SHA256SUMS mismatch with ubuntu-17.10-server-amd64.iso

[Hagen Kuehn]

Current Time is 12:10 BST

When I download the "ubuntu-17.10-server-amd64.iso" from

http://uk.releases.ubuntu.com//17.10/ubuntu-17.10-server-amd64.iso

the sha256sum published at http://uk.releases.ubuntu.com//17.10/SHA256SUMS does not match the sha256sum of the ISO downloaded.

----------
$ sha256sum ubuntu-17.10-server-amd64.iso
04021044a7726a1de0fed6ac539864a1f311266bd49156e11a7bbee13e53ee0d ubuntu-17.10-server-amd64.iso
----------

----------
http://uk.releases.ubuntu.com//17.10/SHA256SUMS
----------
aaf4ba1809e08f6108f1e410174ebcbd49af5cc4f6493ab3d98d0683289bbc6e *ubuntu-17.10-desktop-amd64.iso
af913c00296eb0cfece99b8a02ae6db035ae173ed240241e780c8d7db96914b1 *ubuntu-17.10-server-amd64.img
af913c00296eb0cfece99b8a02ae6db035ae173ed240241e780c8d7db96914b1 *ubuntu-17.10-server-amd64.iso
d8fc9cea7eadeec39253fe62c215111314c582ef9ec10b6a70959265bac73cc4 *ubuntu-17.10-server-i386.img
d8fc9cea7eadeec39253fe62c215111314c582ef9ec10b6a70959265bac73cc4 *ubuntu-17.10-server-i386.iso
----------

The odd thing is, no one else seems to report this problem, although I believe quite a few people would have tried Ubuntu 17.10 Server by now. I suppose it's unlikely that someone is feeding me with a hacked version of this ISO.

Do you have the same problem somewhere else too?

[Hagen Kuehn (hag-k)]

Could it be that the mirror is not up to date? It shows that the ISO was updated on 17/10/2017 whereas I do find it likely that it should be at least 19/10/2017?

ubuntu-17.10-server-amd64.iso 2017-10-17 20:46 745M Server install image for 64-bit PC (AMD64) computers (standard download)

Please see attached screenshot for details.

[Ubuntu Foundations Team Bug Bot (crichton)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/1727288/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

[Hagen Kuehn (hag-k)]

@bot As it currently stand I don't suspect a bug in a particular package. All it seams to me that some or all web servers that provide the Ubuntu 17.10 "ubuntu-17.10-server-amd64.iso", are not up to date and therefore the sha256sums results do not match the ones provided with http://uk.releases.ubuntu.com//17.10/SHA256SUMS

Steps to reproduce

1. Download http://uk.releases.ubuntu.com/17.10/ubuntu-17.10-server-amd64.iso
2. Get SHA256 sum
$ sha256sum ubuntu-17.10-server-amd64.iso
3. Compare with checksums provided with
http://uk.releases.ubuntu.com/17.10/SHA256SUMS

[Brian Murray (brian-murray)]

I've followed your test case and the SHA256 is a match for me.

[Hagen Kuehn (hag-k)]

@Brian Murray - Thanks for checking.

Given that no one else seems to have this problem, I can only guess that my ISP's proxy sends me an old cached version or someone indeed does the unbelievable.

I will investigate and report back.

[Hagen Kuehn (hag-k)]

The download from http://releases.ubuntu.com/17.10/ubuntu-17.10-server-amd64.iso works (i.e the sha256 checksum is correct). However I continue to get a different checksum every time I download it from http://uk.releases.ubuntu.com/17.10/ubuntu-17.10-server-amd64.iso.

@ Brian Murray - As it's working for you and no one else appears to have this problem, I am closing this bug now.