stable.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* stable kernel checksumming fails
@ 2021-03-07 14:10 Ronald Warsow
  2021-03-07 14:45 ` Greg KH
  0 siblings, 1 reply; 6+ messages in thread
From: Ronald Warsow @ 2021-03-07 14:10 UTC (permalink / raw)
  To: stable; +Cc: linux-kernel

hello

getting stable kernels with this script:

https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/tree/get-verified-tarball


fails since the last 2 (?) stable releases with (last lines):

...

+ /usr/bin/curl -L -o
/home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/linux-5.11.4.tar.xz
https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.4.tar.xz
   % Total    % Received % Xferd  Average Speed   Time    Time     Time
Current
                                  Dload  Upload   Total   Spent    Left
Speed
100  112M  100  112M    0     0  5757k      0  0:00:19  0:00:19 --:--:--
5938k

pushd ${TMPDIR} >/dev/null
+ pushd /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
echo "Verifying checksum on linux-${VER}.tar.xz"
+ echo 'Verifying checksum on linux-5.11.4.tar.xz'
Verifying checksum on linux-5.11.4.tar.xz
if ! ${SHA256SUMBIN} -c ${SHACHECK}; then
     echo "FAILED to verify the downloaded tarball checksum"
     popd >/dev/null
     rm -rf ${TMPDIR}
     exit 1
fi
+ /usr/bin/sha256sum -c
/home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt
/usr/bin/sha256sum:
/home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt:
no properly formatted SHA256 checksum lines found
+ echo 'FAILED to verify the downloaded tarball checksum'
FAILED to verify the downloaded tarball checksum
+ popd
+ rm -rf /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
+ exit 1


checksumming the downloaded kernel manually gives an "Okay" though.


is this just me (on Fedora 33) ?


--
regards

Ronald

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: stable kernel checksumming fails
  2021-03-07 14:10 stable kernel checksumming fails Ronald Warsow
@ 2021-03-07 14:45 ` Greg KH
  2021-03-07 15:43   ` Konstantin Ryabitsev
  2021-03-07 22:59   ` Bhaskar Chowdhury
  0 siblings, 2 replies; 6+ messages in thread
From: Greg KH @ 2021-03-07 14:45 UTC (permalink / raw)
  To: Konstantin Ryabitsev, Ronald Warsow; +Cc: stable, linux-kernel

On Sun, Mar 07, 2021 at 03:10:49PM +0100, Ronald Warsow wrote:
> hello
> 
> getting stable kernels with this script:
> 
> https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/tree/get-verified-tarball
> 
> 
> fails since the last 2 (?) stable releases with (last lines):
> 
> ...
> 
> + /usr/bin/curl -L -o
> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/linux-5.11.4.tar.xz
> https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.4.tar.xz
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
> Current
>                                  Dload  Upload   Total   Spent    Left
> Speed
> 100  112M  100  112M    0     0  5757k      0  0:00:19  0:00:19 --:--:--
> 5938k
> 
> pushd ${TMPDIR} >/dev/null
> + pushd /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
> echo "Verifying checksum on linux-${VER}.tar.xz"
> + echo 'Verifying checksum on linux-5.11.4.tar.xz'
> Verifying checksum on linux-5.11.4.tar.xz
> if ! ${SHA256SUMBIN} -c ${SHACHECK}; then
>     echo "FAILED to verify the downloaded tarball checksum"
>     popd >/dev/null
>     rm -rf ${TMPDIR}
>     exit 1
> fi
> + /usr/bin/sha256sum -c
> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt
> /usr/bin/sha256sum:
> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt:
> no properly formatted SHA256 checksum lines found
> + echo 'FAILED to verify the downloaded tarball checksum'
> FAILED to verify the downloaded tarball checksum
> + popd
> + rm -rf /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
> + exit 1
> 
> 
> checksumming the downloaded kernel manually gives an "Okay" though.
> 
> 
> is this just me (on Fedora 33) ?

