[uyuni-users] Re: Failed digest verification for bind-formula package during upgrade to 2020.07

24 Jul 2020

      I wonder why neither the expected of the actual sha256sum matches in your 
case.

I guess if you run `sha256sum /var/tmp/AP_0xbYw8c1/noarch/bind-
formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm` you will get

e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d

Right?

Could it be you configured the Uyuni Server to use a proxy? In that case you 
will not be using the proxy while running the commands I pasted before, so 
that could explain the difference.

Can you paste the .repo file at /etc/zypper/repos.d for the server?

On viernes, 24 de julio de 2020 17:25:12 (CEST) Bidault, Philippe wrote:
...
Thanks !!
I have done the same, I am using the mirror ftp.gwdg.de, and the sha256sum
give me the same result as yours.
What I am not sure to understand is that the digest we get
(039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4) does not
correspond at all with those displayed during the upgrade:
"Warning: Digest verification failed for file
'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'
[/var/tmp/AP_0xbYw8c1/noarch/bind-formula-0.1.1573049925.b509ada-1.1.uyuni.
noarch.rpm]
expected 87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60
  but got  e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d"
I don't think that this is a network issue, as 368 RPMs are downloaded
before the bind-formula one without issue.
Regards,
Philippe.
Philippe Bidault | Unix Engineer
Getronics
 M. 34617301667 |  E. Philippe.Bidault@Getronics.com | W. www.getronics.com
Getronics CMC Service Desk Iberia S.L -  VAT No:S.L.: B66686262.
Registered Office - Getronics CMC Service Desk Iberia S.L, C/Rosselloi,
Porcel, 21 planta 11, 08016 Barcelona, Spain. 
The information transmitted is intended only for use by the addressee and
may contain confidential and/or privileged material. Any review,
re-transmission, dissemination or other use of it, or the taking of any
action in reliance upon this information by persons and/or entities other
than the intended recipient is prohibited. If you received this in error,
please inform the sender and/or addressee immediately and delete the
material.  Thank you.
Legal disclaimer: http://www.getronics.com/legal/
-----Original Message-----
From: Julio González Gil 
Sent: viernes, 24 de julio de 2020 17:09
To: Bidault, Philippe 
Cc: uyuni-users@opensuse.org
Subject: Re: Failed digest verification for bind-formula package during
upgrade to 2020.07
I verified with my mirror, and indeed it looks like a problem with your
mirror or the network between you and your mirror.
From the server, run:
http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable/
openSUSE_Leap_15.2/noarch/bind-
formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm
That will tell you the mirror you are using, for example in my case:
...
$ curl
http://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/
Stable/openSUSE_Leap_15.2/noarch/bind-
formula-0.1.1573049925.b509ada-1.1.uni.noarch.rpm
...
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved https://ftp.gwdg.de/pub/opensuse/
repositories/systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind
- formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm">here</a>.</p>
...
<hr>
<address>Apache/2.4.43 (Linux/SUSE) Server at download.opensuse.org
Port
80</address>
...
</body></html>
So ftp.gwdg.de
In my mirror, if I get the package:
...
$ wget
https://ftp.gwdg.de/pub/opensuse/repositories/systemsmanagement:/
Uyuni:/Stable/openSUSE_Leap_15.2/noarch/bind-
formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm
...
$ sha256sum bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm
039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4
bind-
formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm
And if then I check the metadata at
http://download.opensuse.org/repositories/
systemsmanagement:/Uyuni:/Stable/openSUSE_Leap_15.2/repodata/
2f851f9245e626dd720310239808309614b398d0d674e8b941edd8e06b5f2fd6-
primary.xml.gz
I see:
...
<package type="rpm">
<name>bind-formula</name>
 <arch>noarch</arch>
 <version epoch="0" ver="0.1.1573049925.b509ada" rel="1.1.uyuni"/>

