Checksum for packages-microsoft-prod.deb

[Toerktumlare]

When installing core on for example a debian 10 machine instructions tell us to download packages-microsoft-prod.deb and run to install gpg key and apt-repository.

I have not been able to locate any published checksum for this debian package. I would like to be able to verify my downloads, so is there any possibility to be able to publish these checksums somewhere?

[mairaw]

@leecow @dagood can you help with this?

[dagood]

@NikolaMilosavljevic @MichaelSimons @dleeapho

I think this would be a reasonable thing to ask the packages.microsoft.com team to do. .NET can't really maintain checksums for these setup packages, because the packages.microsoft.com team may release a new version at any time. (Unfortunately, packages.microsoft.com has no public point of contact, so we have to relay requests like this.)

[Toerktumlare]

im terribly sorry it ended up here, but as you said, there is no point of contact for the team that maintains the packages.microsoft.com so this was my best bet.

I would be very thankful if you could relay this request to perhaps their product owner if possible.

[dagood]

Oh, yep, I meant to direct the first part of my comment at the people I pinged (that I think they should ask packages.microsoft.com to help), but I wasn't very clear about it, sorry. This repo is the right place for this kind of request (IMO). Thanks for raising it.

[NikolaMilosavljevic]

I've reached out to the owners of packages.microsoft.com. I will update this issue when I get more info.

[Moosemorals]

@NikolaMilosavljevic I guess you haven't got any more info yet?

[reachsrirams]

If you go to https://packages.microsoft.com/config/ubuntu/22.04/ (inside which the packages-microsoft-prod.deb file resides), you will see a FILE_MANIFEST. You might need to pick your preferred Ubuntu version. The FILE_MANIFEST contains the SHA256 checksum