Bug 752092

Summary: binary re-release leads to resign with different checksum on rpm
Product: [openSUSE] openSUSE 12.1 Reporter: Lars Müller <lmuelle>
Component: Update ProblemsAssignee: Dirk Mueller <dmueller>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Critical    
Priority: P5 - None CC: adrian.schroeter, boriss_vlassov, dmueller, forgotten_PoQ9LLo9Cj, maintenance, marc+novell, meissner, mls, mrueckert
Version: Final   
Target Milestone: ---   
Hardware: All   
OS: openSUSE 12.1   
Whiteboard:
Found By: Development Services Priority:
Business Priority: Blocker: Yes
Marketing QA Status: --- IT Deployment: ---
Attachments: zypper.log excerpt

Description Lars Müller 2012-03-13 17:56:22 UTC
tulla:~ # LC_ALL=POSIX zypper up
Loading repository data...
Reading installed packages...

The following package updates will NOT be installed:
  amarok ffmpeg gstreamer-0_10 gstreamer-0_10-plugin-gnomevfs gstreamer-0_10-plugins-bad gstreamer-0_10-plugins-base kio_audiocd kmix kscd libavcodec53 libavdevice53 
  libavfilter2 libavformat53 libavutil51 libgstapp-0_10-0 libgstapp-0_10-0-32bit libgstinterfaces-0_10-0 libgstinterfaces-0_10-0-32bit libgstreamer-0_10-0 
  libgstreamer-0_10-0-32bit libkcddb4 libkcompactdisc4 libmygpo-qt1 libquicktime0 libstrigi0 libstrigi0-32bit libswscale2 libwavpack1 libxine1-32bit linphone 
  mjpegtools python-distribute sox strigi 

The following packages are going to be upgraded:
  glibc glibc-32bit glibc-devel glibc-locale glibc-locale-32bit 

5 packages to upgrade.
Overall download size: 10.0 MiB. After the operation, additional 23.0 KiB will be used.
Continue? [y/n/?] (y): 
Retrieving package glibc-2.14.1-14.25.1.x86_64 (1/5), 1.4 MiB (5.4 MiB unpacked)
Retrieving: glibc-2.14.1-14.25.1.x86_64.rpm [done (780.5 KiB/s)]
Digest verification failed for glibc-2.14.1-14.25.1.x86_64.rpm. Expected 842882e25725cf3feef24cf4ca65124ff1c8345cee41bb8e9d7e094048ed7111, found 42f896ced3304af4a702d2a26632911a8d6130ba4cad1dcb33742972bf6be99b. Continue? [yes/no] (no):
Comment 1 Lars Müller 2012-03-13 17:59:24 UTC
Same applies to i586 but to a different package:

Paket glibc-locale-2.14.1-14.25.1.i586 wird abgerufen (27/235), 5,8 MiB (111,5 MiB entpackt)
Abruf: glibc-locale-2.14.1-14.25.1.i586.rpm [fertig (664,6 KiB/s)]
Überprüfung für glibc-locale-2.14.1-14.25.1.i586.rpm fehlgeschlagen. Erwartet wurde 63c32a9fbdc0336862c08964155dfc03a3878dbc8f85bd2d717a19dfbe4e0a5a, gefunden wurde 791656e5114a1055c02920e7ffcfb42c55c1cba33f120fbfa31ec1dd1b3b5d69. Fortfahren? [ja/nein] (nein):

Maybe a broken mirror?
Comment 2 andreas bittner 2012-03-13 18:01:56 UTC
Created attachment 481249 [details]
zypper.log excerpt

yep, here the same.....


i think i used to have a bugreport about these zypper digest errors and the mirros being not properly equipped with proper metadata, or payload data or whatever the whole mess about this time ;(
Comment 3 Marcus Meissner 2012-03-14 06:57:00 UTC
no, our metadata is probably bad
Comment 4 Marcus Meissner 2012-03-14 06:57:31 UTC
*** Bug 752118 has been marked as a duplicate of this bug. ***
Comment 5 Kun Kun Zhang 2012-03-14 07:18:39 UTC
*** Bug 752116 has been marked as a duplicate of this bug. ***
Comment 6 Adrian Schröter 2012-03-14 09:20:19 UTC
Uni-Ulm has a different rpm then the others, so I disabled that mirror for now.

However, the problem seems to be on our side, because the rpm got re-signed a second time. Most likely due to the re-release of the update.
Comment 7 Michael Schröder 2012-03-14 10:48:27 UTC
Why is this assigned to me?
Comment 12 Dirk Mueller 2012-03-31 07:42:31 UTC
No idea what happened, I've rebuilt and rereleased glibc to avoid the different variatns of the files flying around.
Comment 13 Michael Andres 2014-11-11 12:22:45 UTC
*** Bug 751653 has been marked as a duplicate of this bug. ***