Ubuntu
ubuntu-release-upgrader package

apt-get update fails, hash sum mismatches with de.archive.ubuntu.com

Bug #1373598 reported by William Smith
360
This bug affects 73 people
Affects Status Importance Assigned to Milestone
apt (Ubuntu)
Invalid
High
Unassigned
ubuntu-release-upgrader (Ubuntu)
Invalid
High
Unassigned

Bug Description

1. Release:
Description: Ubuntu 14.04.1 LTS
Release: 14.04

2. not a package. The whole distro is broken.

3. I always expect apt-get update to work, at least with Ubuntu's own repositories.

4. "apt-get update" failed, and later "apt-get dist upgrade"

It started with this when doing a normal "apt-get update"

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/source/Sources Hash Sum mismatch

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages Hash Sum mismatch

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-i386/Packages Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

When doing a dist-upgrade, I then got this:
E: mkinitramfs failure cpio 141 gzip 1
update-initramfs: failed for /boot/initrd.img-3.13.0-36-generic with 1.
run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1
Failed to process /etc/kernel/postinst.d at /var/lib/dpkg/info/linux-image-extra-3.13.0-36-generic.postinst line 1025.
No apport report written because the error message indicates its a followup error from a previous failure.
                                                                                                          dpkg: error processing package linux-image-extra-3.13.0-36-generic (--configure):
 subprocess installed post-installation script returned error exit status 2
dpkg: dependency problems prevent configuration of linux-image-generic:
 linux-image-generic depends on linux-image-extra-3.13.0-36-generic; however:
  Package linux-image-extra-3.13.0-36-generic is not configured yet.

dpkg: error processing package linux-image-generic (--configure):
 dependency problems - leaving unconfigured
Setting up linux-headers-3.13.0-36 (3.13.0-36.63) ...
Setting up linux-headers-3.13.0-36-generic (3.13.0-36.63) ...
Examining /etc/kernel/header_postinst.d.
run-parts: executing /etc/kernel/header_postinst.d/dkms 3.13.0-36-generic /boot/vmlinuz-3.13.0-36-generic
Setting up linux-headers-generic (3.13.0.36.43) ...
No apport report written because the error message indicates its a followup error from a previous failure.
                                                                                                          dpkg: dependency problems prevent configuration of linux-generic:
 linux-generic depends on linux-image-generic (= 3.13.0.36.43); however:
  Package linux-image-generic is not configured yet.

dpkg: error processing package linux-generic (--configure):
 dependency problems - leaving unconfigured

And later this at the end:
Processing triggers for libc-bin (2.19-0ubuntu6.3) ...
E: Sub-process /usr/bin/dpkg returned an error code (1)

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: ubuntu-release-upgrader-core 1:0.220.5
ProcVersionSignature: Ubuntu 3.13.0-34.60-generic 3.13.11.4
Uname: Linux 3.13.0-34-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.4
Architecture: amd64
CrashDB: ubuntu
CurrentDesktop: Unity
Date: Wed Sep 24 21:57:55 2014
InstallationDate: Installed on 2013-05-09 (503 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Release amd64 (20130424)
PackageArchitecture: all
SourcePackage: ubuntu-release-upgrader
Symptom: dist-upgrade
UpgradeStatus: Upgraded to trusty on 2014-05-04 (142 days ago)
VarLogDistupgradeTermlog:

Revision history for this message
William Smith (wrsmith-y) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in ubuntu-release-upgrader (Ubuntu):
status: New → Confirmed
Revision history for this message
ITec (itec) wrote :
Download full text (10.9 KiB)

I am experiencing the same.

It must be a problem with the German ubuntu archives.
The Swiss archives work without a problem.

There must be something, that the Swiss do better?
Let's find it out! ;-)

# nslookup de.archive.ubuntu.com
 Server: 127.0.0.1
 Address: 127.0.0.1#53

 Non-authoritative answer:
 de.archive.ubuntu.com canonical name = ubuntu.mirror.tudos.de.
 Name: ubuntu.mirror.tudos.de
 Address: 141.30.13.10
 Name: ubuntu.mirror.tudos.de
 Address: 141.30.13.20
 Name: ubuntu.mirror.tudos.de
 Address: 141.30.13.30

# cat /etc/apt/sources.list
 deb http://de.archive.ubuntu.com/ubuntu/ trusty main restricted universe multiverse
 deb-src http://de.archive.ubuntu.com/ubuntu/ trusty main restricted universe multiverse
 deb http://de.archive.ubuntu.com/ubuntu/ trusty-updates main restricted universe multiverse
 deb-src http://de.archive.ubuntu.com/ubuntu/ trusty-updates main restricted universe multiverse

 deb http://security.ubuntu.com/ubuntu trusty-security main restricted universe multiverse
 deb-src http://security.ubuntu.com/ubuntu trusty-security main restricted universe multiverse

