Zypper Update -- Wrong DIgest

Hi, I’m a basic newbie to the openSUSE platform (worked a bit with Fedora -different versions), so go easy on me.
I downloaded the 11.4 i586 version (32bit), verified the checksum, create the dvd, booted the machine and then ran the check from the initial menu.
At this point everything was as expected.
I then rebooted the machine and did the install.
I then ran “zypper update” (according to some doc I just read) (on Fedora, this is the point when I would have run the update tool as well).
I then get numerous “Wrong Digest” errors with a long explanation that something has changed from original…etc (I can repost the exact wording if needed) at the end it prompt yes or no to use it.

Figuring this was a test system anyway I said yes on all of them.
Now there are other errors “Error building the cache: 'repo2solv.sh” … gzip: {longfilename}.xml.gz: not in gzip format." Disabling repository because of the above error. (again I can type in the long version if needed)

SO, what does all that mean? I downloaded from the official site, ran all the checks (which passed) and now I get errors while doing something that I consider pretty basic and mandatory?

Have I missed something, am I doing something wrong here?
Kevin

Your procedure sounds OK
Can you post the result of

zypper lr -d

Hope this works properly:

| Alias | Name | Enabled | Refresh | Priority | Type | URI | Service

–±---------------------------------±---------------------------------±--------±--------±---------±-------±-------------------------------------------------------------------±-------
1 | Updates-for-openSUSE-11.4-11.4-0 | Updates for openSUSE 11.4 11.4-0 | Yes | Yes | 99 | rpm-md | Index of /update/11.4 |
2 | openSUSE-11.4-11.4-0 | openSUSE-11.4-11.4-0 | Yes | No | 99 | yast2 | cd:///?devices=/dev/disk/by-id/ata-NEC_DVD+-RW_ND-6650A,/dev/sr0 |
3 | repo-debug | openSUSE-11.4-Debug | No | Yes | 99 | NONE | Index of /debug/distribution/11.4/repo/oss |
4 | repo-debug-update | openSUSE-11.4-Update-Debug | No | Yes | 99 | NONE | Index of /debug/update/11.4 |
5 | repo-non-oss | openSUSE-11.4-Non-Oss | Yes | Yes | 99 | yast2 | Index of /distribution/11.4/repo/non-oss |
6 | repo-oss | openSUSE-11.4-Oss | Yes | Yes | 99 | yast2 | Index of /distribution/11.4/repo/oss |
7 | repo-source | openSUSE-11.4-Source | No | Yes | 99 | NONE | Index of /source/distribution/11.4/repo/oss |

Some things to try
Open Yast > Software > Repositories and disable repo 2

Next open a terminal and the following: (the first one gets you su -)

su -
zypper clean --all

then

rpmdb --rebuilddb
zypper ref

If you get an error. Please include complete info

Tried the commands you mentioned and then went back into “Install/Remove Software” and I got those errors about Wrong Digest again, for some reason my screen capture is not working.

I am going to try and install the system from the original media one more time and if it fails again during the “simple” update I will go back to Fedora (since no one knows why this is happening).

OK, so I did a fresh install, did all the media checks (which passed) before the actual install.

Logged in and ran Yast and got the following error: (I have not done anything else to the system after the initial install and login).

Error:


Wrong Digest

The expected checksum of file /var/cache/zypp/raw/Updates-for-openSUSE-11.4-11.4-0dC6gK3/repodata/4455a267b51071d54d9f3a85c0cdc916842f810c-deltainfo.xml.gz
is 4455a267b51071d54d9f3a85c0cdc916842f810c,
but the current checksum is 6f4886ed7ac911f2ab4e492ad1df96c2bfe28e47.

This means that the file has been changed by accident or by an attacker
since the repository creator signed it. Using it is a big risk
for the integrity and security of your system.

Use it anyway?


Kevin

Try from a terminal

su -
zypper patch

OK so I ran that command. Got “Digest verification failed” errors when it does the retrieving repository. Looks like I have bogus software since it’s obvious I’m the only one in the world with this problem. Don’t even know how I’m supposed to answer the (yes/no) question at the end of each error. Don’t remember this being a problem with the 64bit version of the OS when installed on another machine.
Guess I should go back to Fedora - have installed many many times on different hardware and have never run into a problem like this.
Thanks for your help.
To bad the team the writes some of the code doesn’t monitor this forum.

On 2011-08-03 17:06, knebroski wrote:

> Use it anyway?
> ____________________________________________________________

No.

It means what it says, the repo is not reliable, probably a bad mirror.

