Wrong checksum in Ubuntu Repository

XMLWordPrintable

    • Type: Incident report
    • Resolution: Duplicate
    • Priority: Trivial
    • None
    • Affects Version/s: None
    • Component/s: Agent2 (G)
    • None

      When trying to install zabbix through the Repository in Ubuntu noble, you get an error:

      Steps to reproduce

      Check the expected hash from the signed index against the hash actually served:

       # Expected hash from the signed index:
      curl -s [https://repo.zabbix.com/zabbix/7.0/ubuntu/dists/noble/InRelease] \
      |grep 'main/source/Sources.gz$'
      # -> ...39c643327f3a4d55b810b20ac2fa8543a95ccff2f25df7e156f8266db2ddda35... main/source/Sources.gz
      
      # Hash actually served:
      curl -s [https://repo.zabbix.com/zabbix/7.0/ubuntu/dists/noble/main/source/Sources.gz] | sha256sum
      # -> 8cc5554db06e620b5d7be5d5e23510bd9c5380f4395ee3c02cd38b392f889c18 -
      

      Or, on a clean Ubuntu 24.04 (noble) host:

      wget [https://repo.zabbix.com/zabbix/7.0/ubuntu/pool/main/z/zabbix-release/zabbix-release_latest_7.0+ubuntu24.04_all.deb]
      dpkg -i zabbix-release_latest_7.0+ubuntu24.04_all.deb
      apt update
      

      Actual result:

      Err: [https://repo.zabbix.com/zabbix/7.0/ubuntu] noble/main Sources
      Hash Sum mismatch
      E: Failed to fetch .../dists/noble/main/source/Sources.gz Hash Sum mismatch
      E: Failed to fetch .../dists/noble/main/binary-amd64/Packages.gz
      E: Failed to fetch .../dists/noble/main/binary-all/Packages.gz
      E: Some index files failed to download.
      

      Expected result: apt update succeeds; checksums in `InRelease` match the served `Sources.gz`/`Packages.gz`.

            Assignee:
            Zabbix Support Team
            Reporter:
            Paul Kramer
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: