sublimehq
A new dev version of Sublime Text won't install (package sublime-text-4198-1.x86_64 does not verify: no digest).
Description of the bug
A new dev version of Sublime Text won't install.
# dnf upgrade --refresh
Updating and loading repositories:
Fedora - Rawhide - Developmental packa 100% | 21.8 KiB/s | 20.2 KiB | 00m01s
Fedora rawhide openh264 (From Cisco) - 100% | 1.3 KiB/s | 986.0 B | 00m01s
Brave Browser - Nightly 100% | 5.4 KiB/s | 2.0 KiB | 00m00s
google-chrome-unstable 100% | 4.9 KiB/s | 1.3 KiB | 00m00s
Fedora - Rawhide - Debug 100% | 43.0 KiB/s | 16.6 KiB | 00m00s
local repo 100% | 0.0 B/s | 1.5 KiB | 00m00s
RPM Fusion for Fedora Rawhide - Free 100% | 11.3 KiB/s | 9.4 KiB | 00m01s
RPM Fusion for Fedora Rawhide - Nonfre 100% | 11.4 KiB/s | 9.8 KiB | 00m01s
Scooter Software 100% | 4.4 KiB/s | 3.0 KiB | 00m01s
Sublime Text - x86_64 - Dev 100% | 4.0 KiB/s | 2.9 KiB | 00m01s
vivaldi-snapshot 100% | 9.6 KiB/s | 3.0 KiB | 00m00s
Repositories loaded.
Package Arch Version Repository Size
Upgrading:
sublime-text x86_64 4198-1 sublime-text 51.6 MiB
replacing sublime-text x86_64 4196-1 sublime-text 51.7 MiB
Transaction Summary:
Upgrading: 1 package
Replacing: 1 package
Total size of inbound packages is 20 MiB. Need to download 0 B.
After this operation, 32 KiB will be freed (install 52 MiB, remove 52 MiB).
Is this ok [y/N]: y
[1/1] sublime-text-0:4198-1.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
--------------------------------------------------------------------------------
[1/1] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
Transaction failed: Rpm transaction failed.
- package sublime-text-4198-1.x86_64 does not verify: no digest
Distribution: Fedora Rawhide
Steps to reproduce
- dnf upgrade --refresh
Expected behavior
Package sublime-text-4198-1.x86_64 installed successfully.
Actual behavior
Running transaction Transaction failed: Rpm transaction failed. package sublime-text-4198-1.x86_64 does not verify: no digest
Sublime Text build number
4198
Operating system & version
Fedora Rawhide
(Linux) Desktop environment and/or window manager
No response
Additional information
No response
OpenGL context information
Now this issue affects Sublime Merge as well.
# dnf upgrade --refresh --exclude="sublime-text"
Updating and loading repositories:
Fedora rawhide openh264 (From Cisco) - 100% | 1.1 KiB/s | 986.0 B | 00m01s
Fedora - Rawhide - Developmental packa 100% | 24.0 KiB/s | 20.1 KiB | 00m01s
Brave Browser - Nightly 100% | 358.0 B/s | 2.0 KiB | 00m06s
RPM Fusion for Fedora Rawhide - Free 100% | 1.7 KiB/s | 9.4 KiB | 00m06s
local repo 100% | 0.0 B/s | 1.5 KiB | 00m00s
RPM Fusion for Fedora Rawhide - Nonfre 100% | 24.7 KiB/s | 9.7 KiB | 00m00s
google-chrome-unstable 100% | 3.8 KiB/s | 1.3 KiB | 00m00s
Fedora - Rawhide - Debug 100% | 50.2 KiB/s | 16.5 KiB | 00m00s
Scooter Software 100% | 2.8 KiB/s | 3.0 KiB | 00m01s
Sublime Text - x86_64 - Dev 100% | 512.0 B/s | 2.9 KiB | 00m06s
vivaldi-snapshot 100% | 566.0 B/s | 3.0 KiB | 00m05s
Repositories loaded.
Package Arch Version Repository Size
Upgrading:
sublime-merge x86_64 2106-1 sublime-text 25.4 MiB
replacing sublime-merge x86_64 2105-1 sublime-text 25.9 MiB
Transaction Summary:
Upgrading: 1 package
Replacing: 1 package
Total size of inbound packages is 7 MiB. Need to download 0 B.
After this operation, 460 KiB will be freed (install 25 MiB, remove 26 MiB).
Is this ok [y/N]: y
[1/1] sublime-merge-0:2106-1.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
--------------------------------------------------------------------------------
[1/1] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
Transaction failed: Rpm transaction failed.
- package sublime-merge-2106-1.x86_64 does not verify: no digest
root@secondary-ws ~# rpm -Uvh /home/mikhail/Downloads/sublime-text-4200-1.x86_64.rpm
Verifying... ################################# [100%]
Preparing... ################################# [100%]
package sublime-text-4200-1.x86_64 does not verify: no digest
root@secondary-ws ~ [1]# rpm -Uvh /home/mikhail/Downloads/sublime-text-4200-1.x86_64.rpm --nodigest
Preparing... ################################# [100%]
Updating / installing...
1:sublime-text-4200-1 ################################# [ 50%]
Cleaning up / removing...
2:sublime-text-4196-1 ################################# [100%]
root@secondary-ws ~# rpm -Uvh /home/mikhail/Downloads/sublime-merge-2108-1.x86_64.rpm
Verifying... ################################# [100%]
Preparing... ################################# [100%]
package sublime-merge-2108-1.x86_64 does not verify: no digest
root@secondary-ws ~ [2]# rpm -Uvh /home/mikhail/Downloads/sublime-merge-2108-1.x86_64.rpm --nodigest
Preparing... ################################# [100%]
Updating / installing...
1:sublime-merge-2108-1 ################################# [ 50%]
Cleaning up / removing...
2:sublime-merge-2105-1 ################################# [100%]
root@secondary-ws ~# dnf upgrade
Updating and loading repositories:
Repositories loaded.
Package Arch Version Repository Size
Upgrading:
sublime-merge x86_64 2109-1 sublime-text 25.6 MiB
replacing sublime-merge x86_64 2108-1 <unknown> 25.4 MiB
Transaction Summary:
Upgrading: 1 package
Replacing: 1 package
Total size of inbound packages is 7 MiB. Need to download 7 MiB.
After this operation, 149 KiB extra will be used (install 26 MiB, remove 25 MiB).
Is this ok [y/N]: y
[1/1] sublime-merge-0:2109-1.x86_64 100% | 2.2 MiB/s | 6.8 MiB | 00m03s
------------------------------------------------------------------------------------------------------------------
[1/1] Total 100% | 2.1 MiB/s | 6.8 MiB | 00m03s
Running transaction
Transaction failed: Rpm transaction failed.
- package sublime-merge-2109-1.x86_64 does not verify: no digest
root@secondary-ws ~ [1]# curl https://download.sublimetext.com/sublime-merge-2109-1.x86_64.rpm -O
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 7008k 100 7008k 0 0 1631k 0 0:00:04 0:00:04 --:--:-- 1700k
root@secondary-ws ~# rpm -Uvh ./sublime-merge-2109-1.x86_64.rpm
Verifying... ################################# [100%]
Preparing... ################################# [100%]
package sublime-merge-2109-1.x86_64 does not verify: no digest
root@secondary-ws ~ [2]# rpm -Uvh ./sublime-merge-2109-1.x86_64.rpm --nodigest
Preparing... ################################# [100%]
Updating / installing...
1:sublime-merge-2109-1 ################################# [ 50%]
Cleaning up / removing...
2:sublime-merge-2108-1 ################################# [100%]
root@secondary-ws ~#
sjm@fedora:~$ cat /etc/os-release
NAME="Fedora Linux"
VERSION="43 (Workstation Edition)"
RELEASE_TYPE=stable
ID=fedora
VERSION_ID=43
VERSION_CODENAME=""
PRETTY_NAME="Fedora Linux 43 (Workstation Edition)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:43"
DEFAULT_HOSTNAME="fedora"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f43/"
SUPPORT_URL="https://ask.fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=43
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=43
SUPPORT_END=2026-12-02
VARIANT="Workstation Edition"
VARIANT_ID=workstation
sjm@fedora:~$ sudo dnf install sublime-merge
Updating and loading repositories:
Repositories loaded.
Package Arch Version Repository Size
Installing:
sublime-merge x86_64 2112-1 sublime-text 25.6 MiB
Transaction Summary:
Installing: 1 package
Total size of inbound packages is 7 MiB. Need to download 0 B.
After this operation, 26 MiB extra will be used (install 26 MiB, remove 0 B).
Is this ok [y/N]: y
[1/1] sublime-merge-0:2112-1.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
----------------------------------------------------------------------------------------------------
[1/1] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
Transaction failed: Rpm transaction failed.
- package sublime-merge-2112-1.x86_64 does not verify: no digest
We've just released a new key and signed our linux repositories with it (and the old keys). There's still more work to do on this, as existing customers won't automatically receive the new key.