# LANG=en_us apt-get update
 Ign http://de.archive.ubuntu.com trusty InRelease
 Ign http://security.ubuntu.com trusty-security InRelease
 Ign http://de.archive.ubuntu.com trusty-updates InRelease
 Hit http://security.ubuntu.com trusty-security Release.gpg
 Hit http://de.archive.ubuntu.com trusty Release.gpg
 Hit http://security.ubuntu.com trusty-security Release
 Hit http://de.archive.ubuntu.com trusty-updates Release.gpg
 Hit http://de.archive.ubuntu.com trusty Release
 Hit http://security.ubuntu.com trusty-security/main Sources
 Hit http://de.archive.ubuntu.com trusty-updates Release
 Hit http://security.ubuntu.com trusty-security/restricted Sources
 Hit http://de.archive.ubuntu.com trusty/main Sources
 Hit http://security.ubuntu.com trusty-security/universe Sources
 Hit http://de.archive.ubuntu.com trusty/restricted Sources
 Hit http://security.ubuntu.com trusty-security/multiverse Sources
 Hit http://de.archive.ubuntu.com trusty/universe Sources
 Hit http://security.ubuntu.com trusty-security/main amd64 Packages
 Hit http://de.archive.ubuntu.com trusty/multiverse Sources
 Hit http://security.ubuntu.com trusty-security/restricted amd64 Packages
 Hit http://de.archive.ubuntu.com trusty/main amd64 Packages
 Hit http://security.ubuntu.com trusty-security/universe amd64 Packages
 Hit http://security.ubuntu.com trusty-security/multiverse amd64 Packages
 Hit http://de.archive.ubuntu.com trusty/restricted amd64 Packages
 Hit http://security.ubuntu.com trusty-security/main i386 Packages
 Hit http://de.archive.ubuntu.com trusty/universe amd64 Packages
 Hit http://security.ubuntu.com trusty-security/restricted i386 Packages
 Hit http://de.archive.ubuntu.com trusty/multiverse amd64 Packages
 Hit http://security.ubuntu.com trusty-security/universe i386 Packages
 Hit http://de.archive.ubuntu.com trusty/main i386 Packages
 Hit http://security.ubuntu.com trusty-security/multiverse i386 Packages
 Hit http://de.archive.ubuntu.com trusty/restricted i386 Packages
 Hit http://security.ubuntu.com trusty-security/main Translation-en
 Hit http://de.arc...

Revision history for this message
Eric Haberstroh (ehaberstroh) wrote :

Switching to Swiss servers did it. Maybe this bug should be assigned to someone responsible for the local Ubuntu servers.

Revision history for this message
linuxball (linuxball) wrote :

The bug hits me from time to time, too. Right now it shows up, again:

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/i18n/Translation-en Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

Revision history for this message
Ni Hao (ni-hao-1) wrote :

I can confirm. It might be that this occurs only from time to time but the first report is about two months old. Why is this bug not permanently fixed....

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in apt (Ubuntu):
status: New → Confirmed
Revision history for this message
Francesc-montserrat (francesc-montserrat) wrote :

Yes, same here:

W:Failed to fetch http://nl.archive.ubuntu.com/ubuntu/dists/trusty-updates/restricted/i18n/Translation-en Hash Sum mismatch
E:Some index files failed to download. They have been ignored, or old ones used instead.

Is there any way to solve this ?

Revision history for this message
dreh23 (johannes-amorosa-7) wrote :

I have the same error.

Revision history for this message
claus (claus2) wrote :

As this seems to affect mostly users of the de. mirror I subscribed the owner of that mirror to this bug (hope this is the right way to go about it).
Changing to the German NetCologne mirror fixed this issue for me for now. It was an ongoing problem with several Trusty servers for several month.