Fails for me on Arch:

Verifying checksum on linux-5.11.4.tar.xz
/usr/bin/sha256sum: /home/gregkh/Downloads/linux-tarball-verify.gZo313NCk.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found
FAILED to verify the downloaded tarball checksum


Konstantin, anything change recently?


^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: stable kernel checksumming fails
  2021-03-07 14:45 ` Greg KH
@ 2021-03-07 15:43   ` Konstantin Ryabitsev
  2021-03-07 15:48     ` Greg KH
  2021-03-07 22:59   ` Bhaskar Chowdhury
  1 sibling, 1 reply; 6+ messages in thread
From: Konstantin Ryabitsev @ 2021-03-07 15:43 UTC (permalink / raw)
  To: Greg KH; +Cc: Ronald Warsow, stable, linux-kernel

On Sun, Mar 07, 2021 at 03:45:15PM +0100, Greg KH wrote:
> > checksumming the downloaded kernel manually gives an "Okay" though.
> > 
> > 
> > is this just me (on Fedora 33) ?
> 
> Fails for me on Arch:
> 
> Verifying checksum on linux-5.11.4.tar.xz
> /usr/bin/sha256sum: /home/gregkh/Downloads/linux-tarball-verify.gZo313NCk.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found
> FAILED to verify the downloaded tarball checksum
> 
> 
> Konstantin, anything change recently?

I think it's just cache invalidation problems. I've committed a tiny change to
the script that always grabs that file from the origin servers instead of
going via the CDN.

https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/commit/?id=71e570c5f090b5740e323f98504bf38592785b49

This should sidestep the problem.

-K

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: stable kernel checksumming fails
  2021-03-07 15:43   ` Konstantin Ryabitsev
@ 2021-03-07 15:48     ` Greg KH
  2021-03-07 18:28       ` Ronald Warsow
  0 siblings, 1 reply; 6+ messages in thread
From: Greg KH @ 2021-03-07 15:48 UTC (permalink / raw)
  To: Konstantin Ryabitsev; +Cc: Ronald Warsow, stable, linux-kernel

On Sun, Mar 07, 2021 at 10:43:54AM -0500, Konstantin Ryabitsev wrote:
> On Sun, Mar 07, 2021 at 03:45:15PM +0100, Greg KH wrote:
> > > checksumming the downloaded kernel manually gives an "Okay" though.
> > > 
> > > 
> > > is this just me (on Fedora 33) ?
> > 
> > Fails for me on Arch:
> > 
> > Verifying checksum on linux-5.11.4.tar.xz
> > /usr/bin/sha256sum: /home/gregkh/Downloads/linux-tarball-verify.gZo313NCk.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found
> > FAILED to verify the downloaded tarball checksum
> > 
> > 
> > Konstantin, anything change recently?
> 
> I think it's just cache invalidation problems. I've committed a tiny change to
> the script that always grabs that file from the origin servers instead of
> going via the CDN.
> 
> https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/commit/?id=71e570c5f090b5740e323f98504bf38592785b49
> 
> This should sidestep the problem.
> 
> -K

Nice, fixed it for me, thanks!

Ronald, does it now work for you too?

greg k-h

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: stable kernel checksumming fails
  2021-03-07 15:48     ` Greg KH
@ 2021-03-07 18:28       ` Ronald Warsow
  0 siblings, 0 replies; 6+ messages in thread
From: Ronald Warsow @ 2021-03-07 18:28 UTC (permalink / raw)
  To: Greg KH, Konstantin Ryabitsev; +Cc: stable, linux-kernel

On 07.03.21 16:48, Greg KH wrote:
> On Sun, Mar 07, 2021 at 10:43:54AM -0500, Konstantin Ryabitsev wrote:
>> On Sun, Mar 07, 2021 at 03:45:15PM +0100, Greg KH wrote:
>>>> checksumming the downloaded kernel manually gives an "Okay" though.
>>>>
...
>>
>> I think it's just cache invalidation problems. I've committed a tiny change to
>> the script that always grabs that file from the origin servers instead of
>> going via the CDN.
>>
>> https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/commit/?id=71e570c5f090b5740e323f98504bf38592785b49
>>
>> This should sidestep the problem.
>>
>> -K
>
> Nice, fixed it for me, thanks!
>
> Ronald, does it now work for you too?
>
> greg k-h
>

yes, all is fine again.

thanks all !

