[[email protected]: Re: Failed to checksum on tarball latest kernel 5.1.15]

[email protected]: Re: Failed to checksum on tarball latest kernel 5.1.15 Bhaskar Chowdhury 1 participant 2 messages Jun 25, 2019 Stable branch

lore

Share & tools

lore

Bhaskar Chowdhury

author

2019-06-25 09:13 UTC #0 lore raw

Please look in. This is happening at least two different distros I tried...here is another one :

bhaskar@Slackware_14:12:28_Tue Jun 25:~> Adm_scripts/secure_kernel_tarball 5.1.15 Using TMPDIR=/home/bhaskar/Downloads/linux-tarball-verify.36SHqG.untrusted Making sure we have all the necessary keys
pub rsa4096 2013-01-24 [SC]
B8868C80BA62A1FFFAF5FDA9632D3A06589DA6B1
uid [ unknown] Kernel.org checksum autosigner <[email protected]>

pub rsa4096 2011-09-23 [SC]
647F28654894E3BD457199BE38DBBDC86092693E
uid [ unknown] Greg Kroah-Hartman <[email protected]>
uid [ unknown] Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>
uid [ unknown] Greg Kroah-Hartman <[email protected]>
sub rsa4096 2011-09-23 [E]

pub rsa2048 2011-09-20 [SC]
ABAF11C65A2970B130ABE3C479BE3E4300411886
uid [ unknown] Linus Torvalds <[email protected]>
uid [ unknown] Linus Torvalds <[email protected]>
sub rsa2048 2011-09-20 [E]

Downloading the checksums file for linux-5.1.15
Verifying the checksums file
gpgv: Signature made Sat 22 Jun 2019 03:01:21 PM IST
gpgv: using RSA key 632D3A06589DA6B1
gpgv: Good signature from "Kernel.org checksum autosigner <[email protected]>"

Downloading the signature file for linux-5.1.15
Downloading the XZ tarball for linux-5.1.15
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 101M 100 101M 0 0 270k 0 0:06:23 0:06:23 --:--:-- 328k
Verifying checksum on linux-5.1.15.tar.xz
/usr/bin/sha256sum: /home/bhaskar/Downloads/linux-tarball-verify.36SHqG.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found FAILED to verify the downloaded tarball checksum

----- Forwarded message from Greg KH <[email protected]> -----

Date: Tue, 25 Jun 2019 14:59:38 +0800
From: Greg KH <[email protected]>
To: Bhaskar Chowdhury <[email protected]>
Subject: Re: Failed to checksum on tarball latest kernel 5.1.15
User-Agent: Mutt/1.12.1 (2019-06-15)

Quoted 33 lines · Bhaskar Chowdhury

I got this :
Check the latest stable kernel version from kernel.org
5.1.15 Get the kernel from kernel.org and this for the *stable* kernel
Using TMPDIR=/home/bhaskar/latest_kernel_build_Gentoo_2019-06-25/linux-tarball-verify.XwbUNj.untrusted Making sure we have all the necessary keys
gpg: WARNING: unsafe ownership on homedir '/home/bhaskar/.gnupg'
pub rsa4096 2013-01-24 [SC]
     B8868C80BA62A1FFFAF5FDA9632D3A06589DA6B1
uid [ unknown] Kernel.org checksum autosigner <[email protected]>
pub rsa4096 2011-09-23 [SC]
     647F28654894E3BD457199BE38DBBDC86092693E
uid           [ unknown] Greg Kroah-Hartman <[email protected]>
uid           [ unknown] Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>
uid           [ unknown] Greg Kroah-Hartman <[email protected]>
sub rsa4096 2011-09-23 [E]
pub rsa2048 2011-09-20 [SC]
     ABAF11C65A2970B130ABE3C479BE3E4300411886
uid [ unknown] Linus Torvalds <[email protected]>
uid [ unknown] Linus Torvalds <[email protected]>
sub rsa2048 2011-09-20 [E]
Downloading the checksums file for linux-5.1.15
Verifying the checksums file
gpgv: Signature made Sat Jun 22 15:01:21 2019 IST
gpgv: using RSA key 632D3A06589DA6B1
gpgv: Good signature from "Kernel.org checksum autosigner <[email protected]>"

Quoted 10 lines

Downloading the signature file for linux-5.1.15 Downloading the XZ tarball for linux-5.1.15
 % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                Dload  Upload   Total   Spent    Left  Speed
100  101M  100  101M    0     0  8237k      0  0:00:12  0:00:12 --:--:-- 8342k
Verifying checksum on linux-5.1.15.tar.xz
/usr/bin/sha256sum: /home/bhaskar/latest_kernel_build_Gentoo_2019-06-25/linux-tarball-verify.XwbUNj.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found FAILED to verify the downloaded tarball checksum

Looks like a distro problem, right?

----- End forwarded message -----

Bhaskar Chowdhury

author

2019-06-25 11:38 UTC #1 lore raw

It seems fixed now ...