Revision history for this message
Erlon R. Cruz (sombrafam) wrote :
Download full text (3.4 KiB)

Thats not only a problem with the de repo. It happens the same with the Brazilian repo!
-----------------------------------------------------
Get:62 http://br.archive.ubuntu.com trusty-backports/restricted amd64 Packages [14 B]
Get:63 http://br.archive.ubuntu.com trusty-backports/universe amd64 Packages [19.8 kB]
Get:64 http://br.archive.ubuntu.com trusty-backports/multiverse amd64 Packages [1231 B]
Get:65 http://br.archive.ubuntu.com trusty-backports/main i386 Packages [4935 B]
Get:66 http://br.archive.ubuntu.com trusty-backports/restricted i386 Packages [14 B]
Get:67 http://br.archive.ubuntu.com trusty-backports/universe i386 Packages [19.9 kB]
Get:68 http://br.archive.ubuntu.com trusty-backports/multiverse i386 Packages [1235 B]
Get:69 http://br.archive.ubuntu.com trusty-backports/main Translation-en [2890 B]
Get:70 http://br.archive.ubuntu.com trusty-backports/multiverse Translation-en [776 B]
Get:71 http://br.archive.ubuntu.com trusty-backports/restricted Translation-en [14 B]
Get:72 http://br.archive.ubuntu.com trusty-backports/universe Translation-en [17.1 kB]
Fetched 30.1 MB in 28s (1060 kB/s)
W: Failed to fetch bzip2:/var/lib/apt/lists/partial/security.ubuntu.com_ubuntu_dists_trusty-security_main_source_Sources Hash Sum mismatch

W: Failed to fetch bzip2:/var/lib/apt/lists/partial/security.ubuntu.com_ubuntu_dists_trusty-security_universe_binary-amd64_Packages Hash Sum mismatch

W: Failed to fetch bzip2:/var/lib/apt/lists/partial/security.ubuntu.com_ubuntu_dists_trusty-security_main_binary-i386_Packages Hash Sum mismatch

W: Failed to fetch bzip2:/var/lib/apt/lists/partial/security.ubuntu.com_ubuntu_dists_trusty-security_main_i18n_Translation-en Hash Sum mismatch

W: Failed to fetch bzip2:/var/lib/ap...

Read more...

Revision history for this message
Sasa Paporovic (melchiaros) wrote :

Adding the tag utopic, because of a duplicate.

tags: added: utopic
Revision history for this message
Sasa Paporovic (melchiaros) wrote :

Have the same observed on precise.

tags: added: precise
Revision history for this message
Marcus V R Nascimento (marcusvrn) wrote :

I had the same problem. After too much time researching, I discovered that the problem should be the ISP which I'm using. Changing the internet connection that has another ISP, the problem was solved on trusty and precise! ISP may have a transparent caches and it will break the updates until it updates itself. Researching more, I found this bug: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/972077 that maybe explain what's going on (problem C describes better).

Alberto Salvia Novella (es20490446e)
Changed in apt (Ubuntu):
importance: Undecided → Critical
Changed in ubuntu-release-upgrader (Ubuntu):
importance: Undecided → High
Changed in apt (Ubuntu):
importance: Critical → High
Revision history for this message
exap (exap) wrote :

My default setting in "System Settings" > "Software & Updates" > "Ubuntu Software" > "Download from" is "Server for Germany" (de.archive.ubuntu.com). Updating apt I got:

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/i18n/Translation-en Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

So I tried servers like "Main server" (archive.ubuntu.com) or "Server for United States" (us.archive.ubuntu.com) and everything went fine.

Revision history for this message
Martin Hecht (mrbaseman) wrote :

same for me with http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/i18n/Translation-en and us.archive.ubuntu.com works fine

Revision history for this message
Erhard Kroeger (erhardkroeger1) wrote :

For me exactly as described by Martin Hecht (mrbaseman). I changed from de.archive.ubuntu.com to archive.ubuntu.com and it worked.

Revision history for this message
Bernadette Mohr (bernadette-mohr) wrote :

Even changing from de.archive.ubuntu.com to de2.archive.ubuntu.com just did the trick for me.

Revision history for this message
Stephan Bayer (stephan-v) wrote :

Thanks Bernadette. Switching us.archive.ubuntu.com to de2.archive.ubuntu.com worked for me as well.

Revision history for this message
Sasa Paporovic (melchiaros) wrote :

For the german users:

Could you please run

ping -c 2 de.archive.ubuntu.com

right after you have observed the hash sum mismatch error on updating your package list from the german sources.

A colleage of mine and I have tetermined a poisening mirror in germany at the TU-Dresden and whant some confirmations that it is really and only this mirror.

The maintainer of the mirror could not observe the error on his testcomputer.

This is why we whant also to have the information in which part of gemany (Bundesland) you obverse the error. Maybe it is something between the mirror and us(where ever we are).

Please paste the output of the ping above and the location(Bundesland) where you are.

