md5sum errors on update

Norbert Preining preining at logic.at
Fri Jul 5 01:08:51 CEST 2019


Hi Alan, hi Tom,

On Fri, 05 Jul 2019, Alan Litchfield wrote:
> [232/339, 17:35/21:46] update: songs [1252k] (44553 -> 51494) ... TLUtils::check_file: removing /tmp/PQg494bFwH/tjkKGb99KV/songs.source.tar.xz, checksums differ:
> TLUtils::check_file:   TL=cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e, arg=016d389033589ab9334180edf70321858ba3b6000d8f560a18631e13ef28130f4b39aed81f7ddf0a178540a463789955d14620b37b7979ac0ea6abeec77d29bd

My guess is that you have updated right in the middle of a mirror sync
sesssion, when one part was already synced and the other not.

There is nothing we can do there.

> skipping forcibly removed package addliga

Just do
	tlmgr install addliga
and all will be fine again.

On Thu, 04 Jul 2019, Tomas Rokicki wrote:
> Right now PGP is under attack, and this is probably what's causing your
> problem.

This is completely unrelated, we don't use SKS at all.

Tom, please don't spread more of this FUD. In 20 years as Debian
Developer and user of GPG I have hardly used the sks servers, and there
is nothing under attack, but spammers.

The tabloid media have picked up as a big story, though.

There are interesting discussions going on on the gpg mailing list on
how to deal with this, but the nature and design decision of the sks
servers as append only store to protect from censorship and tampering
(does it remind you of blockchain?) allows for this.

Gpg by itself is not broken and can import the keys:
https://daniel-lange.com/archives/159-Cleaning-a-broken-GNUpg-gpg-key.html

Thanks.

Norbert

--
PREINING Norbert                               http://www.preining.info
Accelia Inc. + IFMGA ProGuide + TU Wien + JAIST + TeX Live + Debian Dev
GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13


More information about the tex-live mailing list