Bug 91867

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20030224

Description of problem:
Building a nagios rpm from the nagios tarball and the spec file that the tarball
includes produces a package that installs, but which rpm cannot add to the rpmdb
properly, failing with an error:

error: rpmdbAdd: skipping h#     826 Header SHA1 digest: BAD
Expected(dcd277436ea5c82debd445669d12ab069a87a404) !=
(fed0a23d45fb19c381228fd75877ceaf995512a4)


Version-Release number of selected component (if applicable):
rpm-build-4.1-1.06 & rpm-4.1-1.06, rpm-build-4.1.1-1.8x & rpm-4.1.1-1.8x

How reproducible:
Always

Steps to Reproduce:
1) Download nagios-1.0 tarball from http://www.nagios.org/download/ into
/usr/src/redhat/SOURCES.

2) In /tmp execute:
tar -xzvf /usr/src/redhat/SOURCES/nagios-1.0.tar.gz nagios-1.0/nagios.spec && cp
nagios-1.0/nagios.spec /usr/src/redhat/SPECS

3) Execute:
rpmbuild -ba -vv /usr/src/redhat/SPECS/nagios.spec 2>&1 | tee
/tmp/nagios-rpmbuild.out
(cf. Attachment 0)

4) Execute:
rpm -i -vv /usr/src/redhat/RPMS/i386/nagios-1.0-1.i386.rpm 2>&1 | tee
/tmp/nagios-rpm-install.out
and observe error:
error: rpmdbAdd: skipping h#     826 Header SHA1 digest: BAD
Expected(dcd277436ea5c82debd445669d12ab069a87a404) !=
(fed0a23d45fb19c381228fd75877ceaf995512a4)
(cf. Attachment 1 [details])

5) While nagios does get installed, the rpm db doesn't get updated properly.
E.g. rpm -qil nagios is a no-op.

6) Look for documentation.

7) Don't find it anywhere.

8) Ask for help.

############

This happens on multiple machines, with both 4.1 and 4.1.1 versions of rpm, both
before and after removing /var/lib/rpm/__db.* and rebuilding the rpmdb. It also
occurs with nagios sources patched from CVS for bug fixes and the spec file
hacked to eliminate all warnings.


Actual Results:  rpm generates the aforementioned error during the install. The
files do get installed, but querying rpm for nagios is a no-op, as is trying to
deinstall with rpm.

Troubleshooting is impossible due to lack of documentation in man, RH guides,
the web or either RedHat Press RPM book.


Expected Results:  rpmbuild should produce an rpm for which rpm doesn't complain
about a Sha1 Header digest mismatch at install time.

rpm -qil nagios should return a bunch of information and a list of the files
that were installed.

rpm -e nagios should remove the files which rpm -i installed.

The error message should be documented somewhere.


Additional info:

See attachments. I can also produce similar logs for the other versions and
steps I tried, if neccessary.

Karl DeBisschop <kdebisschop.net>, the most recent maintainer
of the nagios spec file, reports that he has never seen this behavior on RH-7.3
and RH-9, the only versions he has access to.