Revision history for this message
Sasa Paporovic (melchiaros) wrote :

The TU-Dresden mirror info page could be found here:

https://launchpad.net/ubuntu/+mirror/ubuntu.mirror.tudos.de-archive

Revision history for this message
Martin Hecht (mrbaseman) wrote : Re: [Bug 1373598] Re: apt-get update fails, hash sum mismatches (trusty)

when I run this several times from Stuttgart (we are at the provider O2,
Telefonica),
I see a bit of packet loss.

ping -c 2 de.archive.ubuntu.com
PING ubuntu.mirror.tudos.de (141.30.13.20) 56(84) bytes of data.
64 bytes from c13020.dip.tu-dresden.de (141.30.13.20): icmp_seq=2 ttl=53
time=95.7 ms

--- ubuntu.mirror.tudos.de ping statistics ---
2 packets transmitted, 1 received, 50% packet loss, time 999ms
rtt min/avg/max/mdev = 95.745/95.745/95.745/0.000 ms

I have seen the packet loss only, when I receive the 141.30.13.20, but
not always. I had a ping -c 20 running without any packet loss and
another one with 10% packet loss.

Revision history for this message
Martin Hecht (mrbaseman) wrote :

again I had hash sum mismatches.
Interestingly, it is always the following source which fails:
http://de.archive.ubuntu.com trusty-updates/main Translation-en

replacing "de" by "us" which helped at work last time solved the problem
at home now.
Note: I had to replace the host only for this single source. Since I did
this at work, I didn't have any problems anymore. At home I'll keep an
eye on this and report back if the trouble reappears.

I have observed some packet loss again to 141.30.13.20 but since it is
always one for the Translation-en packages I'd assume that something
with the language environment (which might affect encoding of the
packages?) is not working properly. Either the system-wide language or
the web server providing the updates might run with a wrong $LANG
setting or so...
And the packet loss is then caused by too many clients which try to
reconnect and fetch the package again and again.

Does this sound reasonable?

Revision history for this message
Philipp Wendler (philw85) wrote : Re: apt-get update fails, hash sum mismatches (trusty)

We experience this problem also.

$ ping -c 2 de.archive.ubuntu.com
PING ubuntu.mirror.tudos.de (141.30.13.20) 56(84) bytes of data.
64 bytes from c13020.dip.tu-dresden.de (141.30.13.20): icmp_seq=1 ttl=55 time=12.8 ms
64 bytes from c13020.dip.tu-dresden.de (141.30.13.20): icmp_seq=2 ttl=55 time=12.5 ms

--- ubuntu.mirror.tudos.de ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 12.532/12.693/12.855/0.196 ms

Sometimes it also uses the 141.30.13.10 machine, never any other machine.

We are also at a German university, and thus connected to tudos.de directly via DFN (German Research Network):

> tracepath de.archive.ubuntu.com
 1?: [LOCALHOST] pmtu 1500
 1: mikado.fim.uni-passau.de 0.364ms
 1: mikado.fim.uni-passau.de 0.353ms
 2: Transfer-Lst-Brandenburg-FW.c6006.rz.uni-passau.de 0.802ms
 3: uni-fw-1.rz.uni-passau.de 0.529ms
 4: core.rz.uni-passau.de 1.170ms
 5: xr-reg1-ge8-6.x-win.dfn.de 3.493ms
 6: cr-erl1-be5.x-win.dfn.de 7.399ms
 7: kr-dre106.x-win.dfn.de 12.860ms
 8: 141.30.1.74 21.586ms
 9: cat6k-bar.campus.urz.tu-dresden.de 12.892ms
10: c13010.dip.tu-dresden.de 14.231ms reached

Revision history for this message
Jeff Lambert (jl-newtraxtech) wrote :

Having this problem

Distributor ID: Ubuntu
Description: Ubuntu 14.04.2 LTS
Release: 14.04
Codename: trusty

W: Failed to fetch bzip2:/var/lib/apt/lists/partial/us.archive.ubuntu.com_ubuntu_dists_trusty-updates_main_i18n_Translation-en Hash Sum mismatch

Revision history for this message
mpcore (mp-t) wrote :
Download full text (3.3 KiB)

Same Issue here with http://de.archive.ubuntu.com . Additionally, I also see GPG error for the Ubuntu Archive Automatic Signing Key. No problems with other mirrors.

