................................ .. . ..................................[done]

Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'

[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1 .u yuni.n oarch.rpm]

expected

87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

but got

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'e3a4..' is secure, correct

and should be used within this operation, enter the first 4 characters of the checksum

to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [e3a4/...? shows all options] (discard): discard

Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval?

Abort, retry, ignore? [a/r/i] (a): a

Problem occurred during or after installation or removal of packages:

Installation has been aborted as directed.

Please see the above error message for a hint.

I guess that this is something that needs to be fixed at the repository level ?

Regards,

Philippe.

Philippe Bidault | Unix Engineer

Getronics

________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/compan y/ 207778 5> [cid:image003.png@01D661DC.4B604CB0] 5> https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.

The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

Bidault, Philippe

16:05

My proxy settings are defined in the env variables, and wget correctly take them. I have tried again anyway, and same result as before: uyuni:~ # wget -e use_proxy=yes -e http_proxy=http://10.XX.XX.XX:8080 -e https_proxy=http://10.XX.XX.XX:8080 https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/Uyuni:/Sta ble/openSUSE_Leap_15.2/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm --2020-07-24 16:00:53-- https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/Uyuni:/Stab... Connecting to 10.XX.XX.XX:8080... connected. Proxy request sent, awaiting response... 200 OK Length: 31960 (31K) [application/x-redhat-package-manager] Saving to: 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' bind-formula-0.1.1573049925.b509ada-1.1.uyuni 100%[=================================================================================================>] 31.21K --.-KB/s in 0.001s 2020-07-24 16:00:53 (34.5 MB/s) - 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' saved [31960/31960] uyuni:~ # sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm I am .... perplex. Especially because this result does not correspond nor to the expected or actual sha256sum. Regards, Philippe. Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:58 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07 On viernes, 24 de julio de 2020 17:54:04 (CEST) Bidault, Philippe wrote:

...

No way to be able to have the checksum of the downloaded rpm, it is not there so I guess directly removed after the failed check attempt.

Yes, I am using a proxy on the Uyuni server to be able to access to the net.

Can you try to wget the metadata and the package *with* the proxy enabled for wget? https://stackoverflow.com/questions/11211705/how-to-set-proxy-for-wget#11211... And try to verify checksums again.

...

Regarding the repo files, they were updated by the update script:

uyuni:/etc/zypp/repos.d # ls -lrt total 20 -rw-r--r-- 1 root root 148 Jul 24 13:50 repo-non-oss.repo -rw-r--r-- 1 root root 137 Jul 24 13:50 repo-oss.repo -rw-r--r-- 1 root root 136 Jul 24 13:50 repo-update.repo -rw-r--r-- 1 root root 154 Jul 24 13:50 repo-update-non-oss.repo -rw-r--r-- 1 root root 212 Jul 24 13:50 uyuni-server-stable.repo

That seems to be correct, right. If you check uyuni-server-stable.repo, the URL for the Stable repository should be present.

...

Regards, Philippe.

Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:35 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I wonder why neither the expected of the actual sha256sum matches in your case.

I guess if you run `sha256sum /var/tmp/AP_0xbYw8c1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm` you will get

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Right?

Could it be you configured the Uyuni Server to use a proxy? In that case you will not be using the proxy while running the commands I pasted before, so that could explain the difference.

Can you paste the .repo file at /etc/zypper/repos.d for the server?

On viernes, 24 de julio de 2020 17:25:12 (CEST) Bidault, Philippe wrote:

...
Thanks !!

I have done the same, I am using the mirror ftp.gwdg.de, and the sha256sum give me the same result as yours.

What I am not sure to understand is that the digest we get (039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4) does not correspond at all with those displayed during the upgrade:

"Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xbYw8c1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni . noarch.rpm]

expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d"

I don't think that this is a network issue, as 368 RPMs are downloaded before the bind-formula one without issue.

Regards, Philippe.

Philippe Bidault | Unix Engineer Getronics

M. 34617301667 | E. Philippe.Bidault@Getronics.com | W.

www.getronics.com

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 17:09 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

I verified with my mirror, and indeed it looks like a problem with your mirror or the network between you and your mirror.

