Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issues with SHA256SUMS.asc for the v0.19.1 release #393

Open
czka opened this issue Nov 8, 2021 · 4 comments
Open

Issues with SHA256SUMS.asc for the v0.19.1 release #393

czka opened this issue Nov 8, 2021 · 4 comments

Comments

@czka
Copy link

czka commented Nov 8, 2021

  1. https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/SHA256SUMS.asc doesn't contain a hash for https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-x86_64-linux-gnu.tar.gz

  2. https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-x86_64-linux-gnu.tar.gz and https://github.com/FeatherCoin/Feathercoin/releases/download/v0.19.1/feathercoin-0.19.1-linux64.tar.gz differ. Which one is actually the x86_64 Linux binary and why publish both?

  3. Hashes for the source archives in that SHA256SUMS.asc would come in handy, too.

@wellenreiter01
Copy link
Collaborator

wellenreiter01 commented Nov 10, 2021 via email

@czka
Copy link
Author

czka commented Nov 10, 2021

The external .asc files contain the checksum for the windows binaries.

Actually, the SHA256SUMS.asc has checksums for Windows binaries as well as the Mac binary and for 2 of the 3 Linux binaries available for download on https://github.com/FeatherCoin/Feathercoin/releases/tag/v0.19.1:

5c3f9185eb26de6c312d7cce0a77d1578a5f4c6885f886149b4b17f18ca72fed  feathercoin-0.19.1-linux32.tar.gz
dbecb66791e9406822cdfa994b8b1283b3b329980ccf688a3f95fd2967289c9f  feathercoin-0.19.1-linux64.tar.gz
697a904c8df8dd1cef03a93874b575485c4bbc64f40911417193ac94708e7ec1  feathercoin-0.19.1-mac.dmg
abe20d2888915329313296e13deb2e2b8403bfe0083a33a9b89e1f98dd7b7fd4  feathercoin-0.19.1-win32-setup.exe
23b80ed7f17821b8a4340ddc8154e86774d5dfd77975305b4bcc91b01318969c  feathercoin-0.19.1-win64-setup.exe

The binary containing the '-x86_64' is the 64bit binary, while the other file is the 32bit binary.

Again: there are 2 binaries which seem to be for x86_64 Linux: feathercoin-0.19.1-linux64.tar.gz - which has a checksum in SHA256SUMS.asc, and feathercoin-0.19.1-x86_64-linux-gnu.tar.gz - which is missing a checksum in SHA256SUMS.asc.

The linux binaries are signed internally, so no external asc file is needed.

In that case why are checksums for feathercoin-0.19.1-linux32.tar.gz and feathercoin-0.19.1-linux64.tar.gz provided at all?

My concerns are:

  • The missing checksum for feathercoin-0.19.1-x86_64-linux-gnu.tar.gz.
  • A confusing availability of 2 binaries for x86_64 Linux. Which one do you mean the users should install, and why are there 2 of them rather than just 1?

@Bushstar
Copy link
Collaborator

I can dispel the mystery, the feathercoin-0.19.1-x86_64-linux-gnu.tar.gz file was added after the release was created and has a different folder structure to the other Linux64 release. If I remember correctly it was created for use in BitPay which has scripts that link directly to it.

@czka
Copy link
Author

czka commented Nov 10, 2021

Got you. Could you dispel the downloads page for v0.19.1 and provide a SHA256 hash for feathercoin-0.19.1-x86_64-linux-gnu.tar.gz as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants
@czka @wellenreiter01 @Bushstar and others