Thanks for reporting this issue.
We will check this and have the fix for it.
Original Message:
Sent: Thu May 08, 2025 11:31 AM
From: Leo Becking
Subject: AIX Toolbox packages checksums broken
hello Sangamesh,
thx for the help with this.
I can confirm that the checksum errors are now gone,
I would like note that the python crashes I saw were caused by some unrelated issue:
if the debuglevel in dnf.conf is set between 6 and 10 some dnf cmds will crash in python similar as below:
# grep debug /opt/freeware/etc/dnf/dnf.conf
debuglevel=7
# dnf repolist
timer: config: 4 ms
DNF version: 4.2.17
Command: dnf repolist
Installroot: /
Releasever: 7.2.4.1
cachedir: /var/cache/dnf
Base command: repolist
Extra commands: ['repolist']
Traceback (most recent call last):
File "/usr/bin/dnf", line 59, in <module>
main.user_main(sys.argv[1:], exit_code=True)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 191, in user_main
errcode = main(args)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 65, in main
return _main(base, args, cli_class, option_parser_class)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 98, in _main
return cli_run(cli, base)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 114, in cli_run
cli.run()
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/cli.py", line 1162, in run
return self.command.run()
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/commands/repolist.py", line 146, in run
ui_size = _repo_size(self.base.sack, repo)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/commands/repolist.py", line 65, in _repo_size
for pkg in sack.query(flags=hawkey.IGNORE_EXCLUDES).filterm(reponame__eq=repo.id):
AttributeError: 'NoneType' object has no attribute 'query'
- when the level lower than 6 e.g
# grep debug /opt/freeware/etc/dnf/dnf.conf
debuglevel=1
- then dnf will work as expected
# dnf repolist
repo id repo name
AIX_Misc AIX Miscellaneous repository
AIX_Toolbox AIX generic repository
AIX_Toolbox_73 AIX 7.3 specific repository
AIX_Toolbox_noarch AIX noarch repository
------------------------------
Leo Becking
Original Message:
Sent: Thu May 08, 2025 10:54 AM
From: SANGAMESH MALLAYYA
Subject: AIX Toolbox packages checksums broken
Hi Leo,
Please recheck now.
------------------------------
SANGAMESH
Original Message:
Sent: Thu May 08, 2025 09:06 AM
From: Leo Becking
Subject: AIX Toolbox packages checksums broken
thx for the info.
I have setup the GPG key and dnf update now works as before , but reposync stil fails to download new packages :
- so the key is now imported
rpm -q gpg-pubkey
gpg-pubkey-41eea8e0-6800ac55
- dnf has now latest versions
dnf list installed | grep dnf
Command: dnf list installed
cachedir: /var/cache/dnf
dnf.ppc 4.2.17-64_55 @AIX_Toolbox_73
dnf-automatic.ppc 4.2.17-64_55 @AIX_Toolbox_73
dnf-data.ppc 4.2.17-64_55 @AIX_Toolbox_73
dnf-utils.ppc 4.0.16-64_52 @AIX_Toolbox_73
libdnf.ppc 0.39.1-64_52 @AIX_Toolbox_73
python3-dnf.ppc 4.2.17-64_55 @AIX_Toolbox_73
python3-dnf-plugin-migrate.ppc 4.0.16-64_52 @AIX_Toolbox_73
python3-dnf-plugins-core.ppc 4.0.16-64_52 @AIX_Toolbox_73
python3-libdnf.ppc 0.39.1-64_52 @AIX_Toolbox_73
python3.9-dnf.ppc 4.2.17-64_55 @AIX_Toolbox_73
python3.9-dnf-plugin-leaves.ppc 4.0.16-64_52 @AIX_Toolbox_73
python3.9-dnf-plugin-migrate.ppc 4.0.16-64_52 @AIX_Toolbox_73
python3.9-dnf-plugins-core.ppc 4.0.16-64_52 @AIX_Toolbox_73
python3.9-libdnf.ppc 0.39.1-64_52 @AIX_Toolbox_73
- this solves signature errors on (manual) downloaded packages i saw before