apt-get update
Ign http://de.archive.ubuntu.com trusty InRelease
Ign http://de.archive.ubuntu.com trusty-security InRelease
Ign http://de.archive.ubuntu.com trusty-updates InRelease
Ign http://de.archive.ubuntu.com trusty-proposed InRelease
Ign http://de.archive.ubuntu.com trusty-backports InRelease
Hit http://de.archive.ubuntu.com trusty Release.gpg
Hit http://de.archive.ubuntu.com trusty-security Release.gpg
Get:1 http://de.archive.ubuntu.com trusty-updates Release.gpg [933 B]
(...)
Get:12 http://de.archive.ubuntu.com trusty-backports/main amd64 Packages [5,536 B]
Get:13 http://de.archive.ubuntu.com trusty-backports/restricted amd64 Packages [28 B]
Get:14 http://de.archive.ubuntu.com trusty-backports/universe amd64 Packages [26.2 kB]
Get:15 http://de.archive.ubuntu.com trusty-backports/multiverse amd64 Packages [1,245 B]
Get:16 http://de.archive.ubuntu.com trusty-backports/main i386 Packages [5,550 B]
Get:17 http://de.archive.ubuntu.com trusty-backports/restricted i386 Packages [28 B]
Get:18 http://de.archive.ubuntu.com trusty-backports/universe i386 Packages [26.3 kB]
Get:19 http://de.archive.ubuntu.com trusty-backports/multiverse i386 Packages [1,249 B]
Get:20 http://de.archive.ubuntu.com trusty-backports/main Translation-en [3,233 B]
Get:21 http://de.archive.ubuntu.com trusty-backports/multiverse Translation-en [776 B]
Get:22 http://de.archive.ubuntu.com trusty-backports/restricted Translation-en [14 B]
Get:23 http://de.archive.ubuntu.com trusty-backports/universe Translation-en [24.3 kB]
Get:24 http://de.archive.ubuntu.com trusty-proposed/main amd64 Packages [148 kB]
Get:25 http://de.archive.ubuntu.com trusty-proposed/restricted amd64 Packages [28 B]
Hit http://de.archive.ubuntu.com trusty-proposed/universe amd64 Packages
Get:26 http://de.archive.ubuntu.com trusty-proposed/multiverse amd64 Packages [1,134 B]
Get:27 http://de.archive.ubuntu.com trusty-proposed/main i386 Packages [145 kB]
Get:28 http://de.archive.ubuntu.com trusty-proposed/restricted i386 Packages [28 B]
Get:29 http://de.archive.ubuntu.com trusty-proposed/multiverse i386 Packages [1,133 B]
Fetched 1,226 kB in 53s (22.9 kB/s)
W: GPG error: http://de.archive.ubuntu.com trusty-proposed Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <email address hidden>
W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages Hash Sum mismatch

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-i386/Packages Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

# VS.: #

(...)
Get:53 http://de2.archive.ubuntu.com trusty-backports/main Translation-en [3,233 B]
Get:54 http://de2.archive.ubuntu.com trusty-backports/multiverse Translation-en [776 B]
Get:55 http://de2.archive.ubuntu.com trusty-backports/restricted Translation-en [14 B]
Get:56 http://de2.archive.ubuntu.com trusty-backports/universe Translati...

Read more...

Revision history for this message
Martin Hecht (mrbaseman) wrote :

about 2-3 weeks ago (sorry for the delayed report here) I had the problem again, at home and at work (University of Stuttgart), not only with trusty-updates/main Translation-en but with quite a number of packages (so I was wrong with my thoughts on March 5).
I have switched to http://ch.archive.ubuntu.com for all repositories, now , and haven't seen the problem since then.

Revision history for this message
Allan Deamon (rea-aft) wrote :

Same problem here. I'm using Brazilian mirrors.
I tried to delete apt cache as some indicated, but it didn't worked.

Fetched 31,0 MB in 13s (2.281 kB/s)
W: Failed to fetch http://br.archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-amd64/Packages Hash Sum mismatch

W: Failed to fetch http://br.archive.ubuntu.com/ubuntu/dists/trusty/universe/binary-i386/Packages Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

Revision history for this message
Günter Grodotzki (lifeofguenter) wrote :

This Bug is over six months old - can we get an update on it? I thought LTS = Long Term Support?

Revision history for this message
Stephan Bayer (stephan-v) wrote : Re: [Bug 1373598] Re: apt-get update fails, hash sum mismatches (trusty)
Download full text (4.7 KiB)

I just switched to ubuntu 14.10, not having the issue there. but from my
experience hash sum mismatch may mean the data is changed like when
connecting through a proxy. not that it helps.

