Re: Checksum mismatch for RPM uploaded to Dell Linux repository

I tried raising this issue a couple of days ago.

It's the checksum bundled with the rpm it self that I believe is causing the issue.

This is the failed email I tried sending late last week.

----------------------------------------
Morning/Afternoon/Evening all

We mirror in on of the dell published rpm repositories, and I spotted an issue with one of the packages.

wget http://linux.dell.com/repo/hardware/dsu/os_independent/noarch/SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm

rpm -K SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm
SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm: (SHA1) DSA sha1 MD5 GPG NOT OK

Any idea how I would get this raised with dell and cleaned up?

Thanks in advance.

Doug


-----Original Message-----
From: Linux-PowerEdge <[email protected]> On Behalf Of Matt VanderWerf
Sent: 21 July 2021 19:53
To: [email protected]
Subject: [Linux-PowerEdge] Checksum mismatch for RPM uploaded to Dell Linux repository

**  This email originated outside the company. Do not click links or attachments unless you are expecting something from the sender.  **

Hello Dell folks,

It seems you uploaded an RPM to your os_independent repository that does not match the checksum published in the repository metadata for said RPM.
This is causing issues for us syncing the repository to our RH Satellite server since (of course) it expects the checksums to match:

{"expected_size"=>39708182, "error_code"=>"size_mismatch", "name"=>"SAS-Drive_Firmware_M1XD6_LN_VSC6_A00", "unit_key"=>{"epoch"=>"0", "version"=>"VSC6", "name"=>"SAS-Drive_Firmware_M1XD6_LN_VSC6_A00",
"release"=>"21.07.00",
"checksum"=>"859fe5479b0deaf580dd7455e67025ccb538ac37", "arch"=>"noarch", "checksumtype"=>"sha1"}, "actual_size"=>33587200} (RuntimeError)

As you can see from the error message, the RPM at issue is SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm
<https://urldefense.proofpoint.com/v2/url?u=https-3A__linux.dell.com_repo_hardware_dsu_os-5Findependent_noarch_SAS-2DDrive-5FFirmware-5FM1XD6-5FLN-5FVSC6-5FA00-2DVSC6-2D21.07.00.noarch.rpm&d=DwICAg&c=FjtWNohPhseBHfDK9BOEog&r=F1UFpUjH1nAABqpL4ILgoGVwq12Q-qkIVvOhtlxS-38&m=5il4Cqo3d5Ux1pr02JmmvpScJ_PdUYXEqWNNCR1s4xc&s=ClDfvpwFl0jk5gsZbPeEh2b8T0qPFNuOrSDtoGKR96U&e= >.


You can also see this if you try to install the RPM with yum too (which is what DSU would do if you installed this firmware through DSU):

[root@host ~]# yum install
SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00
Loaded plugins: enabled_repos_upload, langpacks, package_upload, product-id, search-disabled-repos, subscription-manager ...
dell-system-update_dependent

  | 2.3 kB  00:00:00
dell-system-update_independent

  | 2.3 kB  00:00:00
...
(8/26): dell-system-update_dependent/7Server/x86_64/primary_db

  |  25 kB  00:00:00
...
(11/26): dell-system-update_independent/primary_db

  | 119 kB  00:00:00
...
Resolving Dependencies
--> Running transaction check
---> Package SAS-Drive_Firmware_M1XD6_LN_VSC6_A00.noarch 0:VSC6-21.07.00
will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================================================================================================================
 Package                                                  Arch
          Version                           Repository
                     Size
================================================================================================================================================================================
Installing:
 SAS-Drive_Firmware_M1XD6_LN_VSC6_A00                     noarch
          VSC6-21.07.00                     dell-system-update_independent
                     38 M

Transaction Summary
================================================================================================================================================================================
Install  1 Package

Total download size: 38 M
Installed size: 39 M
Is this ok [y/d/N]: y
Downloading packages:
SAS-Drive_Firmware_M1XD6_LN_VS FAILED
   ========================================-                      ]  28
MB/s |  25 MB  00:00:00 ETA
https://urldefense.proofpoint.com/v2/url?u=https-3A__linux.dell.com_repo_hardware_dsu_os-5Findependent_noarch_SAS-2DDrive-5FFirmware-5FM1XD6-5FLN-5FVSC6-5FA00-2DVSC6-2D21.07.00.noarch.rpm&d=DwICAg&c=FjtWNohPhseBHfDK9BOEog&r=F1UFpUjH1nAABqpL4ILgoGVwq12Q-qkIVvOhtlxS-38&m=5il4Cqo3d5Ux1pr02JmmvpScJ_PdUYXEqWNNCR1s4xc&s=ClDfvpwFl0jk5gsZbPeEh2b8T0qPFNuOrSDtoGKR96U&e= :
[Errno -1] Package does not match intended download. Suggestion: run yum --enablerepo=dell-system-update_independent clean metadata Trying other mirror.


Error downloading packages:
  SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch: [Errno 256] No more mirrors to try.

And this is after running the command it mentions and running 'yum clean all' for good measure.

@Dell: Can you please fix this by uploading the correct RPM or fixing the repository metadata?

Thank you.

--
Matt Vander Werf
HPC System Administrator
University of Notre Dame
Center for Research Computing - Union Station
506 W. South Street
South Bend, IN 46601
Phone: (574) 631-0692
_______________________________________________
Linux-PowerEdge mailing list
[email protected]
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.us.dell.com_mailman_listinfo_linux-2Dpoweredge&d=DwICAg&c=FjtWNohPhseBHfDK9BOEog&r=F1UFpUjH1nAABqpL4ILgoGVwq12Q-qkIVvOhtlxS-38&m=5il4Cqo3d5Ux1pr02JmmvpScJ_PdUYXEqWNNCR1s4xc&s=8zZ_nMmj2PN-3j1vynLBugjH_6jts9sPEENXVYBxYZc&e=

Cboe Europe Limited is a Recognised Investment Exchange regulated by the Financial Conduct Authority. Cboe Europe Limited is a wholly-owned subsidiary of Cboe Holdings, Inc. and is a company registered in England and Wales with Company Number 6547680 and registered office at The Monument Building, 11 Monument Street, London EC3R 8AF. This has been established for information purposes only. None of the information concerning the services or products described in this document constitutes advice or a recommendation of any product or service. To the extent that the information provided in this document constitutes a financial promotion as defined by section 21 of the Financial Services and Markets Act 2000, it is only directed at persons who qualify as a Professional Client or Eligible Counte
 rparty. Persons who do not qualify should not act on or rely upon it.