Digest verification failed for file 'packages.gz'

I got this when I refresh repository ‘openSUSE-Tumbleweed-Oss’ today.

[/var/cache/zypp/raw/repo-ossCRJVTa/suse/setup/descr/packages.gz]

  expected 6c89a8564114a4c9756f2924a15a3f89ea88a0034afa71080542ee43d815ba95
  but got  ce2d6949b7fd42ae3da55ff796f18d6863771c8a6b509c176597b8fbfb84ebc1

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

And on http://download.opensuse.org/tumbleweed/repo/oss/suse/setup/descr/packages.gz.mirrorlist :

Mirrors for http://download.opensuse.org/tumbleweed/repo/oss/suse/setup/descr/packages.gz

Powered by MirrorBrain

  • Size: 5.2M (5504523 bytes)
  • Last modified: Fri, 23 Jan 2015 11:03:47 GMT (Unix time: 1422011027)
  • SHA-256 Hash: 6c89a8564114a4c9756f2924a15a3f89ea88a0034afa71080542ee43d815ba95
  • SHA-1 Hash: bdcef03ef247185675a4533a9bb2d20f7de75733
  • MD5 Hash: a0c97ca17c5a49127cf657ea21c47bbd
  • BitTorrent Information Hash: 490227629804b76b0c2c61fc5cccb599c97c5e2e

Is there something wrong with the repository ?

There were two updates today. (That’s today my time, but could be two different days in some parts of the world). The first was to snapshot 20150121. The second was to snapshot 20150122.

It looks as if you were updating during while the repos were changing. One of those checksums seems to be for the 20150121 snapshot, and I’m guessing that the other is for 20150122.

I suggest you try again. If you still have problems, then wait a few hours for the mirrors to synchronize.

In the meantime, your system should be fine, though not yet fully updated. The error you saw was due to the cross-checks used to make sure that such unfortunate timing won’t actually cause problems.

Thanks, I’ll try again.