In the mean time you can simply installed the GPG key by running the command from our documentation: https://www.sublimetext.com/docs/linux_repositories.html
In the mean time you can simply installed the GPG key by running the command from our documentation: https://www.sublimetext.com/docs/linux_repositories.html
root@primary-ws ~# rpm -v --import https://download.sublimetext.com/sublimehq-rpm-pub.gpg
root@primary-ws ~# dnf upgrade --refresh
Updating and loading repositories:
Sublime Text - x86_64 - Dev 100% | 4.7 KiB/s | 2.9 KiB | 00m01s
RPM Fusion for Fedora Rawhide - Free 100% | 2.9 KiB/s | 9.4 KiB | 00m03s
local repo 100% | 2.4 KiB/s | 1.5 KiB | 00m01s
google-chrome-unstable 100% | 2.1 KiB/s | 1.3 KiB | 00m01s
RPM Fusion for Fedora Rawhide - Nonfree 100% | 3.9 KiB/s | 9.8 KiB | 00m03s
Fedora rawhide openh264 (From Cisco) - x86_64 100% | 531.0 B/s | 986.0 B | 00m02s
Fedora - Rawhide - Developmental packages for the next Fedora 100% | 7.8 KiB/s | 9.6 KiB | 00m01s
Repositories loaded.
Package Arch Version Repository Size
Upgrading:
sublime-merge x86_64 0:2116-1 sublime-text 26.4 MiB
replacing sublime-merge x86_64 0:2111-1 <unknown> 25.6 MiB
Transaction Summary:
Upgrading: 1 package
Replacing: 1 package
Total size of inbound packages is 7 MiB. Need to download 0 B.
After this operation, 863 KiB extra will be used (install 26 MiB, remove 26 MiB).
Is this ok [y/N]: y
[1/1] sublime-merge-0:2116-1.x86_64 100% | 0.0 B/s | 0.0 B | 00m00s
>>> Already downloaded
-------------------------------------------------------------------------------------------------------
[1/1] Total 100% | 0.0 B/s | 0.0 B | 00m00s
Running transaction
Transaction failed: Rpm transaction failed.
- package sublime-merge-2116-1.x86_64 does not verify: no digest
root@primary-ws ~ [1]#
Noticed that in documentation for dnf GPG key is at url https://download.sublimetext.com/sublimehq-rpm-pub.gpg but inside the repository GPG key url is different:
$ curl https://download.sublimetext.com/rpm/stable/x86_64/sublime-text.repo
[sublime-text]
name=Sublime Text - x86_64 - Stable
baseurl=https://download.sublimetext.com/rpm/stable/x86_64
enabled=1
gpgcheck=1
gpgkey=https://download.sublimetext.com/sublimehq-pub.gpg
$ sha1sum sublimehq-rpm-pub.gpg
b9a094a6fcf2545c1b4bb6a289319697e1cc32ae sublimehq-rpm-pub.gpg
$ sha1sum sublimehq-pub.gpg
b9a094a6fcf2545c1b4bb6a289319697e1cc32ae sublimehq-pub.gpg
but both files are same, so it is not because of it.
Got this problem on a fresh installation of Fedora 43, I resolved it, for the moment, going to the dnf cache directory and installing the package skipping the gpg check.
cd /var/cache/libdnf5/sublime-text-xxxx
sudo rpm -ivh --nodigest --nofiledigest sublime-text-4200-1.x86_64.rpm
Not ideal, and I understand that this check is there for something, but I really need it Sublime Text.
Sorry about this still being broken. The version of RPM we're using cannot create non-sha1 digests and so we're in the process of upgrading our infrastructure to use a newer version.
Just installed fresh minutes ago. Same same. Fedora 43 Plasma.
Should temporary post a info on the install page to not let the ppl. waste time until finally finding here.
Yeah it took me a bit to find this
But yeah, skipping the digest check is probably the best option for now.
Its not the most secure thing in the world, but I mean...
the way i did it was by setting echo "%_pkgverify_level none" > /etc/rpm/macros.verify, installing with dnf, then removing the /etc/rpm/macros.verify file when i was done.
It's been over a month now and Sublime Merge still won't install because you haven't fixed this issue.
Is there a proposed timeline on this being fixed? I am also a Fedora user and plan to upgrade to 43 shortly but might hold off until this is fixed.
I assume that if ST is installed under Fedora 42 and then I upgrade to Fedora 43 the existing install will work but any updates will fail to install because of the verification issue?
Under Fedora 43, will updates work if I install manually without package verification, or will it need to be reinstalled the normal way once this is fixed?
I'm working on it. I want to get it fixed before the new year, but it could be sooner or later depending on how much time I can make during my holidays and how much effort this ends up being.