http://bugzilla.opensuse.org/show_bug.cgi?id=953927 Bug ID: 953927 Summary: provide sha256sum instructions on download page (or link to them) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: All OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes Assignee: ke@suse.com Reporter: jimmy@boombatower.com QA Contact: coolo@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.49 Safari/537.36 Build Identifier: The instructions for checking the iso against the checksum should be easily accessible from the download page (https://software.opensuse.org/421/en). This applies to all releases (or at least Leap and Tumbleweed). a) sha256sum is not defaultly available? b) should not have to figure out command Something along the lines of (for openSUSE users looking to upgrade): zypper in coreutils cd /dir/with/iso (maybe even reference shortcut from dolphin [shift + F4]) sha256sum --check openSUSE-Leap-42.1-DVD-x86_64.iso.sha256 and example output: openSUSE-Leap-42.1-DVD-x86_64.iso: OK sha256sum: WARNING: 15 lines are improperly formatted So users know what to expect. Additionally it seems the gpg signature causes the warning which as you can see from the conversation may be concerning to users since it says "WARNING" in all caps. Not sure if there is a simple fix to make sha256sum ignore the gpg signature, otherwise perhaps a grep/sed/etc command piped to remove the signature before usage. Perhaps the best option is to simply link to a wiki page (perhaps it exists) that makes it easy to maintain and have users add various instructions for guis and other OS/distro starting points. Looks like the "Metalink" page may already been good enough and just need some simple command-line instructions for people looking for that quick check. Reproducible: Always Steps to Reproduce: 1. visit download page 2. download iso 3. download checksum Actual Results: wonder how to proceed Expected Results: copy/paste commands and execute to check Real world example: [01:26] <crypt0z> HI [01:26] <crypt0z> someone know where in the wiki it's written how to check the iso file? [01:27] <crypt0z> thanks in advance bro of Suse! o7 [01:28] <crypt0z> Nop? [01:29] <boombatower> crypt0z: k3b will do it while you write [01:29] <boombatower> otherwise whatever algorithm you used [01:29] <boombatower> sha1sum [file] etc [01:29] <boombatower> leap? [01:29] <crypt0z> yes leap [01:30] <boombatower> torrent client should also be able to do it [01:30] <crypt0z> the problem is: i only found the sha256... [01:30] <boombatower> sha256sum <filename> [01:30] <crypt0z> i get sha256 command not found :/ [01:30] <crypt0z> ^^ [01:31] <boombatower> zypper wp sha256sum [01:31] <crypt0z> that's why i was searching for the wiki pages Holgi :) [01:31] <boombatower> rather zypper wp /usr/bin/sha256sum [01:31] <boombatower> zypper in coreutils [01:31] <boombatower> looks like has --check option [01:32] <boombatower> so can probably do that if you download the checksum file next to iso [01:32] <boombatower> suppose I should be seeding them anyway so I'll download it [01:33] <boombatower> crypt0z: ^^ [01:33] <crypt0z> Ok ok [01:33] <boombatower> zypper in coreutils (will install it) [01:34] <crypt0z> ydone [01:34] <crypt0z> any way to get the md5 file? (brasero don't support 256sum, fuck! x) ) [01:35] <crypt0z> i found it with ddg ! but well i need the file (i get the md5: 30f4f2f599735c36b84b8f3ad0eef3e2) [01:35] <boombatower> why not just run the command? [01:36] <crypt0z> because how the command will know the correct hash? [01:36] <boombatower> http://download.opensuse.org/distribution/leap/42.1/iso/openSUSE-Leap-42.1-D... [01:36] <boombatower> link on download page [01:36] <boombatower> that is correc tone [01:37] <crypt0z> ok,thanks. [01:37] <boombatower> sha256sum --check openSUSE-Leap-42.1-DVD-x86_64.iso.sha256 [01:37] <boombatower> if you want it to check for you do that [01:37] <boombatower> otherwise do the sum on the iso and check the result manually [01:38] <boombatower> i just had both files in same dir and ran that command [01:39] <boombatower> not sure why all of what I just said isn't on download page [01:39] <boombatower> or link [01:41] <crypt0z> boombatower: yep it would be very easier for n00b [01:41] <crypt0z> ^^ [01:41] <crypt0z> thanks anyways man ! :3 [01:42] <boombatower> perhaps I'll file a bug [01:42] <boombatower> np [01:43] <boombatower> either ktorrent is bugged or my internet is too fast (doubtful) as it seems to have to stop and catch it's breath preriodically [01:45] <crypt0z> boombatower: [user@userspc Downloads]$ sha256sum --check openSUSE-Leap-42.1-DVD-x86_64.iso.sha256 openSUSE-Leap-42.1-DVD-x86_64.iso: OK sha256sum: WARNING: 15 lines are improperly formatted [user@userspc Downloads]$ [01:45] <boombatower> yea I don't think it likes the gpg signature at the bottom [01:45] <crypt0z> the "sha256sum: WARNING: 15 lines are improperly formatted" is important? [01:45] <boombatower> but it says OK [01:45] <crypt0z> yep whatever it said ok , so... =) [01:45] <crypt0z> :D [01:46] <crypt0z> LET BURN IT TO DEATH!!! *metal music, dead singer screaming* [01:46] <boombatower> hehe, gl [01:46] <crypt0z> :p [01:46] <crypt0z> thanks mate ! [01:46] <boombatower> np -- You are receiving this mail because: You are on the CC list for the bug.