search

pulp / pulp_deb

Debian repository plugin for Pulp (pulpproject.org)
GNU General Public License v2.0
61 stars 78 forks source link

how can I skip package with bad checksum?(in Release file and in file checksum are not equal on remote_repo) #1140

Open angryerr opened 3 weeks ago

angryerr commented 3 weeks ago

Hello Problem : on remote repository package with bad checksum (not equal in Release file)

url="http://packages.linbit.com/public/" distributions="proxmox-8" architectures="amd64" components="drbd-9"

When I run pulp deb repository sync --name *** --remote *** I recieve 'A file located at the url http://packages.linbit.com/public/dists/proxmox-8/drbd-9/pool/ktls-utils-dbgsym_0.10-2_amd64.deb failed validation due to checksum. Expected '10f931da9a6166ce09e2a6b0b56fd4710cc2a08f4747382099adbe75f32d9e7077a69d20cdb03f8990cc62f4b7d127b378e339d1455c042a7ed0f464c68d84a4', Actual 'fbf78d9e973d7d77a474d4b514ff56c8f62807179dd0389e8801638558452954fe8fa37d3e2a625b6401bbd5c83deaea3b484f542f3e4f65536ebac7fe937533''

How can I skip this package? It's really wrong checksum sha512sum in remote repo http://packages.linbit.com/public/ in one package only

angryerr commented 3 weeks ago

with repo for proxmox-7 all right

url="http://packages.linbit.com/public/"
distributions="proxmox-7"
architectures="amd64"
components="drbd-9"

there is no such bad package. to use ALLOWED_CONTENT_CHECKSUMS is bad idea , I want anly skip this package (may by I can do this in database?)

quba42 commented 2 weeks ago

By design there is currently no way. This is a case of the repo not passing validation. The expectation is to open a ticket with the person maintaining the repo and hopefully they will fix their repo soon.

If we wanted to provide an option to skip such packages, that would be a feature request. I will ask around other plugins what they do.

quba42 commented 2 weeks ago

I asked the pulp_rpm folks, and they assured me that the pulp_rpm behavior is the same as for pulp_deb in such cases.

They do have a feature request to skip individual packages: https://github.com/pulp/pulp_rpm/issues/3469

If and when this feature request is implemented for pulp_rpm, I would revisit implementing an analogous feature for pulp_deb as well.