From the server, run:

http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/St able/ openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

That will tell you the mirror you are using, for example in my case:

...
$ curl http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/

Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm

...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved https://ftp.gwdg.de/pub/opensuse/

repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarc h/bind - formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>

...
<hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port

80</address>

...
</body></html>

So ftp.gwdg.de

In my mirror, if I get the package:

...
$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/

Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4 bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

And if then I check the metadata at http://download.opensuse.org/repositories/ systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/repodata/ 2f851f9245e626dd720310239808309614b398d0d674e8b941edd8e06b5f2fd6- primary.xml.gz

I see:

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

pkgid="YES">039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0c fbf3e4

So at least on this mirror, it seems things are OK.

On viernes, 24 de julio de 2020 17:03:06 (CEST) Bidault, Philippe wrote:

...
Well, no luck for the moment. How can I spot the failing mirror ?

Regards, Philippe.

From: Julio Gonzalez Sent: viernes, 24 de julio de 2020 16:06 To: Bidault, Philippe Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Looks to me like a problem with the mirror you are using and the metadata having one checksum while the actual packages have another checksum. Could be you just had bad luck and got in the middle of the mirror refresh?

I'd try to clean with `zypper clean` the cache and launching again. If it still doesn't work, wait a little bit more.

Otherwise I guess this will require a ticket to the openSUSE heroes so they disable the affected mirror. ________________________________ From: Bidault, Philippe

Sent: Friday, July 24, 2020 4:01 PM To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org mailto:uyuni-users@opensuse.org> Subject: [uyuni-users] Failed digest verification for bind-formula package during upgrade to 2020.07

Hi all,

I have an error while executing the server-migrator.sh script:

Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm ........................................................................ .. . ..................................[done]

Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'

[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1 .u yuni.n oarch.rpm]

expected

87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

but got

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'e3a4..' is secure, correct

and should be used within this operation, enter the first 4 characters of the checksum

to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? [e3a4/...? shows all options] (discard): discard

Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni Server Stable) seems to be corrupted during transfer. Do you want to retry retrieval?

Abort, retry, ignore? [a/r/i] (a): a

Problem occurred during or after installation or removal of packages:

Installation has been aborted as directed.

Please see the above error message for a hint.

I guess that this is something that needs to be fixed at the repository level ?

Regards,

Philippe.

Philippe Bidault | Unix Engineer

Getronics

________________________________ M. 34617301667 | E. Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W. www.getronics.comhttp://www.getronics.com [cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/ [cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/compan y/ 207778 5> [cid:image003.png@01D661DC.4B604CB0] 5> https://twitter.com/Getronics [cid:image004.png@01D661DC.4B604CB0] https://www.youtube.com/user/getronicsonline?feature=results_main sign-info

Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.

The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you.

Legal disclaimer: http://www.getronics.com/legal/

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

Julio González Gil

17:16

New subject: [uyuni-users] Re: Failed digest verification for bind-formula package during upgrade to 2020.07

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind-

...

--2020-07-24 19:03:46-- https://ftp.gwdg.de/pub/opensuse/repositories/ systemsmanagement:/Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64- Media1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm Resolviendo ftp.gwdg.de (ftp.gwdg.de)... 134.76.12.6, 2001:638:60f:110::1:2 Conectando con ftp.gwdg.de (ftp.gwdg.de)[134.76.12.6]:443... conectado. Petición HTTP enviada, esperando respuesta... 200 OK Longitud: 31368 (31K) [application/x-redhat-package-manager] Grabando a: “bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm”

bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 100% [==================================================================================================================================================================>] 30,63K --.-KB/s en 0s

2020-07-24 19:03:46 (124 MB/s) - “bind-

Ah... Fridays. I should drink more cofee. I inspected all the links again, and those are the real links: Metadata: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 Package: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm And if I download it: formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm” guardado [31368/31368]

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm So it seems we have match on the mirror. Now if I do the same using the mirrordirector (which is the correct way): Metadata: https://download.opensuse.org/repositories/systemsmanagement:/ Uyuni:/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 Package: https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm The sha256 sum does not match. This could explain it: $ curl https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="http://ftp1.nluug.nl/os/Linux/distr/ opensuse/repositories/systemsmanagement:/Uyuni:/Stable/images/repo/Uyuni- Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p> <hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port 443 </body></html> $ curl https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://ftp.gwdg.de/pub/opensuse/ repositories/systemsmanagement:/Uyuni:/Stable/images/repo/Uyuni-Server-POOL- x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz">here</a>.</p> <hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port 443 </body></html> Seems to me that in your case this is happening as well: metadata from one mirror, package from the other. Package from ftp1.nluug.nl: $ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm metadata from ftp.gwdg.de: pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 In fact I reviewed ftp1.nluug.nl and still has Uyuni 2020.06 and not 2020.07. So that seems to explain the mistery. I will open a ticket for the openSUSE heroes, in case there's a problem with the replication, as I saw the same problem at one of the Czech mirrors, but I hope the issue will be solved automatically in a few hours. -- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

Bidault, Philippe

17:46

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind-

...

