Bug 2277398
| Summary: | implantisomd5 results in a custom ISO that does not pass verification upon booting | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jonathan Billings <jbilling> | ||||
| Component: | isomd5sum | Assignee: | anaconda-maint | ||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 40 | CC: | anaconda-maint, rvykydal | ||||
| Target Milestone: | --- | Keywords: | Regression | ||||
| Target Release: | --- | ||||||
| Hardware: | x86_64 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | isomd5sum-1.2.4-1 isomd5sum-1.2.4-2.fc41 isomd5sum-1.2.4-2.fc40 | Doc Type: | If docs needed, set a value | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2024-04-29 20:24:25 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Jonathan Billings
2024-04-26 18:48:35 UTC
Created attachment 2029460 [details]
Screenshot of checkisomd5 error on Fedora boot
I had tested this on a VM (libvird/kvm on Fedora 40), and to be absolutely sure, I dd'd the ISO to a USB stick and booted it on a spare laptop, same failure. I also tested checkisomd5 from Fedora 39 on an ISO that was created and passed a check with the package in Fedora 40: [jbilling@thinkpad VirtualMachines]$ cat /etc/fedora-release Fedora release 40 (Forty) [jbilling@thinkpad VirtualMachines]$ rpm -q isomd5sum isomd5sum-1.2.4-1.fc40.x86_64 [jbilling@thinkpad VirtualMachines]$ checkisomd5 --verbose testing.iso testing.iso: dcfb96039ea69c60dfb06404f917c844 Fragment sums: 3626853c994f39efaed2522444183e86c4312cbe818ca9554bbbb9dd2;FR Fragment count: 20 Supported ISO: no Press [Esc] to abort check. Checking: 100.0% The media check is complete, the result is: PASS. It is OK to use this media. [jbilling@thinkpad VirtualMachines]$ toolbox enter fedora-toolbox-39 [jbilling@toolbox VirtualMachines]$ cat /etc/fedora-release Fedora release 39 (Thirty Nine) [jbilling@toolbox VirtualMachines]$ rpm -q isomd5sum isomd5sum-1.2.3-21.fc39.x86_64 [jbilling@toolbox VirtualMachines]$ checkisomd5 --verbose testing.iso testing.iso: dcfb96039ea69c60dfb06404f917c844 Fragment sums: 3626853c994f39efaed2522444183e86c4312cbe818ca9554bbbb9dd2;FR Fragment count: 20 Supported ISO: no Press [Esc] to abort check. Checking: 095.2% The media check is complete, the result is: FAIL. It is not recommended to use this media. checked the version of 'checkisomd5' in the initrd on the install media, and I see it is v1.2.3-23.fc40, which explains the above behavior. (boot into the media with rd.break, and run 'grep -a version /usr/bin/checkisomd5', which prints out a lot of garbage text along with:
{"type":"rpm","name":"isomd5sum","version":"1.2.3-23.fc40","architecture":"x86_64","osCpe":"cpe:/o:fedoraproject:fedora:39"}
Thanks for the report. FWIW you shouldn't need to run implantisomd5 yourself, mkksiso does this unless you pass it '--no-md5sum' But running it manually should result in the same checksums being written, so I'm curious to see what happens if you run checkisomd5sum after running mkksiso (and maybe I should add that as a sanity check). The first problem though is that implantmd5sum is implanting an incorrect checksum, it's too short. It should be 60 characters, but is only 57, resulting in the trailing ';FR' that is shown when you try to boot it. So I'll fire up an f40 vm today and see if I can reproduce this. Sorry about this. It was caused by my attempt to fix problems writing checksums to small isos. I've reverted that patch for now and a new release (1.2.4-2) is being built. https://koji.fedoraproject.org/koji/taskinfo?taskID=117043901 FEDORA-2024-985bf09847 (isomd5sum-1.2.4-2.fc41) has been submitted as an update to Fedora 41. https://bodhi.fedoraproject.org/updates/FEDORA-2024-985bf09847 FEDORA-2024-985bf09847 (isomd5sum-1.2.4-2.fc41) has been pushed to the Fedora 41 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2024-4eb5f90606 (isomd5sum-1.2.4-2.fc40) has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2024-4eb5f90606 FEDORA-2024-4eb5f90606 has been pushed to the Fedora 40 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-4eb5f90606` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-4eb5f90606 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2024-4eb5f90606 (isomd5sum-1.2.4-2.fc40) has been pushed to the Fedora 40 stable repository. If problem still persists, please make note of it in this bug report. |