rpm -K *rpm
curl-8.11.1-1.aix7.1.ppc.rpm: digests signatures OK
curl-8.11.1-2.aix7.1.ppc.rpm: digests signatures OK
curl-8.6.0-1.aix7.1.ppc.rpm: digests OK
curl-8.7.1-1.aix7.1.ppc.rpm: digests signatures OK
curl-8.9.1-1.aix7.1.ppc.rpm: digests signatures OK
curl-devel-8.6.0-1.aix7.1.ppc.rpm: digests OK
curl-devel-8.9.1-1.aix7.1.ppc.rpm: digests signatures OK
glib2-devel-2.72.1-2.aix7.1.ppc.rpm: digests OK
glib2-devel-2.81.0-1.aix7.1.ppc.rpm: digests signatures OK
- If i try to perform reposync (setup a new repo) it fails on checksum
mkdir -p /install/AIX/test_repo_meuk
/opt/freeware/bin/reposync --download-path /install/AIX/test_repo_meuk --repo AIX_Toolbox_73 --arch ppc
timer: config: 5 ms
Loaded plugins: changelog, config-manager, debug, generate_completion_cache, leaves, migrate, repoclosure, repodiff, repograph, repomanage, reposync
DNF version: 4.2.17
Command: reposync reposync --download-path /install/AIX/test_repo_meuk --repo AIX_Toolbox_73 --arch ppc
Installroot: /
Releasever: 7.2.5.101
cachedir: /var/cache/dnf
Base command: reposync
Extra commands: ['reposync', '--download-path', '/install/AIX/test_repo_meuk', '--repo', 'AIX_Toolbox_73', '--arch', 'ppc']
os-release file not found
os-release: falling back to basic User-Agent: missing NAME or VERSION_ID
AIX 7.3 specific repository 17 kB/s | 2.6 kB 00:00
reviving: 'AIX_Toolbox_73' can be revived - repomd matches.
AIX_Toolbox_73: using metadata from Tue May 6 12:45:05 CEST 2025.
No module defaults found
timer: sack setup: 211 ms
Completion plugin: Generating completion cache...
(1/324): ccache-swig-4.0.1-1.aix7.3.ppc.rpm 345 kB/s | 74 kB 00:00
(2/324): clamav-1.0.6-1.aix7.3.ppc.rpm 35 MB/s | 38 MB 00:01
(3/324): clamav-1.0.7-2.aix7.3.ppc.rpm 76 MB/s | 38 MB 00:00
(4/324): clamav-1.0.7-3.aix7.3.ppc.rpm 55 MB/s | 41 MB 00:00
(5/324): clamav-devel-1.0.6-1.aix7.3.ppc.rpm 943 kB/s | 24 kB 00:00
(6/324): clamav-devel-1.0.7-1.aix7.3.ppc.rpm 957 kB/s | 24 kB 00:00
(7/324): clamav-devel-1.0.7-2.aix7.3.ppc.rpm 949 kB/s | 24 kB 00:00
(8/324): clamav-devel-1.0.7-3.aix7.3.ppc.rpm 881 kB/s | 23 kB 00:00
(9/324): cmake-3.16.0-2.aix7.3.ppc.rpm 47 MB/s | 23 MB 00:00
(10/324): cmake-data-3.16.0-2.aix7.3.ppc.rpm 21 MB/s | 1.6 MB 00:00
(11/324): createrepo_c-0.16.0-64_1.aix7.3.ppc.rpm 2.7 MB/s | 135 kB 00:00
(12/324): createrepo_c-0.16.0-64_2.aix7.3.ppc.rpm 2.7 MB/s | 135 kB 00:00
(13/324): createrepo_c-devel-0.16.0-64_1.aix7.3.ppc.rpm 729 kB/s | 35 kB 00:00
(14/324): createrepo_c-devel-0.16.0-64_2.aix7.3.ppc.rpm 713 kB/s | 35 kB 00:00
(15/324): createrepo_c-libs-0.16.0-64_1.aix7.3.ppc.rpm 5.9 MB/s | 301 kB 00:00
(16/324): createrepo_c-libs-0.16.0-64_2.aix7.3.ppc.rpm 5.9 MB/s | 302 kB 00:00
(17/324): dnf-4.2.17-64_50.aix7.3.ppc.rpm 444 kB/s | 11 kB 00:00
(18/324): dnf-4.2.17-64_51.aix7.3.ppc.rpm 459 kB/s | 11 kB 00:00
[MIRROR] dnf-4.2.17-64_53.aix7.3.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: ef4d23a83286f76e047a0484daaee9c69051186407dc66d6e4e3662c64b21c43(sha256) Expected: bfb043f4e87e07451b4f4872ee9518fe5b6b12618be005cd304428fa6914b1fb(sha256)
[MIRROR] dnf-4.2.17-64_53.aix7.3.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: ef4d23a83286f76e047a0484daaee9c69051186407dc66d6e4e3662c64b21c43(sha256) Expected: bfb043f4e87e07451b4f4872ee9518fe5b6b12618be005cd304428fa6914b1fb(sha256)
[MIRROR] dnf-4.2.17-64_53.aix7.3.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: ef4d23a83286f76e047a0484daaee9c69051186407dc66d6e4e3662c64b21c43(sha256) Expected: bfb043f4e87e07451b4f4872ee9518fe5b6b12618be005cd304428fa6914b1fb(sha256)
