Sha256sum on F32 iso: What does the message mean?

[augenauf (Flo)]

Hi,

I downloaded F32 iso and usually verify the download following these three simple steps:

(Quoting from link above)
First, import Fedora’s GPG key(s):

$ curl https://getfedora.org/static/fedora.gpg | gpg --import

Note that you can verify the details of these keys below.

Now, verify that the CHECKSUM file is valid:

$ gpg --verify-files *-CHECKSUM

The CHECKSUM file should have a good signature from one of the keys described below.

Lastly, check that your download’s checksum matches:

$ sha256sum -c *-CHECKSUM

If the output states that the file is valid, then it’s ready to use!

---

So far, so good, sha256sum tells me:

Fedora-Workstation-Live-x86_64-32-1.6.iso: OK

However it also says:

sha256sum: WARNING: 19 lines are improperly formatted

Does anyone know the meaning of that?

[ersen]

I don’t have that much knowledge about topic but i am guessing: there are 21 lines in the file. One of them is in a proper format, i.e. “SHA256 (filename) = checksum”. One line starts with a hash mark (#), so it is considered a comment (?). There are 19 lines left (they are GPG signature lines, so they are not for sha256sum command, but for gpg command), and they don’t have a proper checksum format for sha256sum command, so it is just reporting that.

[augenauf (Flo)]

Sure, that makes sense! Thanks for your quick reply.