I think also it's hard to offer free support for every little thing, so if
you can, upgrade to ubuntu 14.10

*Stephan Bayer*

*Café Prost, Inc. **The Triangle's mobile pretzel bakery *
<email address hidden>
http://cafeprost.com
Follow us on Twitter @cafeprost <https://twitter.com/#%21/cafeprost>
Like us on Facebook
<http://www.facebook.com/pages/Caf%C3%A9-Prost-Inc/311951568856314>

On Tue, Apr 14, 2015 at 3:09 PM, Günter Grodotzki <
<email address hidden>> wrote:

> This Bug is over six months old - can we get an update on it? I thought
> LTS = Long Term Support?
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1373598
>
> Title:
> apt-get update fails, hash sum mismatches (trusty)
>
> Status in apt package in Ubuntu:
> Confirmed
> Status in ubuntu-release-upgrader package in Ubuntu:
> Confirmed
>
> Bug description:
> 1. Release:
> Description: Ubuntu 14.04.1 LTS
> Release: 14.04
>
> 2. not a package. The whole distro is broken.
>
> 3. I always expect apt-get update to work, at least with Ubuntu's own
> repositories.
>
> 4. "apt-get update" failed, and later "apt-get dist upgrade"
>
>
> It started with this when doing a normal "apt-get update"
>
> W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-
> updates/main/source/Sources Hash Sum mismatch
>
> W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-
> updates/main/binary-amd64/Packages Hash Sum mismatch
>
> W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/trusty-
> updates/universe/binary-i386/Packages Hash Sum mismatch
>
> E: Some index files failed to download. They have been ignored, or old
> ones used instead.
>
>
> When doing a dist-upgrade, I then got this:
> E: mkinitramfs failure cpio 141 gzip 1
> update-initramfs: failed for /boot/initrd.img-3.13.0-36-generic with 1.
> run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return
> code 1
> Failed to process /etc/kernel/postinst.d at
> /var/lib/dpkg/info/linux-image-extra-3.13.0-36-generic.postinst line 1025.
> No apport report written because the error message indicates its a
> followup error from a previous failure.
>
> dpkg: error processing package
> linux-image-extra-3.13.0-36-generic (--configure):
> subprocess installed post-installation script returned error exit
> status 2
> dpkg: dependency problems prevent configuration of linux-image-generic:
> linux-image-generic depends on linux-image-extra-3.13.0-36-generic;
> however:
> Package linux-image-extra-3.13.0-36-generic is not configured yet.
>
> dpkg: error processing package linux-image-generic (--configure):
> dependency problems - leaving unconfigured
> Setting up linux-headers-3.13.0-36 (3.13.0-36.63) ...
> Setting up linux-headers-3.13.0-36-generic (3.13.0-36.63) ...
> Examining /etc/kernel/header_postinst.d.
> run-parts: executing /e...

Read more...

Revision history for this message
Gert Dichniksan (gertdichniksan) wrote : Re: apt-get update fails, hash sum mismatches (trusty)

@Stephan Bayer, you're right in one point: your comment doesn't help. From the rest you stated, I beg to differ!

  * For German LTS users a critical part of the infrastructure is broken, and this isn't 'a little thing'.
  * A major part of users don't receive updates, and are thus at risk
  * upgrading to a non-LTS release certainly isn't an acceptable solution

On my personal installation I changed the sources from de to us. This is a work-around for *one* installation, not a solution!

Either the mirror provider should urgently fix this, or the mirror should be removed from the distribution system, or an advisory with instruction for removing the mirror from installations should be issued!

Revision history for this message
Brian Murray (brian-murray) wrote :

Just switching to the de mirror I encountered this error.

Get:62 http://de.archive.ubuntu.com trusty-updates/multiverse Sources [4,775 B]
Fetched 38.0 MB in 32s (1,176 kB/s)
W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/vivid/universe/source/Sources Hash Sum mismatch

W: Failed to fetch http://de.archive.ubuntu.com/ubuntu/dists/vivid/main/binary-i386/Packages Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

summary: - apt-get update fails, hash sum mismatches (trusty)
+ apt-get update fails, hash sum mismatches with de.archive.ubuntu.com
Revision history for this message
Brian Murray (brian-murray) wrote :

Quoting the Canonical IS department - "The de mirror has been temporarily taken out of DNS so requests will be coming to our main archive servers now."

Brian Murray (brian-murray)
Changed in ubuntu-release-upgrader (Ubuntu):
status: Confirmed → Invalid
Revision history for this message
Sasa Paporovic (melchiaros) wrote :

This is a radical solution. As pointed out in comment #20 and some following comments from other users, it seems to be at first the tu-dresden mirror. May be it is enough to decouple this one.

Revision history for this message
Aleš Ferlan (alefer89) wrote :

I just got the same problem in Vivid with english translations:
http://security.ubuntu.com/ubuntu/dists/vivid-security/main/i18n/Translation-en
and
http://security.ubuntu.com/ubuntu/dists/vivid-security/universe/i18n/Translation-en

Revision history for this message
Andre (i-u0untu-4) wrote :

Moments ago i had the same problem with the file de.archive.ubuntu.com_ubuntu_dists_trusty-security_main_i18n_Translation-en but then after two or three "apt-get clean; apt-get update" it works.
Seems like a temporary problem on one of the mirrors(?)