[MIRROR] dnf-4.2.17-64_53.aix7.3.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: ef4d23a83286f76e047a0484daaee9c69051186407dc66d6e4e3662c64b21c43(sha256) Expected: bfb043f4e87e07451b4f4872ee9518fe5b6b12618be005cd304428fa6914b1fb(sha256)
[FAILED] dnf-4.2.17-64_53.aix7.3.ppc.rpm: No more mirrors to try - All mirrors were already tried without success
Cleaning up. clamav-1.0.7-1.aix7.3.ppc.rpm 3% [==-
in the logI see these errors
2025-05-08T13:00:47Z DDEBUG Command: reposync reposync --download-path /install/AIX/test_repo_meuk --repo AIX_Toolbox_73 --arch ppc
2025-05-08T13:00:47Z DDEBUG Installroot: /
2025-05-08T13:00:47Z DDEBUG Releasever: 7.2.5.101
2025-05-08T13:00:47Z DEBUG cachedir: /var/cache/dnf
2025-05-08T13:00:47Z DDEBUG Base command: reposync
2025-05-08T13:00:47Z DDEBUG Extra commands: ['reposync', '--download-path', '/install/AIX/test_repo_meuk', '--repo', 'AIX_Toolbox_73', '--arch', 'ppc']
2025-05-08T13:00:47Z DEBUG os-release file not found
2025-05-08T13:00:47Z DEBUG os-release: falling back to basic User-Agent: missing NAME or VERSION_ID
2025-05-08T13:00:47Z DEBUG reviving: 'AIX_Toolbox_73' can be revived - repomd matches.
2025-05-08T13:00:47Z DEBUG AIX_Toolbox_73: using metadata from Tue May 6 12:45:05 CEST 2025.
2025-05-08T13:00:47Z DEBUG No module defaults found
2025-05-08T13:00:47Z DDEBUG timer: sack setup: 211 ms
2025-05-08T13:00:47Z DEBUG Completion plugin: Generating completion cache...
2025-05-08T13:00:51Z DDEBUG Cleaning up.
2025-05-08T13:00:51Z SUBDEBUG
Traceback (most recent call last):
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 65, in main
return _main(base, args, cli_class, option_parser_class)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 98, in _main
return cli_run(cli, base)
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/main.py", line 114, in cli_run
cli.run()
File "/opt/freeware/lib/python3.9/site-packages/dnf/cli/cli.py", line 1162, in run
return self.command.run()
File "/opt/freeware/lib/python3.9/site-packages/dnf-plugins/reposync.py", line 152, in run
self.download_packages(pkglist)
File "/opt/freeware/lib/python3.9/site-packages/dnf-plugins/reposync.py", line 252, in download_packages
base._download_remote_payloads(payloads, drpm, progress, None)
File "/opt/freeware/lib/python3.9/site-packages/dnf/base.py", line 1079, in _download_remote_payloads
raise dnf.exceptions.DownloadError(errors._irrecoverable)
dnf.exceptions.DownloadError: Cannot download dnf/dnf-4.2.17-64_53.aix7.3.ppc.rpm: All mirrors were tried
- so somehow reposync seems to be broken, while e.g. dnf reinstall works as expected , see below
dnf -y reinstall dnf
timer: config: 4 ms
Loaded plugins: changelog, config-manager, debug, generate_completion_cache, leaves, migrate, repoclosure, repodiff, repograph, repomanage, reposync
DNF version: 4.2.17
Command: dnf -y reinstall dnf
Installroot: /
Releasever: 7.2.5.101
cachedir: /var/cache/dnf
Base command: reinstall
Extra commands: ['-y', 'reinstall', 'dnf']
os-release file not found
os-release: falling back to basic User-Agent: missing NAME or VERSION_ID
AIX generic repository 24 kB/s | 2.7 kB 00:00
reviving: 'AIX_Toolbox' can be revived - repomd matches.
AIX_Toolbox: using metadata from Wed May 7 22:18:52 CEST 2025.
AIX noarch repository 26 kB/s | 2.6 kB 00:00
reviving: 'AIX_Toolbox_noarch' can be revived - repomd matches.
