Incosistent GPG signatures in https://repo.almalinux.org/almalinux/9

Operations
1

It seems that since the update to Alma Linux 9.5, some files in the repo have different GPG signatures than advertised in the treeinfo.

This can result in the following error in The Foreman, when syncing the Alma Linux 9 repo:

A file located at the url https://repo.almalinux.org/almalinux/9/BaseOS/x86_64/os/images/pxeboot/initrd.img failed validation due to checksum. Expected '730cb204bfd8668e7e3bd2e88ed1d443084d467db6d1228b63f8f27117e52e3a', Actual '1c1985fcc76ac600a37ec117964e1c3ddb9dc60aee9130e3d78ba09c89c22b18'

Another user has reported the following issues:

https://repo.almalinux.org/almalinux/9/cloud/x86_64/images/AlmaLinux-9-GenericCloud-latest.x86_64.qcow2 contains AlmaLinux 9.4 (old) - sha256sum of 4f2984589020c0d82b9a410cf9e29715a607c948dfdca652025cdc79ddb5e816

and

https://repo.almalinux.org/almalinux/9/cloud/x86_64/images/CHECKSUM contains hashes for AlmaLinux 9.5 (latest) - sha256sum for GenericCloud is abddf01589d46c841f718cec239392924a03b34c4fe84929af5d543c50e37e37

However - if the following repo URL is used instead, the issue does not seem to apperar: https://repo.almalinux.org/almalinux/9.5

Further references:

2

Hi there! This looks like it is was a caching issue that should very much be resolved by now. Sorry for the inconvenience and please do let us know if things aren’t resolved yet!

1 Like
3

Hi Benny, good to hear from you.
I have tested it, and I can confirm everything is back to normal.
Many thanks.

1 Like