This can be investigated, but it seems you are not interested.


Cheers / Saludos,

Carlos E. R.
(from 11.4 x86_64 “Celadon” at Telcontar)

Sorry for the negativity. I am interested, but it seems strange that I am the only one in the world that is installing this OS and having an update issue. If I answer no to the questions, then I am unable to update to the latest … which to me doesn’t seem right. Also, since only 2 people have commented on this issue, either people are ignoring it (the problem - not this thread), people don’t use this OS (then why am I), no one is concerned that the original files have been hacked (remember I am a newbie to this, so I’m not even sure what is going on and why I am getting these errors other than my impression is that something/files have been hacked and modified wrongly from their original state).

Kevin

On 08/05/2011 06:16 PM, knebroski wrote:
>
> I’m not even sure what is going on
> and why I am getting these errors other than my impression is that
> something/files have been hacked and modified wrongly from their
> original state).

openSUSE has repos on mirrors all over the world…sometimes one of
those mirrors gets a file or three garbled…so, try connecting to one
nearby, from this list: http://en.opensuse.org/openSUSE:Mirrors


DD
openSUSE®, the “German Engineered Automobiles” of operating systems!

Went to that site, and again don’t see how that helps. No real list, in fact it says “You do not have to select a mirror yourself”. So I went to mirros.opensuse.org and from there I’, guessing your hinting to download the whole 4gb file and start over, if not then I’m lost as to why you suggested this link.
Very frustrated.

It’s often worth trying mirrors
openSUSE Download Mirrors - 11.4
It’s not a bad suggestion

On 08/05/2011 09:06 PM, knebroski wrote:
>
> I’m lost as to why you suggested this link.

sorry, i didn’t anticipate you wouldn’t have the patience to read more
than just the bold fonts…

instead i thought you would down to: "If you would like to use a
different mirror, or want to see a complete list of all mirrors where
you could download a file from, go to mirrors.opensuse.org. "

where you could (as i wrote earlier) “try connecting to one nearby”…


DD
openSUSE®, the “German Engineered Automobiles” of operating systems!

I actually did read more, I connected to a mirror that was closer…and then I…download something…add the mirror url to a file somewhere.
I did mention that I am a newbie. :\

I’m done for the day, I’ve played (wasted to much time on this for one week) and will continue on Monday,

Have a nice weekend, TTYL

On 08/05/2011 11:16 PM, knebroski wrote:
>
> I did mention that I am a newbie. :\

SORRY, i have given some wrong (and stupid) advice in this thread, and i
apologize for that…

today, fresh in the morning with coffee it is easy for me to see that
sending you to a mirror was just plain wrong…

because the troubling file in the error message (from you earlier post)


The expected checksum of file
/var/cache/zypp/raw/Updates-for-openSUSE-11.4-11.4-0dC6gK3/repodata/4455a267b51071d54d9f3a85c0cdc916842f810c-deltainfo.xml.gz
is 4455a267b51071d54d9f3a85c0cdc916842f810c,
but the current checksum is 6f4886ed7ac911f2ab4e492ad1df96c2bfe28e47.
This means that the file has been changed by accident or by an
attacker since the repository creator signed it. Using it is a big risk
for the integrity and security of your system.

Use it anyway?

is generated and held on your machine, independent of the mirrors

truth is that i really do not know what caused the checksum of that file
to be changed…but i do have some info and ideas:

Info 1. i would always answer that “Use it anyway?” question with a NO!
(and so would Carlos–if he and i ever give different advice, always
follow his)…which means, if you also answered Yes after your second
install (mentioned in post #6 above) then there will be a need to
install again…

but, if you answered “No” then GREAT…but, we need to find out what is
messing with that file…

and, i have a theory (which may be as wrong as sending you to a
mirror…we shall see):

  1. i carefully reread your initial post and see:

I then rebooted the machine and did the install.
I then ran “zypper update” (according to some doc I just read) (on
Fedora, this is the point when I would have run the update tool as
well).
I then get numerous “Wrong Digest” errors …

so, it sounds like maybe you interrupted the normal flow of the
openSUSE install routine [which might differ from Fedora’s] by running
that “zypper update” when you did…

if you install while connected to the net, the install routine
automatically will do all the initial updating and a reboot is done
while still in the install routine…before you need to do any updates…

that is, what you apparently had to do in Fedora (immediate manual
update) is not normally required in openSUSE…so, i think what
happened was the system told you it had installed the system and you ran
“zypper update” right then…but, in fact while the new system was
installed it had not yet been automatically updated…that is the system
had already built an update cache in anticipation of its first boot, but
maybe you ran zypper before that boot occurred (which it should have
during the install script)…

is that possible?

or

  1. maybe you have a disk problem of some kind:

-what is the file system in use for the partition where /var lives?
-tell us about that drive: how old, how big
-are you using raid?