AIX_Toolbox_noarch: using metadata from Tue May 6 12:42:09 CEST 2025.
AIX 7.2 specific repository 24 kB/s | 2.7 kB 00:00
reviving: 'AIX_Toolbox_72' can be revived - repomd matches.
AIX_Toolbox_72: using metadata from Tue May 6 12:44:40 CEST 2025.
repo: using cache for: AIX_Toolbox_73
AIX_Toolbox_73: using metadata from Tue May 6 12:45:05 CEST 2025.
No module defaults found
timer: sack setup: 446 ms
Completion plugin: Generating completion cache...
--> Starting dependency resolution
---> Package dnf.ppc 4.2.17-64_55 will be reinstalled
--> Finished dependency resolution
timer: depsolve: 326 ms
Dependencies resolved.
============================================================================================================================================================================================
Package Architecture Version Repository Size
============================================================================================================================================================================================
Reinstalling:
dnf ppc 4.2.17-64_55 AIX_Toolbox_73 12 k
Transaction Summary
============================================================================================================================================================================================
Total download size: 12 k
Installed size: 9.3 k
Downloading Packages:
dnf-4.2.17-64_55.aix7.3.ppc.rpm 98 kB/s | 12 kB 00:00
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 97 kB/s | 12 kB 00:00
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
timer: transaction test: 3 ms
Running transaction
RPM transaction start.
Preparing : 1/1
Reinstalling : dnf-4.2.17-64_55.ppc 1/2
Cleanup : dnf-4.2.17-64_55.ppc 2/2
RPM transaction over.
Verifying : dnf-4.2.17-64_55.ppc 1/2
Verifying : dnf-4.2.17-64_55.ppc 2/2
timer: verify transaction: 37 ms
timer: transaction: 84 ms
Completion plugin: Generating completion cache...
Reinstalled:
dnf-4.2.17-64_55.ppc
Complete!
Cleaning up.
------------------------------
Leo Becking
Original Message:
Sent: Thu May 08, 2025 01:49 AM
From: SANGAMESH MALLAYYA
Subject: AIX Toolbox packages checksums broken
Please check this forum blog for more details https://community.ibm.com/community/user/blogs/sangamesh-mallayya1/2025/05/07/aix-toolbox-rpm-packages-signature
------------------------------
SANGAMESH
Original Message:
Sent: Wed May 07, 2025 08:20 AM
From: Leo Becking
Subject: AIX Toolbox packages checksums broken
I found some additional info:
using the rpm -v flag it looks like that on newer rpms the file format has been updated with a new header , see below:
(older rpm)
rpm -v --checksig curl-8.6.0-1.aix7.1.ppc.rpm
curl-8.6.0-1.aix7.1.ppc.rpm:
Header SHA256 digest: OK
Header SHA1 digest: OK
Payload SHA256 digest: OK
MD5 digest: OK
(newer rpm)
rpm -v --checksig curl-8.11.1-2.aix7.1.ppc.rpm
curl-8.11.1-2.aix7.1.ppc.rpm:
Header V4 RSA/SHA256 Signature, key ID 41eea8e0: NOKEY
Header SHA256 digest: OK
Header SHA1 digest: OK
Payload SHA256 digest: OK
V4 RSA/SHA256 Signature, key ID 41eea8e0: NOKEY
MD5 digest: OK
perhaps we are missing the key for that ?
