Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
Date:   Mon, 8 Mar 2021 04:29:41 +0530
From:   Bhaskar Chowdhury <unixbhaskar@gmail.com>
To:     Greg KH <gregkh@linuxfoundation.org>
Cc:     Konstantin Ryabitsev <konstantin@linuxfoundation.org>,
        Ronald Warsow <rwarsow@gmx.de>, stable@vger.kernel.org,
        linux-kernel@vger.kernel.org
Subject: Re: stable kernel checksumming fails
Message-ID: <YEVa3dLvugd4+9Cv@OpenSuse>
Mail-Followup-To: Bhaskar Chowdhury <unixbhaskar@gmail.com>,
        Greg KH <gregkh@linuxfoundation.org>,
        Konstantin Ryabitsev <konstantin@linuxfoundation.org>,
        Ronald Warsow <rwarsow@gmx.de>, stable@vger.kernel.org,
        linux-kernel@vger.kernel.org
References: <d58ab27a-78ad-1119-79ac-2a1fbcd3527a@gmx.de>
 <YETm+6sQqek6kY/A@kroah.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
        protocol="application/pgp-signature"; boundary="i3HbxQlc7lFrG8j3"
Content-Disposition: inline
In-Reply-To: <YETm+6sQqek6kY/A@kroah.com>
Precedence: bulk


--i3HbxQlc7lFrG8j3
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline

On 15:45 Sun 07 Mar 2021, Greg KH wrote:
>On Sun, Mar 07, 2021 at 03:10:49PM +0100, Ronald Warsow wrote:
>> hello
>>
>> getting stable kernels with this script:
>>
>> https://git.kernel.org/pub/scm/linux/kernel/git/mricon/korg-helpers.git/tree/get-verified-tarball
>>
>>
>> fails since the last 2 (?) stable releases with (last lines):
>>
>> ...
>>
>> + /usr/bin/curl -L -o
>> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/linux-5.11.4.tar.xz
>> https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.4.tar.xz
>>   % Total    % Received % Xferd  Average Speed   Time    Time     Time
>> Current
>>                                  Dload  Upload   Total   Spent    Left
>> Speed
>> 100  112M  100  112M    0     0  5757k      0  0:00:19  0:00:19 --:--:--
>> 5938k
>>
>> pushd ${TMPDIR} >/dev/null
>> + pushd /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
>> echo "Verifying checksum on linux-${VER}.tar.xz"
>> + echo 'Verifying checksum on linux-5.11.4.tar.xz'
>> Verifying checksum on linux-5.11.4.tar.xz
>> if ! ${SHA256SUMBIN} -c ${SHACHECK}; then
>>     echo "FAILED to verify the downloaded tarball checksum"
>>     popd >/dev/null
>>     rm -rf ${TMPDIR}
>>     exit 1
>> fi
>> + /usr/bin/sha256sum -c
>> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt
>> /usr/bin/sha256sum:
>> /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted/sha256sums.txt:
>> no properly formatted SHA256 checksum lines found
>> + echo 'FAILED to verify the downloaded tarball checksum'
>> FAILED to verify the downloaded tarball checksum
>> + popd
>> + rm -rf /home/ron/Downloads/linux-tarball-verify.1GiZid5WT.untrusted
>> + exit 1
>>
>>
>> checksumming the downloaded kernel manually gives an "Okay" though.
>>
>>
>> is this just me (on Fedora 33) ?
>
>Fails for me on Arch:
>
>Verifying checksum on linux-5.11.4.tar.xz
>/usr/bin/sha256sum: /home/gregkh/Downloads/linux-tarball-verify.gZo313NCk.untrusted/sha256sums.txt: no properly formatted SHA256 checksum lines found
>FAILED to verify the downloaded tarball checksum
>
I can confirm it works alright with me on OpenSuse Tumbleweed and Slackware
...yet to test on others....Debian....Arch and Gentoo ...
>

Oh btw ...sometimes I got that specific error because of lack of dns
propogation to dns stuff in some reason...


>Konstantin, anything change recently?
>

--i3HbxQlc7lFrG8j3
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAABCAAdFiEEnwF+nWawchZUPOuwsjqdtxFLKRUFAmBFWtcACgkQsjqdtxFL
KRXtWwf+IMe1Li8fBwRLDuOOuZYdeSaki/BPoJdOZ5qBuxoIkSF1BOgj8Mj8D5JJ
SuzZ8HkWop0AUJBj0Uhd1XOPmfG1Agul5/P96jqh0Izl1c2AEXBFk3vfHwnrPK4O
qoq49VhlgKI7xny6lzxUt5uPWW6nbRel86Cn+4WM9FAeTYE1gMJ9KMqWPRh0UWw2
opjxGpRIyplpItUrslq3rSbOqz6Capr1tEbY8cgmbVI7272LoZmblfJN9sRQXQ9a
9n/qp73ODjU64gH5hfk9oNY1W+yCbmB6oPCOsJWvgmgdQuE7ycuiMU26tq+Bd8Es
oaJvY4X8pU66trcYB5wp/0VVzC9IZA==
=7Uho
-----END PGP SIGNATURE-----

--i3HbxQlc7lFrG8j3--