Re: FYA: problem with a few mirrors + SHA256 question + rsync + missing package signings
On 2012-05-07, Gasko, Peter gaskopeter0...@postafiok.hu wrote: FYA (I have to post here, because I can't find e-mail address to these mirrors): - # having install50.iso ftp://ftp2.eu.openbsd.org/pub/OpenBSD/5.1/amd64/install50.iso I notified the mirror maintainer, he is fixing it. # not having 5.1 ftp://ftp.arcane-networks.fr/pub/OpenBSD/5.1/amd64/ ftp://ftp.irisa.fr/pub/OpenBSD/5.1/amd64/ ftp://ftp.bytemine.net/pub/OpenBSD/5.1/amd64/ ftp://mirror.yongbok.net/pub/OpenBSD/5.1/amd64/ ftp://ftp.piotrkosoft.net/pub/OpenBSD/5.1/amd64/ ftp://ftp.lambdaserver.com/pub/OpenBSD/5.1/amd64/ At least one of these does have 5.1, and there are others which don't. I'll give them a while longer to catch up (release wasn't very long ago and it is ~120GB or so) I'll go through and start removing sites from ftp.html in a week or so if 5.1 is still missing. Question#1: What is the /pub/OpenBSD/5.1/packages/amd64/SHA256? Can anyone tell? SHA256 hashes of the packages in base-64 format. Works with cksum -c. Question#2: Can rsync work with ssh? Or just rsync? rsync -v -e ssh rsync://ftp5.eu.openbsd.org/OpenBSD/5.1/packages/amd64/SHA256 . u...@ftp5.eu.openbsd.org's password: Sure rsync can work with ssh. but do you really expect to have a login account on a public mirror to run it?! Question#3: Why are package signings missing? - Why aren't the packages from ex.: ftp2.eu.openbsd.org/pub/OpenBSD/5.1/packages/amd64/ signed? Would it be a big deal to give out a few extra commands? :O :\ AFAIK pkg_add checks the keys of the downloaded packages if the package is signed (FIXME). OpenBSD doesn't do that. I'm sure this has come up on the lists already quite a few times. You can download the packages manually and check the SHA256 signatures if you like (I would suggest downloading the SHA256 file from a different mirror or ftp.openbsd.org), and the package has internal SHA256 signatures in the packing list which will detect broken transfers and corruption in-transit, but if you want more reassurance than that, build your own packages. See 'man dpb'.
FYA: problem with a few mirrors + SHA256 question + rsync + missing package signings
FYA (I have to post here, because I can't find e-mail address to these mirrors): - # having install50.iso ftp://ftp2.eu.openbsd.org/pub/OpenBSD/5.1/amd64/install50.iso # not having 5.1 ftp://ftp.arcane-networks.fr/pub/OpenBSD/5.1/amd64/ ftp://ftp.irisa.fr/pub/OpenBSD/5.1/amd64/ ftp://ftp.bytemine.net/pub/OpenBSD/5.1/amd64/ ftp://mirror.yongbok.net/pub/OpenBSD/5.1/amd64/ ftp://ftp.piotrkosoft.net/pub/OpenBSD/5.1/amd64/ ftp://ftp.lambdaserver.com/pub/OpenBSD/5.1/amd64/ Question#1: What is the /pub/OpenBSD/5.1/packages/amd64/SHA256? Can anyone tell? - # wget -q 'ftp://ftp5.eu.openbsd.org/pub/OpenBSD/5.1/packages/amd64/SHA256' -O - | grep curl-7.24.0.tgz SHA256 (curl-7.24.0.tgz) = sRgMosGh+e8luNn+WJhufPBEKVaN0CU+jn/VbQZkBuk= # wget -q 'ftp://ftp5.eu.openbsd.org/pub/OpenBSD/5.1/packages/amd64/curl-7.24.0.tgz' # cksum -a cksum curl-7.24.0.tgz 2242721359 659163 curl-7.24.0.tgz # cksum -a md4 curl-7.24.0.tgz MD4 (curl-7.24.0.tgz) = 539aa5a88ca01d8e9fc344be89ed3ec2 # cksum -a md5 curl-7.24.0.tgz MD5 (curl-7.24.0.tgz) = 4d7c00292dfb35a3a791f08e677d30e2 # cksum -a rmd160 curl-7.24.0.tgz RMD160 (curl-7.24.0.tgz) = 8b9fcbbb4b8a4de4db922e70062a529035b29618 # cksum -a sha1 curl-7.24.0.tgz SHA1 (curl-7.24.0.tgz) = 8f04f07cffc3f54b17210c50423e9e1c92aa9985 # cksum -a sha256 curl-7.24.0.tgz SHA256 (curl-7.24.0.tgz) = b1180ca2c1a1f9ef25b8d9fe58986e7cf04429568dd0253e8e7fd56d066406e9 # cksum -a sha384 curl-7.24.0.tgz SHA384 (curl-7.24.0.tgz) = bf93674e1807d9c8181065f79e268845ae145e01f419bb487362aacb0bf00cf1a2553c809ba3d 9d83b8caa0631cb71aa # cksum -a sha512 curl-7.24.0.tgz SHA512 (curl-7.24.0.tgz) = a12eb464625ae9a44c8ce441040081b96e04fa708fc06be8337d9e556caa5b2290748be35fcc3 7bd2c7ba6bcbc8deddffc91fdbca3040e979d42129b80fa09c8 # cksum -a sum curl-7.24.0.tgz 23485 644 curl-7.24.0.tgz # cksum -a sysvsum curl-7.24.0.tgz 65416 1288 curl-7.24.0.tgz # Question#2: Can rsync work with ssh? Or just rsync? - rsync -v -e ssh rsync://ftp5.eu.openbsd.org/OpenBSD/5.1/packages/amd64/SHA256 . u...@ftp5.eu.openbsd.org's password: Question#3: Why are package signings missing? - Why aren't the packages from ex.: ftp2.eu.openbsd.org/pub/OpenBSD/5.1/packages/amd64/ signed? Would it be a big deal to give out a few extra commands? :O :\ AFAIK pkg_add checks the keys of the downloaded packages if the package is signed (FIXME). Thank you for your attention Have a nice day!