pkgid="YES">039afca78692e073a33faaf91663183d6d0c91558a7614d244e3963d0cfbf3e4

So at least on this mirror, it seems things are OK.
On viernes, 24 de julio de 2020 17:03:06 (CEST) Bidault, Philippe wrote:
...
Well, no luck for the moment. How can I spot the failing mirror ?
Regards,
Philippe.
From: Julio Gonzalez 
Sent: viernes, 24 de julio de 2020 16:06
To: Bidault, Philippe 
Subject: Re: Failed digest verification for bind-formula package
during upgrade to 2020.07
CAUTION: This email originated from outside of the organization. Do
not click links or open attachments unless you recognize the sender
and know the content is safe. Looks to me like a problem with the
mirror you are using and the metadata having one checksum while the
actual packages have another checksum. Could be you just had bad luck
and got in the middle of the mirror refresh?
I'd try to clean with `zypper clean` the cache and launching again. If
it still doesn't work, wait a little bit more.
Otherwise I guess this will require a ticket to the openSUSE heroes so
they disable the affected mirror. ________________________________
From: Bidault, Philippe
mailto:Philippe.Bidault@Getronics.com
Sent: Friday, July 24, 2020 4:01 PM
To: uyuni-users@opensuse.orgmailto:uyuni-users@opensuse.org
mailto:uyuni-users@opensuse.org> Subject:
[uyuni-users] Failed digest verification for bind-formula package
during upgrade to 2020.07
Hi all,
I have an error while executing the server-migrator.sh script:
Retrieving: bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm
..........................................................................
.
..................................[done]
Warning: Digest verification failed for file
'bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch.rpm'
[/var/tmp/AP_0xniEAF0/noarch/bind-formula-0.1.1573049925.b509ada-1.1.u
yuni.n
oarch.rpm]
expected
87d9f5828518a721a98b7ba47234af28578e9c71ddaa4ba2e91d5490f1396b60
but got
e3a476a93dfada74ef4cd863bd023efe9cd1c00101e98246d091a6c8d2d8fb2d
Accepting packages with wrong checksums can lead to a corrupted system
and in extreme cases even to a system compromise.
However if you made certain that the file with checksum 'e3a4..' is
secure, correct
and should be used within this operation, enter the first 4 characters
of the checksum
to unblock using this file on your own risk. Empty input will discard
the file.
Unblock or discard? [e3a4/...? shows all options] (discard): discard
Package bind-formula-0.1.1573049925.b509ada-1.1.uyuni.noarch (Uyuni
Server
Stable) seems to be corrupted during transfer. Do you want to retry
retrieval?
Abort, retry, ignore? [a/r/i] (a): a
Problem occurred during or after installation or removal of packages:
Installation has been aborted as directed.
Please see the above error message for a hint.
I guess that this is something that needs to be fixed at the
repository level ?
Regards,
Philippe.
Philippe Bidault | Unix Engineer
Getronics
________________________________
M. 34617301667 | E.
Philippe.Bidault@Getronics.commailto:Philippe.Bidault@Getronics.com | W.
www.getronics.comhttp://www.getronics.com
[cid:image001.png@01D661DC.4B604CB0]http://www.getronics.com/
[cid:image002.png@01D661DC.4B604CB0]<https://www.linkedin.com/company/
207778
5> [cid:image003.png@01D661DC.4B604CB0]
5> https://twitter.com/Getronics
[cid:image004.png@01D661DC.4B604CB0]
https://www.youtube.com/user/getronicsonline?feature=results_main
sign-info
Getronics CMC Service Desk Iberia S.L -  VAT No:S.L.: B66686262.
Registered Office - Getronics CMC Service Desk Iberia S.L,
C/Rosselloi, Porcel, 21 planta 11, 08016 Barcelona, Spain.
The information transmitted is intended only for use by the addressee
and may contain confidential and/or privileged material. Any review,
re-transmission, dissemination or other use of it, or the taking of
any action in reliance upon this information by persons and/or
entities other than the intended recipient is prohibited. If you
received this in error, please inform the sender and/or addressee
immediately and delete the material.  Thank you.
Legal disclaimer: http://www.getronics.com/legal/
--
Julio González Gil
Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com
-- 
Julio González Gil
Release Engineer, SUSE Manager and Uyuni
jgonzalez@suse.com