Filenames not consistent in download page and torrent - breaks checksum verification for torrents

Ask Fedora
1

the filenames for the latest Fedora release (43) are different when downloaded from download.fedoraproject.org and when torrented from torrent.fedoraproject.org.

as an example, the direct download link for Workstation x86_64 43 downloads a file with the name Fedora-Workstation-Live-43-1.6.x86_64.iso, while the torrent download is the slighly different Fedora-Workstation-Live-x86_64-43-1.6.iso. i haven’t checked that many torrent files, but at least for Workstation and KDE the pattern holds[1] - the direct download is Fedora-Desktop-Live-version.architecture.iso, while the torrent download is Fedora-Desktop-Live-architechture-version.iso.

the issue is that even when downloading a torrent, the checksum file expects the former format. here’s for example part of the checksum file downloaded via torrent for Workstation x86:

# Fedora-Workstation-Live-43-1.6.x86_64.iso: 2742190080 bytes
SHA256 (Fedora-Workstation-Live-43-1.6.x86_64.iso) = 2a4a16c009244eb5ab2198700eb04103793b62407e8596f30a3e0cc8ac294d77

(while again, the name of the ISO in the same download is Fedora-Workstation-Live-x86_64-43-1.6.iso.)

this means that naively running the sha256sum command found on the download page (or that on /security) results in the following error:

sha256sum: WARNING: 17 lines are improperly formatted
sha256sum: Fedora-Workstation-43-1.6-x86_64-CHECKSUM: no file was verified

renaming the torrent file to be as the checksum expects solves the issue, proving the files are indeed identical and differ only in name:

Fedora-Workstation-Live-43-1.6.x86_64.iso: OK

while this is not that big a deal (as demonstrated i was able to verify the checksum quite easily), i think it should be fixed, especially since it can result in a confusion among less technically-inclined users or those trying linux for the first time.

  1. somewhat strangely, while the torrent file for KDE live x86_64 still fits the pattern in that it’s still architecture-version, that torrent doesn’t include the checksum, and instead includes the KDE mobile live ISO. just thought i’d mention in case nobody else brought that up. ↩︎

1 Like
2

Thanks, this is indeed a problem, and we might want to document this here in Ask Fedora > Common Issues .

@talyane Could you please report this issue to the Fedora Releng team (if you have a Fedora account to log in there)? And link it here? Thanks a lot.

1 Like
3

i was in fact already directed to this ticket on the Releng team by @kevin (thanks Kevin), so, done. i could open a new ticket if you think it deserves its own.

4

That’s a different issue, I’d recommend to create a new ticket for them. And since you already commented in the linked one, just add a comment “I created a separate ticket for this problem at ”. Thanks.

5

@jnsamyak fixed it before i even opened a second topic and i’ve confirmed that the issue is now fixed.

1 Like
6

Hi @kparal , I found some differences:
Missing in torrents:
Fedora-SoaS-Live-x86_64-43-1.6.iso
Missing in downloads:
Fedora-Silverblue-ostree-x86_64-43-1.6.iso

it looks like file https://torrent.fedoraproject.org/torrents/Fedora-Silverblue-ostree-x86_64-43.torrent

f43
❯ transmission-show -f _torrents/Fedora-Silverblue-ostree-x86_64-43.torrent

FILES

Fedora-Silverblue-ostree-x86_64-43/Fedora-Silverblue-43-1.6-x86_64-CHECKSUM (1.06 kB)
Fedora-Silverblue-ostree-x86_64-43/Fedora-SoaS-Live-43-1.6.x86_64.iso (2.23 GB)

has some typo Sileverblue VS SoaS^^^

f42:

❯ transmission-show -f _torrents/Fedora-Silverblue-ostree-x86_64-42.torrent

FILES

Fedora-Silverblue-ostree-x86_64-42/Fedora-Silverblue-42-1.1-x86_64-CHECKSUM (1.06 kB)
Fedora-Silverblue-ostree-x86_64-42/Fedora-Silverblue-ostree-x86_64-42-1.1.iso (2.98 GB)

filled>>>

1 Like
8

Since releng is quickly working on fixing these issues, we don’t need it documented in Ask Fedora > Common Issues , moving to Ask Fedora .