--
regards

Ronald

^ permalink raw reply	[flat|nested] 6+ messages in thread

* Re: stable kernel checksumming fails
  2021-03-07 14:45 ` Greg KH
  2021-03-07 15:43   ` Konstantin Ryabitsev
@ 2021-03-07 22:59   ` Bhaskar Chowdhury
  1 sibling, 0 replies; 6+ messages in thread
From: Bhaskar Chowdhury @ 2021-03-07 22:59 UTC (permalink / raw)
  To: Greg KH; +Cc: Konstantin Ryabitsev, Ronald Warsow, stable, linux-kernel

[-- Attachment #1: Type: text/plain, Size: 2364 bytes --]

On 15:45 Sun 07 Mar 2021, Greg KH wrote:
>On Sun, Mar 07, 2021 at 03:10:49PM +0100, Ronald Warsow wrote:
>> hello
>>
>> getting stable kernels with this script:
>>
>> https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/tree/get-verified-tarball
>>
>>
>> fails since the last 2 (?) stable releases with (last lines):
>>
>> ...
>>
>> + /usr/bin/curl -L -o
>> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/linux-5.11.4.tar.xz
>> https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.4.tar.xz
>>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
>> Current
>>                                  Dload  Upload   Total   Spent    Left
>> Speed
>> 100  112M  100  112M    0     0  5757k      0  0:00:19  0:00:19 --:--:--
>> 5938k
>>
>> pushd ${TMPDIR} >/dev/null
>> + pushd /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
>> echo "Verifying checksum on linux-${VER}.tar.xz"
>> + echo 'Verifying checksum on linux-5.11.4.tar.xz'
>> Verifying checksum on linux-5.11.4.tar.xz
>> if ! ${SHA256SUMBIN} -c ${SHACHECK}; then
>>     echo "FAILED to verify the downloaded tarball checksum"
>>     popd >/dev/null
>>     rm -rf ${TMPDIR}
>>     exit 1
>> fi
>> + /usr/bin/sha256sum -c
>> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt
>> /usr/bin/sha256sum:
>> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt:
>> no properly formatted SHA256 checksum lines found
>> + echo 'FAILED to verify the downloaded tarball checksum'
>> FAILED to verify the downloaded tarball checksum
>> + popd
>> + rm -rf /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
>> + exit 1
>>
>>
>> checksumming the downloaded kernel manually gives an "Okay" though.
>>
>>
>> is this just me (on Fedora 33) ?
>
>Fails for me on Arch:
>
>Verifying checksum on linux-5.11.4.tar.xz
>/usr/bin/sha256sum: /home/gregkh/Downloads/linux-tarball-verify.gZo313NCk.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found
>FAILED to verify the downloaded tarball checksum
>
I can confirm it works alright with me on OpenSuse Tumbleweed and Slackware
...yet to test on others....Debian....Arch and Gentoo ...
>

Oh btw ...sometimes I got that specific error because of lack of dns
propogation to dns stuff in some reason...


>Konstantin, anything change recently?
>

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2021-03-07 23:00 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-03-07 14:10 stable kernel checksumming fails Ronald Warsow
2021-03-07 14:45 ` Greg KH
2021-03-07 15:43   ` Konstantin Ryabitsev
2021-03-07 15:48     ` Greg KH
2021-03-07 18:28       ` Ronald Warsow
2021-03-07 22:59   ` Bhaskar Chowdhury

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).