Hi, Andrew Latham wrote: > Yes I mean the date of ALL hash checksum files and the ISO files.
But the checksums seem to match. I downloaded debian-31r8-i386-binary-1.iso the old way: wget https://cdimage.debian.org/mirror/cdimage/archive/3.1_r8/i386/jigdo-cd/debian-31r8-i386-binary-1.template wget https://cdimage.debian.org/mirror/cdimage/archive/3.1_r8/i386/jigdo-cd/debian-31r8-i386-binary-1.jigdo jigdo-lite In jigdo-lite answered the three questions by: debian-31r8-i386-binary-1.jigdo http://archive.debian.org/debian/ (I.e. the second input was an empty line.) In the end, jigdo-lite confirmed that its checksum test succeeded. I made my own checksum computation: $ sha256sum debian-31r8-i386-binary-1.iso a3dcb6f186c4b8cacd2f73e97a37f17f017c4b302808ff34b2e397ee0af6dd16 debian-31r8-i386-binary-1.iso This matches in https://cdimage.debian.org/mirror/cdimage/archive/3.1_r8/i386/jigdo-cd/SHA256SUMS the line a3dcb6f186c4b8cacd2f73e97a37f17f017c4b302808ff34b2e397ee0af6dd16 debian-31r8-i386-binary-1.iso jigdo-lite probably verified these lines from the (gzip compressed) .jidgo file: # Image Hex MD5Sum 1ca0ff341e0f610fabc81c8a3953c8e1 # Image Hex SHA1Sum 5c077d1178de21004474312879b0a205c15819e8 # Image size 663771136 bytes > I infer that in 2016 the hashes for another release were copied by > accident to this release with ISOs dated 2008. (human error) But how would these values become associated to the names of the ISO image files of 31r8 ? I still think that debian-31r6a-i386-netinst.iso is simply not in the checksum lists of cdimage/archive/3.1_r6a and thus cannot be verified. ----------------------------------------------------------------------- Haines Brown wrote: > $ jigdo-lite debian-31r6a-i386-binary-14.jigdo > ... > File `debian-31r6a-i386-binary-14.template' does not exist! > > This even though the tmplate file was in the archive. I doubt that this is the right way to invoke jigdo-lite. Its man page says jigdo-lite [ URL ] ... If URL is not given on the command line, the script prompts for a loca‐ tion to download the `.jigdo' file from. [...] So it would have to be: jigdo-lite https://cdimage.debian.org/mirror/cdimage/archive/3.1_r6a/i386/jigdo-cd/debian-31r6a-i386-binary-14.jigdo (Out of superstition and because of a hopefully long fixed bug i normally do it as shown at the beginning of this mail with 31r8.) So now i tried with Debian 12. Two questions appear: Files to scan: Debian mirror [http://deb.debian.org/debian/]: http://archive.debian.org/debian/ I.e. i answer the first question by empty test and the second by the URL of the big heap of old .deb packages. The run ends after about 3 minutes by a protest about the only known case of a .deb package that was replaced in the archive while keeping its previous name: Aaargh - 1 files could not be downloaded. This should not happen! Depending on the problem, it may help to retry downloading the missing files. ... Press Return to retry downloading the missing files. ... 1 files not found in previous pass, trying alternative download locations: 2026-03-26 20:04:07 URL:http://us.cdimage.debian.org/cdimage/snapshot/Debian/pool/main/z/zope-quotafolder/zope-quotafolder_0.1.1-1_all.deb [16726/16726] -> "./debian-31r6a-i386-binary-14.iso.tmpdir/us.cdimage.debian.org/cdimage/snapshot/Debian/pool/main/z/zope-quotafolder/zope-quotafolder_0.1.1-1_all.deb" [1] Found 0 of the 1 files required by the template As said this is a known and quite unique problem of that particular package's history. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779098 See below for a description of a workaround. ----------------------------------------------------------------------- To prove that it can be done better, i downloaded CD 1: jigdo-lite https://cdimage.debian.org/mirror/cdimage/archive/3.1_r6a/i386/jigdo-cd/debian-31r6a-i386-binary-1.jigdo Files to scan: Debian mirror [http://deb.debian.org/debian/]: http://archive.debian.org/debian/ The run ends by: Finished! The fact that you got this far is a strong indication that `debian-31r6a-i386-binary-1.iso' was generated correctly. I will perform an additional, final check, which you can interrupt safely with Ctrl-C if you do not want to wait. MD5 from template: msjOGx9bhAyz8XFZ-2i6nQ MD5 from image: msjOGx9bhAyz8XFZ-2i6nQ OK: MD5 Checksums match, image is good! WARNING: MD5 is not considered a secure hash! WARNING: It is recommended to verify your image in other ways too! Ok, ok, i do: $ sha256sum debian-31r6a-i386-binary-1.iso ebedd8998ddb09412a88c4e5084f36b21f1c39a4882a5d01e5fd4e9626091968 debian-31r6a-i386-binary-1.iso which matches the first line of https://cdimage.debian.org/mirror/cdimage/archive/3.1_r6a/i386/jigdo-cd/SHA256SUMS ----------------------------------------------------------------------- Back to CD-14 and the miserable zope-quotafolder_0.1.1-1_all.deb : I find traces in my mailbox that John Paul Adrian Glaubitz showed a way to get the right package version on debian-68k mailing list. Regrettably i get "Forbidden" when going to https://lists.debian.org/debian-68k/ so i have to quote from my mailbox: John Paul Adrian Glaubitz wrote: > > Date: Thu, 21 May 2020 18:19:39 +0200 > > > > Found it, it's on this ISO image [1] in the usual pool folder: > > https://cdimage.debian.org/cdimage/unofficial/sarge-amd64/iso-cd/debian-31r6a-amd64-binary-13.iso I wrote: > Date: Thu, 21 May 2020 19:02:19 +0200 > > Congrats. That was quick. > > Now i was able to complete the ISO by extracting the package from > that ISO and putting it into a quite arbitrary directory: > ./local_deb/zope-quotafolder_0.1.1-1_all.deb > > Then i run jigdo-lite in the directory where the incomplete ISO and > its helper files still are. > Input is: > > "jigdo" > > https://cdimage.debian.org/cdimage/archive/3.1_r8/m68k/jigdo-cd/debian-31r8-m68k-binary-13.jigdo > > "Files to scan:" > ./local_deb > > I don't get asked for a "Debian mirror" in this case. > The name of the offending package is not shown. > But i immediately get > > Found 1 of the 1 files required by the template > Successfully created `debian-31r8-m68k-binary-13.iso' > ... > OK: MD5 Checksums match, image is good! I still seem to have that extracted .deb which has just 15464 bytes: $ md5sum zope-quotafolder_0.1.1-1_all.deb 3945cf9ea545cd92b334024445f4324e zope-quotafolder_0.1.1-1_all.deb If you want, i can try sending it to you. Have a nice day :) Thomas
