Broken Debian repository / incomplete Release gpg signatures

[PenelopeFudd]

Alas, this problem docker/for-linux#905 is still with us:

# curl -sS https://download.docker.com/linux/ubuntu/dists/jammy/InRelease | grep -m 1 ' Release'
(Start: 2024-11-13 20:56:09 PST)
 21aa519ad508ce13ee1854f1131c7f1d            10225 Release

# curl -sS https://download.docker.com/linux/ubuntu/dists/jammy/Release | md5sum
(Start: 2024-11-13 20:56:48 PST)
36b2412b16d1a692f863953c9dbc69e4  -

# curl -sS https://download.docker.com/linux/ubuntu/dists/jammy/Release | wc -c
(Start: 2024-11-13 20:58:24 PST)
47996

The file's checksum and size don't match the listed checksum and size (21aa519ad508ce13ee1854f1131c7f1d != 36b2412b16d1a692f863953c9dbc69e4, 10225 != 47996)

[PenelopeFudd]

Here's a shell script for proofreading Deb repositories with curl and md5sum: checkrepo.txt

[vvoland]

Thanks for the report. The Release file should not include its own hash - this will be fixed with a new release.