--2020-07-24 19:03:46-- https://ftp.gwdg.de/pub/opensuse/repositories/ systemsmanagement:/Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64- Media1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm Resolviendo ftp.gwdg.de (ftp.gwdg.de)... 134.76.12.6, 2001:638:60f:110::1:2 Conectando con ftp.gwdg.de (ftp.gwdg.de)[134.76.12.6]:443... conectado. Petición HTTP enviada, esperando respuesta... 200 OK Longitud: 31368 (31K) [application/x-redhat-package-manager] Grabando a: “bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm”

bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 100% [==================================================================================================================================================================>] 30,63K --.-KB/s en 0s

2020-07-24 19:03:46 (124 MB/s) - “bind-

Aaaaah, ok, thanks Julio !! Will give it a try another day then. Thanks ! 😊 Philippe. Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 19:16 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07 Ah... Fridays. I should drink more cofee. I inspected all the links again, and those are the real links: Metadata: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 Package: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm And if I download it: formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm” guardado [31368/31368]

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

Bidault, Philippe

4 Aug 4 Aug

07:07

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind-

...

--2020-07-24 19:03:46-- https://ftp.gwdg.de/pub/opensuse/repositories/ systemsmanagement:/Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64- Media1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm Resolviendo ftp.gwdg.de (ftp.gwdg.de)... 134.76.12.6, 2001:638:60f:110::1:2 Conectando con ftp.gwdg.de (ftp.gwdg.de)[134.76.12.6]:443... conectado. Petición HTTP enviada, esperando respuesta... 200 OK Longitud: 31368 (31K) [application/x-redhat-package-manager] Grabando a: “bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm”

bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 100% [==================================================================================================================================================================>] 30,63K --.-KB/s en 0s

2020-07-24 19:03:46 (124 MB/s) - “bind-

So finally, I did it last night, however 4 attempts were necessary to successfully upgrade: 1 - Attempt: Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm ........................................................................................................[done] Warning: Digest verification failed for file 'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xkMZQ61/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm] expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 but got 40207c2f96902dbc5e9325dd7c78c2468a2de866af4884a4dd4c741e2a9dd453 2 - Attempt: Retrieving: caasp-management-settings-formula-4.1.1-1.1.uyuni.noarch.rpm ....................................................................................................[done] Warning: Digest verification failed for file 'caasp-management-settings-formula-4.1.1-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xmlybks/noarch/caasp-management-settings-formula-4.1.1-1.1.uyuni.noarch.rpm] expected b9339bfe2665337a48672dd26a5ea268c1bb6a60294eeb5c75b23dc6bc3eb226 but got 5404312f8bc2433ac94ac9243b028014519bbb584c587595e90a48ef84f02eda 3 - Attempt: Retrieving: uyuni-build-keys-web-2020.06-1.1.uyuni.noarch.rpm ...............................................................................................................[done] Warning: Digest verification failed for file 'uyuni-build-keys-web-2020.06-1.1.uyuni.noarch.rpm' [/var/tmp/AP_0xCjTlxG/noarch/uyuni-build-keys-web-2020.06-1.1.uyuni.noarch.rpm] expected 86f1e49797b773d6f8e91512d037acc2a377aeb9365107f0a4fd0e8a9dea2046 but got 1a8cc6ff419bfeba8ab023fbd8177f273e780b79dc97d11840f8f8388f362fb2 I have noticed that I was using ftp2.nluug.nl or ftp1.nluug.nl indifferently for metadata and/or package download, however the strange thing is that I were unable to find a sha256sum mismatch between the metadata and the package. Regards, Philippe. Philippe Bidault | Unix Engineer Getronics M. 34617301667 | E. Philippe.Bidault@Getronics.com | W. www.getronics.com Getronics CMC Service Desk Iberia S.L - VAT No:S.L.: B66686262. Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain. The information transmitted is intended only for use by the addressee and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of it, or the taking of any action in reliance upon this information by persons and/or entities other than the intended recipient is prohibited. If you received this in error, please inform the sender and/or addressee immediately and delete the material. Thank you. Legal disclaimer: http://www.getronics.com/legal/ -----Original Message----- From: Bidault, Philippe Sent: viernes, 24 de julio de 2020 19:47 To: Julio González Gil Cc: uyuni-users@opensuse.org Subject: RE: Failed digest verification for bind-formula package during upgrade to 2020.07 Aaaaah, ok, thanks Julio !! Will give it a try another day then. Thanks ! 😊 Philippe. -----Original Message----- From: Julio González Gil Sent: viernes, 24 de julio de 2020 19:16 To: Bidault, Philippe Cc: uyuni-users@opensuse.org Subject: Re: Failed digest verification for bind-formula package during upgrade to 2020.07 Ah... Fridays. I should drink more cofee. I inspected all the links again, and those are the real links: Metadata: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 Package: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm And if I download it: formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm” guardado [31368/31368]

