On Sat, Dec 27, 2025 at 10:49:35AM -0000, Stuart Henderson wrote: > On 2025-12-27, Crystal Kolipe <[email protected]> wrote: > > On Fri, Dec 26, 2025 at 06:02:40PM -0500, Jay Hart wrote: > >> The following four files were downloaded: > >> - BUILDINFO > >> - install.i386 > >> - SHA256 > > > > Just to clarify, the SHA256 file is not downloaded directly, but created > > from > > SHA256.sig after that has been downloaded and verified. > > > >> The base78.tgz file took an hour to download, and upon completion of the > >> file download the 'sysupgrade' script died. > > > > If you are troubleshooting a problem and want to avoid re-downloading the > > files each time, you can download them manually to a local directory then > > point sysupgrade to that local path. > > The hash file is downloaded, if any of the other files already exist and > hashes match it will use the existing file and not download again.
The point I was emphasising is that the hashes used are always signed, so the risk of a malicious, corrupted, or incomplete download being undetected is basically zero. > As mentioned in another reply, try a real mirror, especially if you are > further away from the origin server in Canada used for cdn.openbsd.org > and reasonably close to a mirror it will often work a lot better. (The > cdn does cache but except at around release time files will have often > dropped out of cache). Are we absolutely certain that the downloads are indeed completing to 100%? I was wondering if it was getting to, say 98% then aborting.