> I’m done for the day, I’ve played (wasted to much time on this for one
> week) and will continue on Monday,

welcome to monday!


DD Caveat
openSUSE®, the “German Engineered Automobiles” of operating systems!

Hey DD,
Yep Monday…BLAH, weekend went by way too fast.
Anyway I downloaded another copy from a mirror site, and I am now burning a DVD and will install again and document what I have done, maybe it is my install procedure.
The machine I am installing on is a Dell Laptop, I have replaced the windows drive with a 20GB clean drive I had lying around. I used Acronis to wipe it clean before starting (no RAID) and the filesystem on the partitions were the defaults from the install (can’t tell you for sure right now as I’m wiping it clean again). Pretty sure that a reboot was done as part of each install before I did anything manually. One of the documents I followed used the Live-CD version (The Perfect Desktop - OpenSUSE 11.4 (GNOME) | HowtoForge - Linux Howtos and Tutorials), by Falko which I have used other how-to-docs with great success, but I’m trying it with the full-dvd version.
I also mentioned earlier that I checked the download checksum and did a media check before each install. (which I will do again with this new download)

Kevin

On 08/08/2011 02:56 PM, knebroski wrote:
>
> - OpenSUSE 11.4 (GNOME) | HowtoForge - Linux Howtos and Tutorials’
> (http://www.howtoforge.com/the-perfect-desktop-opensuse-11.4-gnome))

ok, i’m not a gnome user but that guide looks ok…mostly because it
looks like it was exactly lifted out something you can also find in
docs.opensuse.org or the how-tos in this forum…

but before you install again i highly recommend you look at the new to
openSUSE stuff in:

http://forums.opensuse.org/english/get-technical-help-here/how-faq-forums/new-user-how-faq-read-only/407184-multi-media-restricted-format-installation-guide.html

http://forums.opensuse.org/english/get-technical-help-here/how-faq-forums/new-user-how-faq-read-only/454963-new-users-opensuse-11-4-pre-installation-i-please-read.html

and let me recommend this: after that first boot, disable
packagekit…it is a thing in the tray at the bottom right…just
disable it (read elsewhere in these forums that it is just not ready yet)…

instead of using packagekit or zypper (for now), open YaST and go Online
Update…see what it has for you…then i highly recommend you follow
the hints in those new-to-openSUSE how-tos which (for example) tell you
how to load up on the multimedia codecs, and etc…

good luck!!


DD Caveat
openSUSE®, the “German Engineered Automobiles” of operating systems!

Well I’m back and no further ahead.
What really sucks is when I’m told to do something, and the link doesn’t exist or is broken.
What I did:
Downloaded new 11.4 dvd iso from a different mirror, did a checksum verification and it passed (I did separate MD5, SHA1 and SHA256 checks)
Booted from the created DVD and did a media check, that passed too.
Then did the basic install (just want it to install properly once!)
Took all the defaults
swap /dev/sda1 2GB
root /dev/sda2 7.GB
home /dev/sda3 9.5GB
Answered user/password questions
System did an automatic reboot, then came back with the automatic configuration
When the system finally came back with the logon screen, I was able to login as my user.
I could open a terminal window and su -.
I did not see any icon on the bottom tray about packagekit.
Since you provided 2 links before you comment about opening yast and go online update, it went to the links first.
On this link (the first one) Multi-media and Restricted Format Installation Guide I scrolled down to the 11.4 section and began.
I checked the repositories from the main section and they were there.
I then went to add the first one under the section “Additional Repositories You Will Need” using the supplied command: “zypper ar -f http://opensuse-guide.org/repo/11.4/ libdvdcss”, but guess what, there is no location using that link so although the command worked, then next command: “zypper ref” doesn’t work - error: “Repository libdvdcss does not exist”.
Anyway before that error, the first line is an error: Retrieving repository ‘Updates for openSUSE 11.4 11.4-0’ metadata…Digest verification faild for b2xxxxxx…more of that same info…wrong checksum. (sorry I’m typing this out on one computer and doing the install on another)

So no go again.

Please try

sudo rpmdb --rebuilddb

If that doesn’t help, I think I’d try making a local repo to my HD of the Updates repo, but you don’t have the space for it I think.