Downloading the checksums file for linux-5.1.15 Verifying the checksums file
gpgv: Signature made Tue 25 Jun 2019 09:16:04 AM IST gpgv: using RSA key 632D3A06589DA6B1
gpgv: Good signature from "Kernel.org checksum autosigner <[email protected]>"

Downloading the signature file for linux-5.1.15
Downloading the XZ tarball for linux-5.1.15
% Total    % Received % Xferd Average Speed   Time    Time     Time Current
                                 Dload Upload   Total   Spent    Left Speed
100 101M 100 101M    0     0   300k      0 0:05:44 0:05:44 --:--:-- 562k
Verifying checksum on linux-5.1.15.tar.xz linux-5.1.15.tar.xz: OK

Verifying developer signature on the tarball
gpgv: Signature made Tue 25 Jun 2019 09:05:48 AM IST
gpgv:                using RSA key 647F28654894E3BD457199BE38DBBDC86092693E
gpgv: Good signature from "Greg Kroah-Hartman <[email protected]>" gpgv:                 aka "Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>"
gpgv:                 aka "Greg Kroah-Hartman <[email protected]>"

Successfully downloaded and verified
/home/bhaskar/Downloads/linux-5.1.15.tar.xz

Quoted 122 lines · Bhaskar Chowdhury

Please look in. This is happening at least two different distros I tried...here is another one :
bhaskar@Slackware_14:12:28_Tue Jun 25:~> Adm_scripts/secure_kernel_tarball 5.1.15
Using TMPDIR=/home/bhaskar/Downloads/linux-tarball-verify.36SHqG.untrusted Making sure we have all the necessary keys
pub   rsa4096 2013-01-24 [SC] B8868C80BA62A1FFFAF5FDA9632D3A06589DA6B1
     uid           [ unknown] Kernel.org checksum autosigner <[email protected]>
     pub   rsa4096 2011-09-23 [SC] 647F28654894E3BD457199BE38DBBDC86092693E
           uid           [ unknown] Greg Kroah-Hartman <[email protected]>
           uid           [ unknown] Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>
           uid           [ unknown] Greg Kroah-Hartman <[email protected]>
           sub   rsa4096 2011-09-23 [E]
           pub   rsa2048 2011-09-20 [SC] ABAF11C65A2970B130ABE3C479BE3E4300411886 uid           [ unknown] Linus Torvalds <[email protected]>
                 uid           [ unknown] Linus Torvalds <[email protected]>
                 sub   rsa2048 2011-09-20 [E]
                 Downloading the checksums file for linux-5.1.15 Verifying the checksums file
                 gpgv: Signature made Sat 22 Jun 2019 03:01:21 PM IST gpgv:                using RSA key 632D3A06589DA6B1
                 gpgv: Good signature from "Kernel.org checksum autosigner <[email protected]>"
                 Downloading the signature file for linux-5.1.15 Downloading the XZ tarball for linux-5.1.15
                   % Total    % Received % Xferd Average Speed Time    Time     Time Current
                                                    Dload Upload Total   Spent    Left Speed
                                                    100 101M 100 101M    0     0   270k      0 0:06:23 0:06:23 --:--:-- 328k Verifying checksum on linux-5.1.15.tar.xz

/usr/bin/sha256sum:
/home/bhaskar/Downloads/linux-tarball-verify.36SHqG.untrusted/sha256sums.txt:
no properly formatted SHA256 checksum lines found
                                                    FAILED to verify the downloaded tarball checksum
----- Forwarded message from Greg KH <[email protected]> -----
Date: Tue, 25 Jun 2019 14:59:38 +0800
From: Greg KH <[email protected]>
To: Bhaskar Chowdhury <[email protected]>
Subject: Re: Failed to checksum on tarball latest kernel 5.1.15
User-Agent: Mutt/1.12.1 (2019-06-15)
Quoted 37 lines · Bhaskar Chowdhury
I got this :
Check the latest stable kernel version from kernel.org
5.1.15 Get the kernel from kernel.org and this for the *stable* kernel
Using TMPDIR=/home/bhaskar/latest_kernel_build_Gentoo_2019-06-25/linux-tarball-verify.XwbUNj.untrusted Making sure we have all the necessary keys
gpg: WARNING: unsafe ownership on homedir '/home/bhaskar/.gnupg'
pub   rsa4096 2013-01-24 [SC]
     B8868C80BA62A1FFFAF5FDA9632D3A06589DA6B1
uid           [ unknown] Kernel.org checksum autosigner
<[email protected]>
pub   rsa4096 2011-09-23 [SC] 647F28654894E3BD457199BE38DBBDC86092693E
uid           [ unknown] Greg Kroah-Hartman <[email protected]> uid           [ unknown] Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>
uid           [ unknown] Greg Kroah-Hartman <[email protected]> sub   rsa4096 2011-09-23 [E]
pub   rsa2048 2011-09-20 [SC] ABAF11C65A2970B130ABE3C479BE3E4300411886
uid           [ unknown] Linus Torvalds <[email protected]> uid           [ unknown] Linus Torvalds <[email protected]> sub   rsa2048 2011-09-20 [E]
Downloading the checksums file for linux-5.1.15 Verifying the checksums file
gpgv: Signature made Sat Jun 22 15:01:21 2019 IST gpgv:                using RSA key 632D3A06589DA6B1
gpgv: Good signature from "Kernel.org checksum autosigner <[email protected]>"
Quoted 15 lines
Downloading the signature file for linux-5.1.15
Downloading the XZ tarball for linux-5.1.15
% Total    % Received % Xferd Average Speed   Time    Time
Time Current
                                Dload Upload   Total   Spent
Left Speed
100 101M 100 101M    0     0 8237k      0 0:00:12 0:00:12
--:--:-- 8342k
Verifying checksum on linux-5.1.15.tar.xz
/usr/bin/sha256sum:
/home/bhaskar/latest_kernel_build_Gentoo_2019-06-25/linux-tarball-verify.XwbUNj.untrusted/sha256sums.txt:
no properly formatted SHA256 checksum lines found
FAILED to verify the downloaded tarball checksum
Looks like a distro problem, right?
----- End forwarded message -----