Revision history for this message
Aminda Suomalainen (mikaela) wrote :
Download full text (13.4 KiB)

I have been seeing this a lot lately on DigitalOcean using mirrors.ubuntu.com/mirrrors.txt which gives me the following mirrors:

```
% curl http://mirrors.ubuntu.com/mirrors.txt
http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/
http://mirror.ox.ac.uk/sites/archive.ubuntu.com/ubuntu/
http://ubuntu.mirrors.uk2.net/ubuntu/
http://mirrors.coreix.net/ubuntu/
http://mirror.vorboss.net/ubuntu-archive/
http://www.mirrorservice.org/sites/archive.ubuntu.com/ubuntu/
http://mirror.sov.uk.goscomb.net/ubuntu/
http://ubuntu.positive-internet.com/ubuntu/
http://mirror.bytemark.co.uk/ubuntu/
http://ubuntu.datahop.net/ubuntu/
http://archive.ubuntu.com/ubuntu/
http://mirrors.melbourne.co.uk/ubuntu/
http://ubuntu.retrosnub.co.uk/ubuntu/
http://mirror.as29550.net/archive.ubuntu.com/
http://repo.bigstepcloud.com/ubuntu/
```

and what I get with apt update is:

```
Ign http://ppa.launchpad.net vivid InRelease
Ign http://ppa.launchpad.net vivid InRelease
Ign http://archive.canonical.com vivid InRelease
Ign http://security.ubuntu.com vivid-security InRelease
Hit http://ppa.launchpad.net vivid Release.gpg
Hit http://archive.canonical.com vivid Release.gpg
Hit http://ppa.launchpad.net vivid Release.gpg
Hit http://archive.canonical.com vivid Release
Hit http://ppa.launchpad.net vivid Release
Get:1 http://security.ubuntu.com vivid-security Release.gpg [933 B]
Hit http://ppa.launchpad.net vivid Release
Get:2 http://security.ubuntu.com vivid-security Release [63.5 kB]
Ign http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid InRelease
Hit http://archive.canonical.com vivid/partner Sources
Ign http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-updates InRelease
Ign http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-backports InRelease
Ign http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-security InRelease
Hit http://archive.canonical.com vivid/partner amd64 Packages
Hit http://archive.canonical.com vivid/partner i386 Packages
Get:3 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid Release.gpg [933 B]
Ign http://archive.canonical.com vivid/partner Translation-en
Get:4 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-updates Release.gpg [933 B]
Get:5 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-backports Release.gpg [933 B]
Get:6 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-security Release.gpg [933 B]
Get:7 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid Release [217 kB]
Hit http://ppa.launchpad.net vivid/main Sources
Hit http://ppa.launchpad.net vivid/main amd64 Packages
Hit http://ppa.launchpad.net vivid/main i386 Packages
Hit http://ppa.launchpad.net vivid/main Translation-en
Get:8 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-updates Release [63.5 kB]
Get:9 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-backports Release [59.7 kB]
Get:10 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid-security Release [63.5 kB]
Get:11 http://security.ubuntu.com vivid-security/main Sources [21.1 kB]
Get:12 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ vivid/main Sources [1077 kB]
Get:13 http://security.ubuntu.com vivid-security/restricted Sources [28 B]
Get:14 http://security.ubuntu...

Revision history for this message
Sorin Sbarnea (ssbarnea) wrote :

Get:88 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ trusty-security/multiverse Translation-en [1,580 B]
Get:89 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ trusty-security/restricted Translation-en [2,266 B]
Get:90 http://ftp.ticklers.org/archive.ubuntu.org/ubuntu/ trusty-security/universe Translation-en [56.6 kB]
Fetched 23.3 MB in 16s (1,403 kB/s)
W: Failed to fetch mirror://mirrors.ubuntu.com/mirrors.txt/dists/trusty-updates/main/i18n/Translation-en Hash Sum mismatch

W: Failed to fetch mirror://mirrors.ubuntu.com/mirrors.txt/dists/trusty-updates/universe/i18n/Translation-en Hash Sum mismatch

W: Failed to fetch mirror://mirrors.ubuntu.com/mirrors.txt/dists/trusty-security/main/i18n/Translation-en Hash Sum mismatch

W: Failed to fetch mirror://mirrors.ubuntu.com/mirrors.txt/dists/trusty-security/universe/i18n/Translation-en Hash Sum mismatch

Revision history for this message
jowfdoijdfdwfwdf (dsfkljo322332) wrote :

W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.

This is happening on the us mirror too

Revision history for this message
Paul BROWN (frozenzia) wrote :

I'm getting this running UbuntuMate 14.04 and Finnish mirror:

W: Tiedoston http://fi.archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/i18n/Translation-en nouto ei onnistunut Tarkistussumma ei täsmää

W: Tiedoston http://fi.archive.ubuntu.com/ubuntu/dists/trusty-security/universe/i18n/Translation-en nouto ei onnistunut Tarkistussumma ei täsmää

Revision history for this message
Omadas (bsperger) wrote :

Same for me. Mint updates are fine, it is the ubuntu packages which are givingng me problems. Packages.linuxmint.com is set for my mint packages (rafaela), and is not giving me problems, but archive.ubuntu.com/ubuntu is set for my ubuntu packages (trusty) Here is the error I am getting:

Failed to fetch http://archive.canonical.com/ubuntu/dists/trusty/partner/binary-amd64/Packages Hash Sum mismatch

Failed to fetch http://archive.canonical.com/ubuntu/dists/trusty/partner/binary-i386/Packages Hash Sum mismatch

Some index files failed to download. They have been ignored, or old ones used instead.

Notice the error is for both the 32 and 64bit packages. Somehow the hash sums are not being authenticated or the hash sum is not being generated correctly by the maintainers. Could this not indicate an upgrade to a security issue? Also, why are we not using https?

Revision history for this message
Omadas (bsperger) wrote :

Never mind, clicking on those links produces a 404 error, it seems these packages have been pulled from the PPA, and my system is still looking for it. Any reason why these packages would be pulled from any server during an LTS cycle?

Revision history for this message
Sam Stenvall (negge) wrote :

This used to happen only on the Vagrant boxes we build but now I've seen it in production as well. It's always the same:

W: Failed to fetch http://fi.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-amd64/Packages Hash Sum mismatch
W: Failed to fetch http://fi.archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-amd64/Packages Hash Sum mismatch
W: Failed to fetch http://fi.archive.ubuntu.com/ubuntu/dists/trusty-updates/main/binary-i386/Packages Hash Sum mismatch
W: Failed to fetch http://fi.archive.ubuntu.com/ubuntu/dists/trusty-updates/universe/binary-i386/Packages Hash Sum mismatch

Is there anything that can be done to prevent this except changing mirrors completely? Why is it always (and only) affecting trusty-updates? This is getting absolutely ridiculous and makes Ubuntu unusable for servers.

Revision history for this message
Cride5 (cride5) wrote :

I've been having the same problems while running apt-get update, including 'hash sum mismatch' and 'BADSIG' errors. I tried the following:

1. Downloading updated keys
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys <KEY_NAME>
sudo apt-get update

2. Clean cache then update (some report success with repeated cycles of this)
sudo apt-get clean
sudo apt-get update

3. Clear out the list files completely, or just the partials
sudo rm -f /var/lib/apt/lists/*
sudo rm -f /var/lib/apt/lists/partials/*
sudo apt-get update

4. Clear out the status file as it may be corrupted
sudo rm /var/lib/dpkg/status
sudo touch /var/lib/dpkg/status
sudo apt-get update

5. Disable proxy to ensure direct download from the mirror
sudo apt-get -o Acquire::http::No-Cache=true -o Acquire::BrokenProxy=true -o Acquire::http::Pipeline-Depth=0 update

6. Try changing to another mirror in "Software & Updates"
I tried the following:
* ubuntu.ctu.edu.vn (Vietnam - failed - my original mirror)
* ubuntu.01link.hk (Hong Kong - failed)
* archive.ubuntu.com (Main - failed)
* mirror.switch.ch (Switzerland - failed)
* mirror-fpt-telecom.fpt.net (Vietnam - success - a mirror hosted by my current ISP)

TL;DR Only changing the mirror was able to solve this problem for me.

Revision history for this message
Aminda Suomalainen (mikaela) wrote :

I haven't ran Ubuntu on DigitalOcean for some time, but on home Ubuntu PCs the only mirror that works is `mirror.ubuntu.com`.

I know I am not supposed to use it and it's only meant for mirrors, but I consider using it as less bad than be left without updates entirely and thanks to this issue I have to use it.

tharindu (tharindu007)
Changed in ubuntu-release-upgrader (Ubuntu):
status: Invalid → New
Revision history for this message
Julian Andres Klode (juliank) wrote :

Closing this, as that's been fixed with by-hash repository support in apt.

Changed in apt (Ubuntu):
status: Confirmed → Invalid
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in ubuntu-release-upgrader (Ubuntu):
status: New → Confirmed
Julian Andres Klode (juliank)
Changed in ubuntu-release-upgrader (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.