Cannot verify Sericea iso

Ask Fedora
, ,
1

Hi, trying to verify the Sericea iso but unable to. From the Sericea page I downloaded the iso and checksum.

Fedora-Sericea-ostree-x86_64-39-1.5-respin2.iso

Fedora-Sericea-ostree-39-respin2-1.5-x86_64-CHECKSUM

(From
https://mirror.usi.edu/pub/alt/releases/39/respins/Sericea/x86_64/)

And followed the “Verify your download” steps from the Sericea page popup:

gpgv --keyring ./fedora.gpg Fedora-Sericea-ostree-39-respin2-1.5-x86_64-CHECKSUM

yields

gpgv: Signature made Tue 07 Nov 2023 04:06:48 PM MST
gpgv: using RSA key E8F23996F23218640CB44CBE75CF5AC418B8E74C
gpgv: Good signature from “Fedora (39) fedora-39-primary@fedoraproject.org”

and

sha256sum -c Fedora-Sericea-ostree-39-respin2-1.5-x86_64-CHECKSUM

yields

sha256sum: /pub/alt/releases/39/respins/Sericea/x86_64/Fedora-Sericea-ostree-x86_64-39-1.5-respin2.iso: No such file or directory
/pub/alt/releases/39/respins/Sericea/x86_64/Fedora-Sericea-ostree-x86_64-39-1.5-respin2.iso: FAILED open or read
sha256sum: WARNING: 18 lines are improperly formatted
sha256sum: WARNING: 1 listed file could not be read

From the same directory, when I downloaded

https://mirror.usi.edu/pub/alt/releases/39/respins/Sericea/x86_64/Fedora-Sericea-ostree-x86_64-39-1.5-respin.iso

and

https://mirror.usi.edu/pub/alt/releases/39/respins/Sericea/x86_64/Fedora-Sericea-ostree-39-respin-1.5-x86_64-CHECKSUM

I have success with verification:

gpgv --keyring ./fedora.gpg Fedora-Sericea-ostree-39-respin-1.5-x86_64-CHECKSUM

gpgv: Signature made Tue 07 Nov 2023 02:15:21 AM MST
gpgv: using RSA key E8F23996F23218640CB44CBE75CF5AC418B8E74C
gpgv: Good signature from “Fedora (39) fedora-39-primary@fedoraproject.org”

sha256sum -c Fedora-Sericea-ostree-39-respin-1.5-x86_64-CHECKSUM

Fedora-Sericea-ostree-x86_64-39-1.5-respin.iso: OK
sha256sum: WARNING: 17 lines are improperly formatted

I successfully downloaded and verified regular Workstation Sway today. I’ve never had a verification problem with 38, 37, 36, etc.

Questions:

  • Why does verification fail on the “respin2.iso” ?
  • Can I just use the “respin.iso” for install which verified successfully?
  • Why are there two isos in the directory and why is respin2 linked to from the Sericea Downloads page but not “respin” ?

Thanks for any advice you might have.

2

That appears to be because the checksum file specifies the full path. You can just sha256sum the iso file and compare the checksum manually.

The Sericea install image (among others) failed to generate during the final release compose, so it was skipped because Sericea is not release blocking. Respins were created later and put in place manually.

respin2 is because the first respin was accidentally Onyx.