Issues with verifying the ISO

Ask Fedora
, , ,
1

I decided to check fedora out, but I have some issues with verifying the iso.

Running

sha256sum -c Fedora-Workstation-40-1.14-x86_64-CHECKSUM

Results in

Fedora-Workstation-Live-osb-40-1.14.x86_64.iso: FAILED open or read Fedora-Workstation-Live-x86_64-40-1.14.iso: OK sha256sum: WARNING: 17 lines are improperly formatted sha256sum: WARNING: 1 listed file could not be read

What is Fedora-Workstation-Live-osb-40-1.14.x86_64.iso? I can’t find anything like this on fedora website. If it says that the non osb iso is okay, does that mean It’s safe to proceed with the installation? I am using ubuntu 24.04, if that matters. Thanks in advance!

2

Are you getting it from this site :

3

Does this command (which filters out the extraneous lines) work better?

(IFS=$'\n'; for checksum in $(grep '^SHA256' Fedora-Workstation-40-1.14-x86_64-CHECKSUM); do if [[ -e $(grep -o '[^()]*iso' <<< $checksum) ]]; then sha256sum -c <(printf "$checksum\n"); fi; done)
4

I guess the output should have been

Fedora-Workstation-Live-osb-40-1.14.x86_64.iso: FAILED open or reads
Fedora-Workstation-Live-x86_64-40-1.14.iso: OK
sha256sum: WARNING: 17 lines are improperly formatted
sha256sum: WARNING: 1 listed file could not be read

You are checking two files, One is OK and the other one is missing, because you didn’t download that as well. However, you don’t need to download that file and everything is fine.

The 17 lines are the gpg check data, and you can ignora the WARNING as well.

3 Likes
5

It looks like this question has come up here before: What is an OSB ISO? What's the difference of an OSB and a "normal" ISO? - #8 by hex-m

6

And no answer was given other than a vague guess.

7

I just did some hunting and I found the following dialog on Matrix:

image
image1603×593 94.1 KB

So apparently osb is short for “osbuild”.

8

I got 19 lines are improperly formatted. Is that ok?

9

noted just a few posts above.

1 Like
10

I edited your lines to use markdown code formatting for better readability. You can do that yourself by using `text` for single lines or words, and

```
Code
```

For codeblocks

Does Fedora Media Writer have a hashsum verification method?

This would be pretty useful

11

Added installation

12

I believe the mediawriter automatically verifies the written image, though I don’t remember about verifying the downloaded iso when it has been downloaded before writing.
Mediawriter can directly download and write the image or write it from an already downloaded iso.

1 Like
13

Added accessibility, fedora-media-writer

14

I think the media writer should be able to do that. If not, would be a good addition

15

The mediawriter program contains the url https://fedoraproject.org/releases.json and if you download that, you get a json file containg the sha256 sums of the newest Fedora images. If it is using that to check the sha256 sum, I don’t know, but I could guess that mediawriter can only check a file if it has downloaded directly.

It is also possible that it can use the checkisomd5 program to verify the downloaded file.

It would be nice if all that were clearly documented, so we don’t have to guess.

In the git repository you can find this at https://github.com/FedoraQt/MediaWriter/blob/main/CRYPTOGRAPHY.md