apt repository hash mismatch

Submitted by xorax on Thu, 04/23/2020 - 09:18

Hi

It's seems to have serious issues on the APT repo :

On Debian version 9 and 10 I got this message with apt update :

...
N: Skipping acquire of configured file 'main/binary-amd64/Packages' as repository 'http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease' doesn't support architecture 'amd64'

On Debian 8, I got :

...
W: Failed to fetch http://software.virtualmin.com/gpl/debian/dists/virtualmin-universal/main/binary-amd64/Packages  Hash Sum mismatch

On Debian 9, the content file hash is wrong in InRelease (used by apt-file at least) :

...
Get:11 https://software.virtualmin.com/vm/6/gpl/apt virtualmin-stretch/main amd64 Packages [6 698 B]
Get:12 https://software.virtualmin.com/vm/6/gpl/apt virtualmin-stretch/main all Packages [6 072 B]
Get:13 https://software.virtualmin.com/vm/6/gpl/apt virtualmin-stretch/main all Contents (deb) [178 B]
Get:15 https://software.virtualmin.com/vm/6/gpl/apt virtualmin-stretch/main amd64 Contents (deb) [460 B]
Err:15 https://software.virtualmin.com/vm/6/gpl/apt virtualmin-stretch/main amd64 Contents (deb)
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:460 [weak]
   - SHA512:33d94d6f231922fa4dc87fa69b7a60fae1904161e2fc6a6117fd1856e7dc18c3a18f813ddb3eaca5c9c14c83707ec5d9fa7de0739a129a6fa034d6eb4ee22553
   - SHA256:4d0c839626ae77d6f168a7cb9bfac84be7786c9fd3b47f013677229d48a8010d
   - SHA1:15891bcaa7252dbdaa463aed713cf79ef4b01119 [weak]
   - MD5Sum:06c12f764dde319a3541bd3ac660b973 [weak]
  Hashes of received file:
   - SHA512:ebfb3b61171ae9f0e13221949460e04bb446b0f31070c4d48754363a911214e660cd6c0d5dc292ce4503012f8c57e8d094a47c6187b4180ac56a034001beb413
   - SHA256:84facca219622c1788d736a4d52d67757d54d60687d992b790e0c37d7e7db3aa
   - SHA1:e0195537a1b9290c8a599386eee2ef1e3abfad9b [weak]
   - MD5Sum:bf3d88f7969782ce34b531acc80dc06b [weak]
   - Filesize:460 [weak]
  Last modification reported: Thu, 23 Apr 2020 13:19:14 +0000
  Release file created at: Thu, 23 Apr 2020 13:19:14 +0000
....
E: Failed to fetch https://software.virtualmin.com/vm/6/gpl/apt/dists/virtualmin-stretch/main/Contents-amd64.gz  Hash Sum mismatch
   Hashes of expected file:
    - Filesize:460 [weak]
    - SHA512:33d94d6f231922fa4dc87fa69b7a60fae1904161e2fc6a6117fd1856e7dc18c3a18f813ddb3eaca5c9c14c83707ec5d9fa7de0739a129a6fa034d6eb4ee22553
    - SHA256:4d0c839626ae77d6f168a7cb9bfac84be7786c9fd3b47f013677229d48a8010d
    - SHA1:15891bcaa7252dbdaa463aed713cf79ef4b01119 [weak]
    - MD5Sum:06c12f764dde319a3541bd3ac660b973 [weak]
   Hashes of received file:
    - SHA512:ebfb3b61171ae9f0e13221949460e04bb446b0f31070c4d48754363a911214e660cd6c0d5dc292ce4503012f8c57e8d094a47c6187b4180ac56a034001beb413
    - SHA256:84facca219622c1788d736a4d52d67757d54d60687d992b790e0c37d7e7db3aa
    - SHA1:e0195537a1b9290c8a599386eee2ef1e3abfad9b [weak]
    - MD5Sum:bf3d88f7969782ce34b531acc80dc06b [weak]
    - Filesize:460 [weak]
   Last modification reported: Thu, 23 Apr 2020 13:19:14 +0000
   Release file created at: Thu, 23 Apr 2020 13:19:14 +0000
...

It seems recent. Maybe related to #67615 ?

Thanks, and stay safe !

Related issues: 
#67615: repo errors in virt repos
Status: 
Closed (fixed)

Comments

Submitted by xorax on Thu, 04/23/2020 - 10:15

Also, using the virtualmin-install script on a fresh Debian 10 install, I got :

...
[2020-04-23 17:00:11 CEST] [DEBUG] Phase 2 of 3: Installation
Spin pid is: 6510
Reading package lists...
Building dependency tree...
Reading state information...
E: Unable to locate package webmin
Installing Webmin: [2020-04-23 17:00:12 CEST] [ERROR] Failed with error: 100
[2020-04-23 17:00:12 CEST] [ERROR] Something went wrong. Exiting.

