Description of problem: The --checksum option correctly sets the metadata checksum type. However, when using the --update mode, package checksums are not re-calculated. The previous checksum type and value stored in primary.sqlite is used instead. How reproducible: Always. Steps to Reproduce: 1. have a package in "." 2. createrepo . --simple-md-filenames --checksum md5 3. createrepo . --simple-md-filenames --checksum sha256 --update 4. zgrep checksum repodata/primary.xml.gz Actual results: <checksum type="md5" pkgid="YES">49e57da5f7ce350fbdcb2bf7ae4e9fb7</checksum> Expected results: <checksum type="sha256" pkgid="YES">089b2ccbd14131dc5dbe9a092aca8db6122b7ccf324c7f43ba1b4675b4b3c448</checksum> Additional info: Dropping the --update flag works around the bug.
Fixed upstream. http://createrepo.baseurl.org/gitweb?p=createrepo.git;a=commitdiff;h=c1ab238dd25189be49c71c4019cc491eab909663
createrepo-0.10.3-1.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/createrepo-0.10.3-1.fc20
createrepo-0.10.3-1.fc20 works fine
Package createrepo-0.10.3-1.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing createrepo-0.10.3-1.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-2527/createrepo-0.10.3-1.fc20 then log in and leave karma (feedback).
createrepo-0.10.3-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.