Hello. From my point of view it looks like something with checker Looks like history was not updated properly on 2.7.4 upload: https://checker.apache.org/hist/all/prj/ambari <https://checker.apache.org/hist/all/prj/ambari> We may want to contact ASF INFRA regarding this.
sha512 and asc files are correctly present here: https://dist.apache.org/repos/dist/release/ambari/ambari-2.7.4/ <https://dist.apache.org/repos/dist/release/ambari/ambari-2.7.4/> and here: https://www.apache.org/dist/ambari/ambari-2.7.4/ <https://www.apache.org/dist/ambari/ambari-2.7.4/> They are absent in Apache mirrors for unknown (to me) reason, but they are absent for all Apache projects as far as I can see. Can say anything about virustotal scan. Any particular files to report? There should not be any binaries in archive except few images. Regards, Myroslav > 30 жовт. 2019 р. о 23:06 Reed Villanueva <[email protected]> написав(ла): > > Note: can verify the checksum for 2.7.3 fine. > > On Tue, Oct 29, 2019 at 10:17 AM Reed Villanueva <[email protected] > <mailto:[email protected]>> wrote: > Following installation instructions here: > https://cwiki.apache.org/confluence/display/AMBARI/Installation+Guide+for+Ambari+2.7.4 > > <https://cwiki.apache.org/confluence/display/AMBARI/Installation+Guide+for+Ambari+2.7.4> > Downloaded ambari files from recommended mirror here: > http://mirrors.gigenet.com/apache/ambari/ambari-2.7.4/ > <http://mirrors.gigenet.com/apache/ambari/ambari-2.7.4/> > Upon getting shasum256 from the .tar.gz: > b73b437581c08ad696af16f6ba391d2ba22552fea6bc43ec02ff50eb6207cd59 > Found that it did not match with anything in the apache checksum checker: > https://checker.apache.org/sums/b73b437581c08ad696af16f6ba391d2ba22552fea6bc43ec02ff50eb6207cd59.html > > <https://checker.apache.org/sums/b73b437581c08ad696af16f6ba391d2ba22552fea6bc43ec02ff50eb6207cd59.html> > > Furthermore, checking the file in virustotal raises hits on various engines: > https://www.virustotal.com/gui/file/b73b437581c08ad696af16f6ba391d2ba22552fea6bc43ec02ff50eb6207cd59/detection > > <https://www.virustotal.com/gui/file/b73b437581c08ad696af16f6ba391d2ba22552fea6bc43ec02ff50eb6207cd59/detection> > > <image.png> > > Is any of this normal? From the mirror, there did not seem to be any place to > download the .sha* files, anyone know how to get these? > > This electronic message is intended only for the named > recipient, and may contain information that is confidential or > privileged. If you are not the intended recipient, you are > hereby notified that any disclosure, copying, distribution or > use of the contents of this message is strictly prohibited. If > you have received this message in error or are not the named > recipient, please notify us immediately by contacting the > sender at the electronic mail address noted above, and delete > and destroy all copies of this message. Thank you.
