Bug 600896

Summary:	app-admin/systemrescuecd-x86-4.9.0 checksums mismatch with official iso.
Product:	Gentoo Linux	Reporter:	Oleh <moonlapse81>
Component:	Current packages	Assignee:	Michał Górny <mgorny>
Status:	RESOLVED INVALID
Severity:	normal	CC:	fturco
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Oleh 2016-11-26 11:16:31 UTC

official systemrescuecd-x86-4.9.0.iso has following checksums:
sha1sum:
9356a512bf303256bcceb65d837542f4a90887e9

sha256sum:
1e84a298fd156826fc0a066f559b894bb89d6ab1ff13594233d7aa3499157de7

when installed with app-admin/systemrescuecd-x86-4.9.0 iso file does not match with above summs.

sha1sum 7511cf766effc8c7dafddab76da2a641d902b20d  
/usr/share/systemrescuecd/systemrescuecd-x86-4.9.0.iso

sha256sum 70386ae194324b3f67ac1425f6eb19474934826b0cf3203496bf996af33ce472
/usr/share/systemrescuecd/systemrescuecd-x86-4.9.0.iso

Reproducible: Always

Comment 1 Oleh 2016-11-26 11:22:54 UTC

moreover, if i do re-emerge, checksumms are different with each rebuild.

Comment 2 Michał Górny archtester

2016-11-26 11:27:11 UTC

It's a feature™. You can set USE=-isohybrid if you want the vanilla .iso. Anyway, Portage does verify the original checksum for you, so I don't see why you would do that again.

Comment 3 Oleh 2016-11-26 11:30:41 UTC

ok, this is just an observation, this discrepancy may lead questions from users with increased security habits.