Giter Club home page Giter Club logo

Comments (6)

yueguobin avatar yueguobin commented on July 18, 2024

I request a package from 'https://download.opensuse.org/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm',

2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp-core] PathInfo.cc(assert_dir):353 mkdir /var/tmp/AP_0xch3VSE/x86_64 00755
2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp::media++] MediaMultiCurl.cc(doGetFileCopy):1352 dest: /var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp::media++] MediaMultiCurl.cc(doGetFileCopy):1353 temp: /var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm.new.zypp.dDhPh4
2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp::media++] MediaCurl.cc(doGetFileCopyFile):1202 ./x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp::media++] MediaCurl.cc(doGetFileCopyFile):1212 URL: https://download.opensuse.org/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp-curl++] curlhelper.cc(log_curl):97 *   Trying 195.135.221.134:443...
2022-12-13 12:20:52 <1> guobin.localhost(22561) [zypp-curl++] curlhelper.cc(log_curl):97 *   Trying [2001:67c:2178:8::13]:443...

But these URLs are assigned, but their package signatures are incorrect

2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1158 overall result
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #0: state: 1 received: 0 url: https://mirror.tspu.ru/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #1: state: 4 received: 0 url: https://opensuse.koyanet.lv//tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #2: state: 1 received: 0 url: https://repo.fedora.md/mirrors/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #3: state: 3 received: 0 url: https://mirrors.nxthost.com/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #4: state: 3 received: 0 url: https://ftp.man.poznan.pl/linux/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm

Why does "https://download.opensuse.org/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm" redirect me to these 5 URLs with incorrect package signatures?

Is SUSE still worthy of trust?
zypper.log

from zypper.

yueguobin avatar yueguobin commented on July 18, 2024

It should be the problem.
No packages were downloaded from these 5 connections.
But "zypper" seems to think that it is successful, but the actual packet size is 0, and then the verification of the packet signature fails.

2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #0: state: 1 received: 0 url: https://mirror.tspu.ru/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #1: state: 4 received: 0 url: https://opensuse.koyanet.lv//tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #2: state: 1 received: 0 url: https://repo.fedora.md/mirrors/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #3: state: 3 received: 0 url: https://mirrors.nxthost.com/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <2> guobin.localhost(22561) [zypp::media] MediaMultiCurl.cc(run):1162 #4: state: 3 received: 0 url: https://ftp.man.poznan.pl/linux/opensuse/tumbleweed/repo/oss/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(release):706 Request to release media - not attached; eject ''
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(removeAttachPoint):149 MediaHandler - checking if to remove attach point
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(release):706 Request to release media - not attached; eject ''
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(removeAttachPoint):149 MediaHandler - checking if to remove attach point
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(release):706 Request to release media - not attached; eject ''
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(removeAttachPoint):149 MediaHandler - checking if to remove attach point
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp-curl++] curlhelper.cc(log_curl):97 * Connection #1 to host mirrors.nxthost.com left intact
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(release):706 Request to release media - not attached; eject ''
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(removeAttachPoint):149 MediaHandler - checking if to remove attach point
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp-curl++] curlhelper.cc(log_curl):97 * Closing connection 2
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(release):706 Request to release media - not attached; eject ''
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(removeAttachPoint):149 MediaHandler - checking if to remove attach point
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp-core] PathInfo.cc(rename):748 rename /var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm.new.zypp.dDhPh4 -> /var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaMultiCurl.cc(doGetFileCopy):1532 done: /var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm{- 0644 0/0 size 0}
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::media++] MediaHandler.cc(provideFile):976 provideFile([1]./x86_64/libldap2-2.6.3-3.1.x86_64.rpm{203.3 KiB|sha256-fd310a75c3fc34d5972d6be8cec771488ffe35688b71bae92c8d223b79899fa2|})
2022-12-13 12:20:53 <1> guobin.localhost(22561) [zypp::fetcher] Fetcher.cc(validate):381 Checking job [/var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm] (2 checkers )
2022-12-13 12:20:53 <2> guobin.localhost(22561) [FileChecker] FileChecker.cc(operator()):64 File /var/tmp/AP_0xch3VSE/x86_64/libldap2-2.6.3-3.1.x86_64.rpm has wrong checksum sha256-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 (expected sha256-fd310a75c3fc34d5972d6be8cec771488ffe35688b71bae92c8d223b79899fa2)

from zypper.

mlandres avatar mlandres commented on July 18, 2024

You also hijacked bsc#120135, I tried to explain it there.

In case of libldap2 (in the zypper.log snippnet) opensuse.koyanet.lv returned no_error but an empty file. Maybe you can provide the full zypper.log, so we can check the other checksum failures too. Might be some broken mirror.

For some of the files above (checksum e3b0...b855; the sha256sum of an empty file) it appears the same has happened. A mirror delivered an empty file without an error. The other issues may be partial content, the mirror delivered without an error.

Almost looks like the mirror is advertised and delivers files although his sync is not complete.

from zypper.

yueguobin avatar yueguobin commented on July 18, 2024

@guobin:~> sudo ZYPP_MEDIA_CURL_DEBUG=2 zypper dup --download-only
dup download 235 package, 21 package fail. because the signature is incorrect.
zypper.log

from zypper.

mlandres avatar mlandres commented on July 18, 2024

Thanks for the log. I forward the result to our mirrorcache maintainer.

All the broken checksum incidents in the log are caused by opensuse.koyanet.lv immediately returning '204' and no data (cases where the file was small enough to be fetched in one range). In another 24 downloads opensuse.koyanet.lv was discarded as worker because it delivered blocks with wrong checksums.

Strange is just that by now, you seem to be the only one with this kind of issue.

As a workaround you can try and add those 2 lines to your /etc/hosts:

127.0.0.1 opensuse.koyanet.lv
::1             opensuse.koyanet.lv

This should redirect requests to opensuse.koyanet.lv to your local host (where they should fail correctly).

from zypper.

mlandres avatar mlandres commented on July 18, 2024

I'll check whether we can work around this in libzypp after vacation (Jan.9.)

from zypper.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.