Bug 718218

Summary: createrepo ignores --checksum option and always uses sha256
Product: [Fedora] Fedora Reporter: Paul Howarth <paul>
Component: createrepoAssignee: Luke Macken <lmacken>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: james.antill, lmacken, pfrields, sberg
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-07-28 21:31:38 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Paul Howarth 2011-07-01 13:06:29 UTC
Trying to create local repo of EL5 packages on F15 host, using:

createrepo --update -d --checksum sha .

The resulting primary.xml.gz has sha256 checksums for all of the packages rather than the expected sha1 checksums, resulting in "package does not match expected download" errors on target systems.

This is with createrepo-0.9.9-3.fc15

If I downgrade createrepo to createrepo-0.9.8-5.fc14, I get the sha1 checksums again.

Comment 1 Paul Howarth 2011-07-10 13:11:59 UTC
The upstream patch from Bug #500364 has resolved this for me, though it would nice to see a Fedora update for the problem.

Comment 2 Steve Berg 2011-07-26 13:39:46 UTC
I'm currently using the 0.9.8-5 from F14 also due to this problem.  I have a local repo server that has repos for F14, F15, SciLinux5x and SciLinux6x.  The SL5x systems need the sha1 checksums.  So I'd also like to see a fixed package for F15.

Comment 3 Paul Howarth 2011-07-26 13:45:05 UTC
I rebuilt createrepo from rawhide on F15 and it worked for me.

Comment 4 Steve Berg 2011-07-26 15:36:59 UTC
And I tried the patch that shows up in 500364 by hand-jamming the changes to __init__.py and worker.py.  And it's working for me now.  The big advantage to doing this instead of downgrading is getting the --workers option that wasn't available in 0.9.8-5.  On an 8 core box I set workers to 6 and it makes a noticeable time to run difference in my repo syncing.

Comment 5 seth vidal 2011-07-28 21:31:38 UTC

*** This bug has been marked as a duplicate of bug 500364 ***