I tried raising this issue a couple of days ago.

It's the checksum bundled with the rpm it self that I believe is causing the 
issue.

This is the failed email I tried sending late last week.

----------------------------------------
Morning/Afternoon/Evening all

We mirror in on of the dell published rpm repositories, and I spotted an issue 
with one of the packages.

wget 
http://linux.dell.com/repo/hardware/dsu/os_independent/noarch/SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm

rpm -K SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm
SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm: (SHA1) DSA sha1 
MD5 GPG NOT OK

Any idea how I would get this raised with dell and cleaned up?

Thanks in advance.

Doug


-----Original Message-----
From: Linux-PowerEdge <[email protected]> On Behalf Of Matt 
VanderWerf
Sent: 21 July 2021 19:53
To: [email protected]
Subject: [Linux-PowerEdge] Checksum mismatch for RPM uploaded to Dell Linux 
repository

**  This email originated outside the company. Do not click links or 
attachments unless you are expecting something from the sender.  **

Hello Dell folks,

It seems you uploaded an RPM to your os_independent repository that does not 
match the checksum published in the repository metadata for said RPM.
This is causing issues for us syncing the repository to our RH Satellite server 
since (of course) it expects the checksums to match:

{"expected_size"=>39708182, "error_code"=>"size_mismatch", 
"name"=>"SAS-Drive_Firmware_M1XD6_LN_VSC6_A00", "unit_key"=>{"epoch"=>"0", 
"version"=>"VSC6", "name"=>"SAS-Drive_Firmware_M1XD6_LN_VSC6_A00",
"release"=>"21.07.00",
"checksum"=>"859fe5479b0deaf580dd7455e67025ccb538ac37", "arch"=>"noarch", 
"checksumtype"=>"sha1"}, "actual_size"=>33587200} (RuntimeError)

As you can see from the error message, the RPM at issue is 
SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch.rpm
<https://urldefense.proofpoint.com/v2/url?u=https-3A__linux.dell.com_repo_hardware_dsu_os-5Findependent_noarch_SAS-2DDrive-5FFirmware-5FM1XD6-5FLN-5FVSC6-5FA00-2DVSC6-2D21.07.00.noarch.rpm&d=DwICAg&c=FjtWNohPhseBHfDK9BOEog&r=F1UFpUjH1nAABqpL4ILgoGVwq12Q-qkIVvOhtlxS-38&m=5il4Cqo3d5Ux1pr02JmmvpScJ_PdUYXEqWNNCR1s4xc&s=ClDfvpwFl0jk5gsZbPeEh2b8T0qPFNuOrSDtoGKR96U&e=
 >.


You can also see this if you try to install the RPM with yum too (which is what 
DSU would do if you installed this firmware through DSU):

[root@host ~]# yum install
SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00
Loaded plugins: enabled_repos_upload, langpacks, package_upload, product-id, 
search-disabled-repos, subscription-manager ...
dell-system-update_dependent

  | 2.3 kB  00:00:00
dell-system-update_independent

  | 2.3 kB  00:00:00
...
(8/26): dell-system-update_dependent/7Server/x86_64/primary_db

  |  25 kB  00:00:00
...
(11/26): dell-system-update_independent/primary_db

  | 119 kB  00:00:00
...
Resolving Dependencies
--> Running transaction check
---> Package SAS-Drive_Firmware_M1XD6_LN_VSC6_A00.noarch 0:VSC6-21.07.00
will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================================================================================================================
 Package                                                  Arch
          Version                           Repository
                     Size
================================================================================================================================================================================
Installing:
 SAS-Drive_Firmware_M1XD6_LN_VSC6_A00                     noarch
          VSC6-21.07.00                     dell-system-update_independent
                     38 M

Transaction Summary
================================================================================================================================================================================
Install  1 Package

Total download size: 38 M
Installed size: 39 M
Is this ok [y/d/N]: y
Downloading packages:
SAS-Drive_Firmware_M1XD6_LN_VS FAILED
   ========================================-                      ]  28
MB/s |  25 MB  00:00:00 ETA
https://urldefense.proofpoint.com/v2/url?u=https-3A__linux.dell.com_repo_hardware_dsu_os-5Findependent_noarch_SAS-2DDrive-5FFirmware-5FM1XD6-5FLN-5FVSC6-5FA00-2DVSC6-2D21.07.00.noarch.rpm&d=DwICAg&c=FjtWNohPhseBHfDK9BOEog&r=F1UFpUjH1nAABqpL4ILgoGVwq12Q-qkIVvOhtlxS-38&m=5il4Cqo3d5Ux1pr02JmmvpScJ_PdUYXEqWNNCR1s4xc&s=ClDfvpwFl0jk5gsZbPeEh2b8T0qPFNuOrSDtoGKR96U&e=
 :
[Errno -1] Package does not match intended download. Suggestion: run yum 
--enablerepo=dell-system-update_independent clean metadata Trying other mirror.


Error downloading packages:
  SAS-Drive_Firmware_M1XD6_LN_VSC6_A00-VSC6-21.07.00.noarch: [Errno 256] No 
more mirrors to try.

And this is after running the command it mentions and running 'yum clean all' 
for good measure.

@Dell: Can you please fix this by uploading the correct RPM or fixing the 
repository metadata?

Thank you.

--
Matt Vander Werf
HPC System Administrator
University of Notre Dame
Center for Research Computing - Union Station
506 W. South Street
South Bend, IN 46601
Phone: (574) 631-0692
_______________________________________________
Linux-PowerEdge mailing list
[email protected]
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.us.dell.com_mailman_listinfo_linux-2Dpoweredge&d=DwICAg&c=FjtWNohPhseBHfDK9BOEog&r=F1UFpUjH1nAABqpL4ILgoGVwq12Q-qkIVvOhtlxS-38&m=5il4Cqo3d5Ux1pr02JmmvpScJ_PdUYXEqWNNCR1s4xc&s=8zZ_nMmj2PN-3j1vynLBugjH_6jts9sPEENXVYBxYZc&e=

Cboe Europe Limited is a Recognised Investment Exchange regulated by the 
Financial Conduct Authority. Cboe Europe Limited is a wholly-owned subsidiary 
of Cboe Holdings, Inc. and is a company registered in England and Wales with 
Company Number 6547680 and registered office at The Monument Building, 11 
Monument Street, London EC3R 8AF. This has been established for information 
purposes only. None of the information concerning the services or products 
described in this document constitutes advice or a recommendation of any 
product or service. To the extent that the information provided in this 
document constitutes a financial promotion as defined by section 21 of the 
Financial Services and Markets Act 2000, it is only directed at persons who 
qualify as a Professional Client or Eligible Counterparty. Persons who do not 
qualify should not act on or rely upon it.

_______________________________________________
Linux-PowerEdge mailing list
[email protected]
https://lists.us.dell.com/mailman/listinfo/linux-poweredge

Reply via email to