Bug 1192099 - Hash sum mismatch from provo-mirror for kubic packages
Summary: Hash sum mismatch from provo-mirror for kubic packages
Status: NEW
Alias: None
Product: openSUSE.org
Classification: openSUSE
Component: BuildService (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: Richard Brown
QA Contact: Adrian Schröter
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-28 00:37 UTC by Jonathan Yu
Modified: 2021-10-28 09:43 UTC (History)
2 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jonathan Yu 2021-10-28 00:37:59 UTC
I'm not sure how to reach the admins of this mirror, so I'm filing here. Please help me identify the correct place to submit information about this issue.

I have the following entry in my Debian package list:

> deb [signed-by=/usr/share/keyrings/kubic.gpg] https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04/ /

I get redirected to provo-mirror and get a Hash Sum Mismatch error. Changing to the Purdue mirror resolves this issue. This is the package list that works fine:

> deb [signed-by=/usr/share/keyrings/kubic.gpg] http://plug-mirror.rcac.purdue.edu/opensuse/repositories/devel%3A/kubic%3A/libcontainers%3A/stable/xUbuntu_20.04/ /

Here is the error message shown by apt:

Get:27 https://provo-mirror.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04  Packages [12.6 kB]
Err:27 https://provo-mirror.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04  Packages
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:12605 [weak]
   - SHA256:5348a3f0c5446e4c806ff71d755441f513b13599f5e18e16efab77e469639c97
   - SHA1:65dbc5da6d89236a2bfac73825a085efd7a6e82f [weak]
   - MD5Sum:0335a88fb1a2400b4a976817dba3920a [weak]
  Hashes of received file:
   - SHA256:2c3c5ae2ddd8e6d5234496b289d023f5f75b9c21f7ecbde1c7fe62612c17d6b1
   - SHA1:6f38ba6241b16aefa6314bf16d5a40e00f5ef4da [weak]
   - MD5Sum:3e3b023ec1b807ac59fb4d99cc2ae377 [weak]
   - Filesize:12605 [weak]
  Last modification reported: Mon, 25 Oct 2021 14:32:23 +0000
  Release file created at: Tue, 26 Oct 2021 21:32:07 +0000
Fetched 3578 kB in 2s (1481 kB/s)
Reading package lists...
E: Failed to fetch https://provo-mirror.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04/Packages.gz  Hash Sum mismatch
   Hashes of expected file:
    - Filesize:12605 [weak]
    - SHA256:5348a3f0c5446e4c806ff71d755441f513b13599f5e18e16efab77e469639c97
    - SHA1:65dbc5da6d89236a2bfac73825a085efd7a6e82f [weak]
    - MD5Sum:0335a88fb1a2400b4a976817dba3920a [weak]
   Hashes of received file:
    - SHA256:2c3c5ae2ddd8e6d5234496b289d023f5f75b9c21f7ecbde1c7fe62612c17d6b1
    - SHA1:6f38ba6241b16aefa6314bf16d5a40e00f5ef4da [weak]
    - MD5Sum:3e3b023ec1b807ac59fb4d99cc2ae377 [weak]
    - Filesize:12605 [weak]
   Last modification reported: Mon, 25 Oct 2021 14:32:23 +0000
   Release file created at: Tue, 26 Oct 2021 21:32:07 +0000
E: Some index files failed to download. They have been ignored, or old ones used instead.
Comment 1 Adrian Schröter 2021-10-28 05:15:53 UTC
please note that debian based distros do not get the build counter increased automatically on rebuild. So a changing package with same name (and therefore not matching checksum on mirrors) can happen easily..
Comment 2 Chenzi Cao 2021-10-28 08:05:13 UTC
Assign to container maintainers to take a look at this issue, please feel free to reassign whenever necessary, thanks.
Comment 3 Andrej Gomozov 2021-10-28 09:43:20 UTC
I'm facing the same issue. Would appreciate if this could be fixed soon.