Feathercoin icon indicating copy to clipboard operation
Feathercoin copied to clipboard
verified publisher icon FeatherCoin

Issues with SHA256SUMS.asc for the v0.19.1 release

Open czka opened this issue 4 years ago • 4 comments

  1. https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/SHA256SUMS.asc doesn't contain a hash for https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-x86_64-linux-gnu.tar.gz

  2. https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-x86_64-linux-gnu.tar.gz and https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-linux64.tar.gz differ. Which one is actually the x86_64 Linux binary and why publish both?

  3. Hashes for the source archives in that SHA256SUMS.asc would come in handy, too.

czka avatar Nov 08 '21 13:11 czka

On Mon, 2021-11-08 at 05:19 -0800, Maciej Sieczka wrote:

https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/SHA256SUMS.asc doesn't contain a hash for https://github.com/FeatherCoin/Feathercoi n/releases/download/v0.19.1/feathercoin-0.19.1-x86_64-linux- gnu.tar.gz

https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-x86_64-linux-gnu.tar.gz and https://github.com/FeatherCoin/Feathercoin/releases/download/v0. 19.1/feathercoin-0.19.1-linux64.tar.gz differ. Which one is actually the x86_64 Linux binary and why publish both?

Hashes for the source archives in that SHA256SUMS.asc would come in handy, too.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

The external .asc files contain the checksum for the windows binaries. The linux binaries are signed internally, so no external asc file is needed.The binary containing the '-x86_64' is the 64bit binary, while the other file is the 32bit binary. If you are using a linux distribution you also may check https://forum.feathercoin.com/topic/8327/guide-feathercoin-wallet-ppa-and-binaries-on-raspian-ubuntu-and-debian-linux/18 regards Wellenreiter

[ { @.": "http://schema.org", @.": "EmailMessage", "potentialAction": { @.": "ViewAction", "target": "https://github.com/FeatherCoin/Feathercoin/issues/393", "url": "https://github.com/FeatherCoin/Feathercoin/issues/393", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { @.": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

wellenreiter01 avatar Nov 10 '21 08:11 wellenreiter01

The external .asc files contain the checksum for the windows binaries.

Actually, the SHA256SUMS.asc has checksums for Windows binaries as well as the Mac binary and for 2 of the 3 Linux binaries available for download on https://github.com/FeatherCoin/Feathercoin/releases/tag/v0.19.1:

5c3f9185eb26de6c312d7cce0a77d1578a5f4c6885f886149b4b17f18ca72fed  feathercoin-0.19.1-linux32.tar.gz
dbecb66791e9406822cdfa994b8b1283b3b329980ccf688a3f95fd2967289c9f  feathercoin-0.19.1-linux64.tar.gz
697a904c8df8dd1cef03a93874b575485c4bbc64f40911417193ac94708e7ec1  feathercoin-0.19.1-mac.dmg
abe20d2888915329313296e13deb2e2b8403bfe0083a33a9b89e1f98dd7b7fd4  feathercoin-0.19.1-win32-setup.exe
23b80ed7f17821b8a4340ddc8154e86774d5dfd77975305b4bcc91b01318969c  feathercoin-0.19.1-win64-setup.exe

The binary containing the '-x86_64' is the 64bit binary, while the other file is the 32bit binary.

Again: there are 2 binaries which seem to be for x86_64 Linux: feathercoin-0.19.1-linux64.tar.gz - which has a checksum in SHA256SUMS.asc, and feathercoin-0.19.1-x86_64-linux-gnu.tar.gz - which is missing a checksum in SHA256SUMS.asc.

The linux binaries are signed internally, so no external asc file is needed.

In that case why are checksums for feathercoin-0.19.1-linux32.tar.gz and feathercoin-0.19.1-linux64.tar.gz provided at all?

My concerns are:

  • The missing checksum for feathercoin-0.19.1-x86_64-linux-gnu.tar.gz.
  • A confusing availability of 2 binaries for x86_64 Linux. Which one do you mean the users should install, and why are there 2 of them rather than just 1?

czka avatar Nov 10 '21 09:11 czka

I can dispel the mystery, the feathercoin-0.19.1-x86_64-linux-gnu.tar.gz file was added after the release was created and has a different folder structure to the other Linux64 release. If I remember correctly it was created for use in BitPay which has scripts that link directly to it.

Bushstar avatar Nov 10 '21 09:11 Bushstar

Got you. Could you dispel the downloads page for v0.19.1 and provide a SHA256 hash for feathercoin-0.19.1-x86_64-linux-gnu.tar.gz as well?

czka avatar Nov 10 '21 09:11 czka