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

...

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d bind-

...

<package type="rpm"> <name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

Julio González Gil

24 Jul 24 Jul

17:48

New subject: [uyuni-users] Re: Failed digest verification for bind-formula package during upgrade to 2020.07

So in short: do not attemp to update until this is solved. I am contacting now the openSUSE heroes so they can review this problem, and will announce this at the Uyuni Mailing lists. If you have a backup and if you want to give it a try, update the migration script so instead of adding https://download.opensuse.org/repositories/ systemsmanagement:/Uyuni:/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/ It adds https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/ I tried that now in one instance I have, and I got the 2020.07 packages installed. On viernes, 24 de julio de 2020 19:16:05 (CEST) Julio González Gil wrote:

...

Ah... Fridays. I should drink more cofee.

I inspected all the links again, and those are the real links:

Metadata: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>
pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

Package: https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/ Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

And if I download it:

...
$ wget https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/

Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
--2020-07-24 19:03:46-- https://ftp.gwdg.de/pub/opensuse/repositories/

systemsmanagement:/Uyuni%3A/Stable/images/repo/Uyuni-Server-POOL-x86_64- Media1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
Resolviendo ftp.gwdg.de (ftp.gwdg.de)... 134.76.12.6, 2001:638:60f:110::1:2 Conectando con ftp.gwdg.de (ftp.gwdg.de)[134.76.12.6]:443... conectado. Petición HTTP enviada, esperando respuesta... 200 OK Longitud: 31368 (31K) [application/x-redhat-package-manager] Grabando a: “bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm”

bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 100%

[=========================================================================== ============================================================================ ===========>] 30,63K --.-KB/s en 0s

...
2020-07-24 19:03:46 (124 MB/s) - “bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm” guardado [31368/31368]

...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60 bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

So it seems we have match on the mirror.

Now if I do the same using the mirrordirector (which is the correct way):

Metadata: https://download.opensuse.org/repositories/systemsmanagement:/ Uyuni:/Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>
pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

Package: https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d bind-

formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

The sha256 sum does not match.

This could explain it:

$ curl https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="http://ftp1.nluug.nl/os/Linux/distr/ opensuse/repositories/systemsmanagement:/Uyuni:/Stable/images/repo/Uyuni- Server-POOL-x86_64-Media1/noarch/bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p> <hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port 443 </body></html>

$ curl https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/ Stable/images/repo/Uyuni-Server-POOL-x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://ftp.gwdg.de/pub/opensuse/ repositories/systemsmanagement:/Uyuni:/Stable/images/repo/Uyuni-Server-POOL- x86_64-Media1/repodata/ 85389bcf181674574d3a5e494ffc30bd5f2269e50fe5f5d73c6e19894d322ccd- primary.xml.gz">here</a>.</p> <hr> <address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org Port 443 </body></html>

Seems to me that in your case this is happening as well: metadata from one mirror, package from the other.

Package from ftp1.nluug.nl:

$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d bind- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm

metadata from ftp.gwdg.de:

...
<package type="rpm">

<name>bind-formula</name> <arch>noarch</arch> <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>
pkgid="YES">87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60

In fact I reviewed ftp1.nluug.nl and still has Uyuni 2020.06 and not 2020.07.

So that seems to explain the mistery.

I will open a ticket for the openSUSE heroes, in case there's a problem with the replication, as I saw the same problem at one of the Czech mirrors, but I hope the issue will be solved automatically in a few hours.

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

1375

Age (days ago)

1386

Last active (days ago)

List overview

Download

10 comments

2 participants

participants (2)

Bidault, Philippe
Julio González Gil

[uyuni-users] RE: Failed digest verification for bind-formula package during upgrade to 2020.07

tags

participants (2)