Bug 2027833

Summary: CentOS 9 Stream latest ISO checksum file contains incorrect ISO file name
Product: Red Hat Enterprise Linux 9 Reporter: Eugene Zamriy <eugene>
Component: distributionAssignee: Brian Stinson <bstinson>
Status: CLOSED CURRENTRELEASE QA Contact: Brian Stinson <bstinson>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: CentOS StreamCC: bstinson, carl, jwboyer, lance
Target Milestone: rcFlags: pm-rhel: mirror+
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-02-09 00:43:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Eugene Zamriy 2021-11-30 20:19:38 UTC
Description of problem:

Although there are "latest" checksum files for CentOS 9 Stream images (e.g. http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-boot.iso.SHA256SUM) they don't contain a "latest" ISO file checksum.
Instead they contain check-sums of "timestamped" files.

For example, the http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-boot.iso.SHA256SUM file has the following content:

    # CentOS-Stream-9-20211118.2-x86_64-boot.iso: 793772032 bytes
    SHA256 (CentOS-Stream-9-20211118.2-x86_64-boot.iso) = 82ad04a3c8be08d349a906a6d1b9cd0b9580481bfa26ab6f56c3ec97ce952400

so it can't be used to verify the latest CentOS-Stream-9-latest-x86_64-boot.iso file.


How reproducible:


Steps to Reproduce:
1. Download the http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-boot.iso file
2. Download the http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-boot.iso.SHA256SUM file
3. Run the following command:
   sha256sum -c CentOS-Stream-9-latest-x86_64-boot.iso.SHA256SUM


Actual results:

It fails with the following output:

    sha256sum: CentOS-Stream-9-20211118.2-x86_64-boot.iso: No such file or directory
    CentOS-Stream-9-20211118.2-x86_64-boot.iso: FAILED open or read
    sha256sum: WARNING: 1 listed file could not be read



Expected results:

It should pass the check:

    CentOS-Stream-9-latest-x86_64-boot.iso: OK


Additional info:

That also affects tools like Packer.io because instead of using the latest URLs we need to update them after each CentOS 9 Stream ISO rebuild.

Comment 1 Lance Albertson 2022-02-07 23:12:21 UTC
This is still happening, any updates? This is blocking some users from creating images using packer in an easy way.

Comment 2 Brian Stinson 2022-02-09 00:43:55 UTC
We pushed this fix to our publishing scripts, which were used for today's push.
https://gitlab.com/redhat/centos-stream/release-engineering/releng-tools/-/commit/61a8eddd6ac15f2660c36f8ed20035d37a7e544e

$ curl http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/iso/CentOS-Stream-9-latest-x86_64-dvd1.iso.SHA256SUM
# CentOS-Stream-9-latest-x86_64-dvd1.iso: 8613003264 bytes
SHA256 (CentOS-Stream-9-latest-x86_64-dvd1.iso) = 2688febc19b7abca5423fed70882649b7f95f1a9750873aabae007b04d2ea693

Comment 3 Lance Albertson 2022-02-09 20:02:09 UTC
Can you please also fix the SHA256SUM file and other similar files to include the "latest" files? 

Thanks!