600896 – app-admin/systemrescuecd-x86-4.9.0 checksums mismatch with official iso.

Bug 600896 - app-admin/systemrescuecd-x86-4.9.0 checksums mismatch with official iso.

Summary: app-admin/systemrescuecd-x86-4.9.0 checksums mismatch with official iso.

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Michał Górny

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2016-11-26 11:16 UTC by Oleh
Modified:	2016-11-26 17:32 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Oleh 2016-11-26 11:16:31 UTC

official systemrescuecd-x86-4.9.0.iso has following checksums:
sha1sum:
9356a512bf303256bcceb65d837542f4a90887e9

sha256sum:
1e84a298fd156826fc0a066f559b894bb89d6ab1ff13594233d7aa3499157de7

when installed with app-admin/systemrescuecd-x86-4.9.0 iso file does not match with above summs.

sha1sum 7511cf766effc8c7dafddab76da2a641d902b20d  
/usr/share/systemrescuecd/systemrescuecd-x86-4.9.0.iso

sha256sum 70386ae194324b3f67ac1425f6eb19474934826b0cf3203496bf996af33ce472
/usr/share/systemrescuecd/systemrescuecd-x86-4.9.0.iso

Reproducible: Always

Comment 1 Oleh 2016-11-26 11:22:54 UTC

moreover, if i do re-emerge, checksumms are different with each rebuild.

Comment 2 Michał Górny archtester

2016-11-26 11:27:11 UTC

It's a feature™. You can set USE=-isohybrid if you want the vanilla .iso. Anyway, Portage does verify the original checksum for you, so I don't see why you would do that again.

Comment 3 Oleh 2016-11-26 11:30:41 UTC

ok, this is just an observation, this discrepancy may lead questions from users with increased security habits.