View Issue Details

IDProjectCategoryView StatusLast Update
0018067CentOS-8generalpublic2021-02-14 09:32
Reportercreslinux Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Product Version8.3.2011 
Summary0018067: No checksum for 8.3 x86_64 cloud images on cloud.centos.org, cannot verify image is safe/good.
DescriptionThere is no means to verify downloads from cloud.centos.org version 8 are good for versions 8.3 and 8.1

The checksum file that is included in the download location only provides checksums for version 8.2.
https://cloud.centos.org/centos/8/x86_64/images/

This breaks our trust the image is good, and thereafter our build process as we reject the image as acceptable for use.
Steps To ReproduceNavigate to:
https://cloud.centos.org/centos/8/x86_64/images/
Note there are downloads for images that are version 8.1, 8.2, and 8.3

Open checksum file:
https://cloud.centos.org/centos/8/x86_64/images/CHECKSUM
Note there are no checksums for images that are version 8.1 or 8.3
Tags8.1, 8.3, checksum, checksums, cloud, cloud.centos.org, kvm, verification

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2021-02-14 09:32 creslinux New Issue
2021-02-14 09:32 creslinux Tag Attached: 8.1
2021-02-14 09:32 creslinux Tag Attached: 8.3
2021-02-14 09:32 creslinux Tag Attached: checksum
2021-02-14 09:32 creslinux Tag Attached: checksums
2021-02-14 09:32 creslinux Tag Attached: cloud
2021-02-14 09:32 creslinux Tag Attached: cloud.centos.org
2021-02-14 09:32 creslinux Tag Attached: kvm
2021-02-14 09:32 creslinux Tag Attached: verification