many F33 deltarpm rebuilds failing with md5 mismatch error

[Andre Robatino]

In the last few days, I've noticed that F33 deltarpm rebuilds often fail with an md5
mismatch error. This would happen occasionally before but happens almost all the time now.
Has this been reported? I don't see anything in bugzilla.

[Tom Horsley]

On Wed, 30 Dec 2020 07:08:59 -0000
Andre Robatino wrote:

>  This would happen occasionally before but happens almost all the time
> now. 
I haven't noticed an increased failure rate, but I have noticed that
I always get a mis-match on kernel rpms, and even when it does work
it tell me things like 1% saved (which doesn't really seem worth it).

[Andre Robatino]

I'm seeing this again with the latest F33 push with texlive RPMs, using the master
mirror (dl.fedoraproject.org). It says "Some packages were not download.
Retrying." and then proceeds to download 194 RPMs, out of the original 259.

[Andre Robatino]

Jonathan Dieter posted a bug report for this at
https://bugzilla.redhat.com/show_bug.cgi?id=1911828 , I'm relieved that it's not a
hardware problem on my machine. Don't know why no one else notices it, although the
deltas that fail are usually very small and don't waste much bandwidth.

[Tim]

On Wed, 2020-12-30 at 07:08 +0000, Andre Robatino wrote:
>  In the last few days, I've noticed that F33 deltarpm rebuilds
> often
>  fail with an md5 mismatch error. 
Strictly speaking, if the checksum fails you should not let anything
install it.  It could be just a stuff-up, it could be malicious.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.11.1.el7.x86_64 #1 SMP Fri Dec 18 16:34:56 UTC 2020 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.

[Andre Robatino]

>  Strictly speaking, if the checksum fails you should not let anything
>  install it.  It could be just a stuff-up, it could be malicious. 
When the deltarpm rebuild fails, dnf automatically downloads the full rpm. It's not a
security issue, just a waste of bandwidth.