Submitted by dapmn on Sun, 04/26/2020 - 23:56

I got the same error when I tried to install virtualmin today on Ubuntu 18.04. But mine is only failing to get the nginx packages

E: Failed to fetch http://software.virtualmin.com/vm/6/gpl/apt/pool/main/w/webmin-virtualmin-nginx/webmin-virtualmin-nginx_2.6_all.deb  Hash Sum mismatch
 
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
Installing virtualmin-lemp-stack: [2020-04-27 06:47:47 CEST] [ERROR] Failed with error: 100
[2020-04-27 06:47:47 CEST] [ERROR] Something went wrong. Exiting.
[2020-04-27 06:47:47 CEST] [ERROR] The last few log entries were:
<code>

jimr's picture
Submitted by jimr on Mon, 04/27/2020 - 05:23 Pro Licensee

I have the same issue

The following packages will be upgraded:
  webmin-virtualmin-nginx
1 to upgrade, 0 to newly install, 0 to remove and 0 not to upgrade.
Need to get 108 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://software.virtualmin.com/vm/6/apt virtualmin-universal/main all webmin-virtualmin-nginx all 2.6 [108 kB]
Err:1 http://software.virtualmin.com/vm/6/apt virtualmin-universal/main all webmin-virtualmin-nginx all 2.6
  File has unexpected size (108206 != 108220). Mirror sync in progress? [IP: 163.172.162.254 80]
  Hashes of expected file:
   - SHA512:eeb0101093aa6907ebac3baf527566a593b45cbe62d4300f2c7886613c1d629bbfb10a78f96f0ca0615506d23fa57026e6b0e10f45df37378c364d9e4e89150d
   - SHA256:0eee763d023bc600671192a5f7dabc17eeb41b26ac90af9cf86d5e32994b90d9
   - SHA1:3f692fdee0ba6f802329ec94eddd79240a46715c [weak]
   - MD5Sum:de7542e8854d5ec6f3afb888022c7e56 [weak]
   - Filesize:108220 [weak]
E: Failed to fetch http://software.virtualmin.com/vm/6/apt/pool/main/w/webmin-virtualmin-nginx/webmin-virtualmin-nginx_2.6_all.deb  File has unexpected size (108206 != 108220). Mirror sync in progress? [IP: 163.172.162.254 80]
   Hashes of expected file:
    - SHA512:eeb0101093aa6907ebac3baf527566a593b45cbe62d4300f2c7886613c1d629bbfb10a78f96f0ca0615506d23fa57026e6b0e10f45df37378c364d9e4e89150d
    - SHA256:0eee763d023bc600671192a5f7dabc17eeb41b26ac90af9cf86d5e32994b90d9
    - SHA1:3f692fdee0ba6f802329ec94eddd79240a46715c [weak]
    - MD5Sum:de7542e8854d5ec6f3afb888022c7e56 [weak]
    - Filesize:108220 [weak]

Submitted by flyn4x4 on Mon, 04/27/2020 - 11:20 Pro Licensee

I have the same issue, "N: Skipping acquire of configured file 'main/binary-amd64/Packages' as repository 'http://software.virtualmin.com/vm/6/apt virtualmin-universal InRelease' doesn't support architecture 'amd64'"

Also most my install scripts are missing and the dashboard virtual version doesnt say "pro"

Submitted by ataalla on Mon, 04/27/2020 - 11:41

I am getting the same problem, hope this fix soon as my server not running well

Submitted by lulatsch66 on Mon, 04/27/2020 - 12:33

Same her on a server using Pro license, getting:

W: GPG error: http://software.virtualmin.com virtualmin-jessie Release: The following signatures were invalid: BADSIG E8DD3FA0A0BDBCF9 Virtualmin, Inc.
<security@virtualmin.com>
root@server:~# apt list --upgradable
Listing... Done
webmin-virtualmin-mailman/stable 6.8 all [upgradable from: 6.7]

And another strange one:

:~# apt install webmin-virtualmin-mailman
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
webmin-virtualmin-mailman : Depends: webmin-postfix but it is not installable
E: Unable to correct problems, you have held broken packages.

Any progress/idea on this?

Submitted by flyn4x4 on Tue, 04/28/2020 - 14:42 Pro Licensee

I can now run updates but , most my install scripts are missing and the dashboard virtualmin version doesnt say "pro"

FIXED - in gui Went to Virtualmin>System Settings>Upgrade to Virtualmin Pro

Submitted by lulatsch66 on Tue, 04/28/2020 - 17:07

Ok, fixed now for me, too. Here's what I had to do:

  • change repo paths
# old:
# deb http://user:pass@software.virtualmin.com/debian/ virtualmin-jessie main
# deb http://user:pass@software.virtualmin.com/debian/ virtualmin-universal main
# new:
deb http://user:pass@software.virtualmin.com/vm/6/apt/ virtualmin-jessie main
deb http://user:pass@software.virtualmin.com/vm/6/apt/ virtualmin-universal main
  • reimport gpg key (don't know, why, as it had been working for quite some time)
wget -nv -O - "http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin-6" | apt-key add -

Then, did "upgrade to virtualmin pro" in GUI, too. It showed: "dpkg: warning: downgrading webmin-virtual-server from 6.08.gpl to 6.08-2", installed webmin-virtualmin-vsftpd and then "Your system has been successfully upgraded to Virtualmin Pro!"

Submitted by IssueBot on Tue, 05/12/2020 - 17:11

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.