I have rpm.rte:4.18.1.2004 for AIX 7.3 TL03 installed , which is now the latest availble version
------------------------------
Leo Becking
Original Message:
Sent: Tue May 06, 2025 05:38 AM
From: Leo Becking
Subject: AIX Toolbox packages checksums broken
I see the similar issues,
Downloading Packages:
[MIRROR] duo_unix-1.12.1-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: 0a428b7e6276908474153439c8ecde1b0829ec8b4a6e78e7094540fa17baf1a2(sha256) Expected: 382fcfc0ad156b8864c575d0766cd73819a61f22b55a1a07e21ca3c8fba9f57a(sha256)
[MIRROR] duo_unix-1.12.1-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: 0a428b7e6276908474153439c8ecde1b0829ec8b4a6e78e7094540fa17baf1a2(sha256) Expected: 382fcfc0ad156b8864c575d0766cd73819a61f22b55a1a07e21ca3c8fba9f57a(sha256)
[MIRROR] duo_unix-1.12.1-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: 0a428b7e6276908474153439c8ecde1b0829ec8b4a6e78e7094540fa17baf1a2(sha256) Expected: 382fcfc0ad156b8864c575d0766cd73819a61f22b55a1a07e21ca3c8fba9f57a(sha256)
[MIRROR] duo_unix-1.12.1-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: 0a428b7e6276908474153439c8ecde1b0829ec8b4a6e78e7094540fa17baf1a2(sha256) Expected: 382fcfc0ad156b8864c575d0766cd73819a61f22b55a1a07e21ca3c8fba9f57a(sha256)
[FAILED] duo_unix-1.12.1-1.aix7.1.ppc.rpm: No more mirrors to try - All mirrors were already tried without success
i have checked multiple packages by downloading manually and run rpm --checksig on them :
/tmp/curl_test> for n in $(ls) ; do rpm -K $n ; done
curl-8.11.1-1.aix7.1.ppc.rpm: digests SIGNATURES NOT OK
curl-8.11.1-2.aix7.1.ppc.rpm: digests SIGNATURES NOT OK
curl-8.6.0-1.aix7.1.ppc.rpm: digests OK
curl-8.7.1-1.aix7.1.ppc.rpm: digests SIGNATURES NOT OK
curl-8.9.1-1.aix7.1.ppc.rpm: digests SIGNATURES NOT OK
curl-devel-8.6.0-1.aix7.1.ppc.rpm: digests OK
curl-devel-8.9.1-1.aix7.1.ppc.rpm: digests SIGNATURES NOT OK
glib2-devel-2.72.1-2.aix7.1.ppc.rpm: digests OK
I have noticed that rpm filesets with the failing signature have the same modification date of 05-05-2025
Leo Becking
glib2-devel-2.81.0-1.aix7.1.ppc.rpm: digests SIGNATURES NOT OK
------------------------------
Leo Becking
Original Message:
Sent: Mon May 05, 2025 08:15 PM
From: David Bianchi
Subject: AIX Toolbox packages checksums broken
Running "dnf update" today produced the following errors. This same process worked fine on Friday May 2.
# dnf update
AIX generic repository 13 kB/s | 2.7 kB 00:00
AIX noarch repository 12 kB/s | 2.7 kB 00:00
AIX 7.3 specific repository 14 kB/s | 2.6 kB 00:00
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Upgrading:
gnupg2 ppc 2.4.7-1 AIX_Toolbox 11 M
info ppc 7.2-1 AIX_Toolbox 659 k
iperf3 ppc 3.18-1 AIX_Toolbox 514 k
ncat ppc 2:7.95-2 AIX_Toolbox 331 k
ncurses ppc 6.5-1 AIX_Toolbox 6.6 M
nmap ppc 2:7.95-2 AIX_Toolbox 7.4 M
pcre2 ppc 10.45-2 AIX_Toolbox 1.5 M
Transaction Summary
================================================================================
Upgrade 7 Packages
Total download size: 28 M
Is this ok [y/N]: y
Downloading Packages:
[MIRROR] info-7.2-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: d579563ec2c5ea97750dcff8351df22c34f19e64739a67f17ed134e2fc424838(sha256) Expected: bf67f853bcbd7f249b7889d6ff94fcc23c19332bd75d8b5ba19f10ce4dff44f6(sha256)
[MIRROR] iperf3-3.18-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: bce14dcfaeb28c94f2395e1412baa4aac082f38176cb360dc7922cf62388913a(sha256) Expected: 7023f601e668117834c7ea41f310b2550020fedbfee5dd946bcf846ce085ebed(sha256)
[MIRROR] info-7.2-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: d579563ec2c5ea97750dcff8351df22c34f19e64739a67f17ed134e2fc424838(sha256) Expected: bf67f853bcbd7f249b7889d6ff94fcc23c19332bd75d8b5ba19f10ce4dff44f6(sha256)
[MIRROR] info-7.2-1.aix7.1.ppc.rpm: Downloading successful, but checksum doesn't match. Calculated: d579563ec2c5ea97750dcff8351df22c34f19e64739a67f17ed134e2fc424838(sha256) Expected: bf67f853bcbd7f249b7889d6ff94fcc23c19332bd75d8b5ba19f10ce4dff44f6(sha256)
[FAILED] info-7.2-1.aix7.1.ppc.rpm: No more mirrors to try - All mirrors were already tried without success
(2-3/7): iperf3-3.18 11% [== ] 1.1 MB/s | 3.1 MB 00:21 ETA
Error: Error downloading packages:
Cannot download texinfo/info-7.2-1.aix7.1.ppc.rpm: All mirrors were tried
------------------------------
David Bianchi
------------------------------