Repository navigation
how can I skip package with bad checksum?(in Release file and in file checksum are not equal on remote_repo) #1140
Description
Hello
Problem : on remote repository package with bad checksum (not equal in Release file)
url="http://packages.linbit.com/public/"
distributions="proxmox-8"
architectures="amd64"
components="drbd-9"
When I run
pulp deb repository sync --name *** --remote ***
I recieve
'A file located at the url http://packages.linbit.com/public/dists/proxmox-8/drbd-9/pool/ktls-utils-dbgsym_0.10-2_amd64.deb failed validation due to checksum. Expected '10f931da9a6166ce09e2a6b0b56fd4710cc2a08f4747382099adbe75f32d9e7077a69d20cdb03f8990cc62f4b7d127b378e339d1455c042a7ed0f464c68d84a4', Actual 'fbf78d9e973d7d77a474d4b514ff56c8f62807179dd0389e8801638558452954fe8fa37d3e2a625b6401bbd5c83deaea3b484f542f3e4f65536ebac7fe937533''
How can I skip this package? It's really wrong checksum sha512sum in remote repo http://packages.linbit.com/public/ in one package only
Activity
angryerr commentedon Aug 23, 2024
with repo for proxmox-7 all right
there is no such bad package.
to use
ALLOWED_CONTENT_CHECKSUMSis bad idea , I want anly skip this package (may by I can do this in database?)quba42 commentedon Aug 26, 2024
By design there is currently no way. This is a case of the repo not passing validation. The expectation is to open a ticket with the person maintaining the repo and hopefully they will fix their repo soon.
If we wanted to provide an option to skip such packages, that would be a feature request. I will ask around other plugins what they do.
quba42 commentedon Aug 26, 2024
I asked the pulp_rpm folks, and they assured me that the pulp_rpm behavior is the same as for pulp_deb in such cases.
They do have a feature request to skip individual packages: pulp/pulp_rpm#3469
If and when this feature request is implemented for pulp_rpm, I would revisit implementing an analogous feature for pulp_deb as well.