[ISSUE] XFCE live signing glibc fails

[ISSUE] XFCE live signing glibc fails

[Stig124]

[-- Attachment #1: Type: text/plain, Size: 1829 bytes --]

New issue by Stig124 on void-packages repository

https://github.com/void-linux/void-packages/issues/31318

Description:
GLIBC XFCE live fails to sign randomly, you can see the whole method in this asciinema (will add a successful signing recording when one successfully verify)
[![asciicast](https://asciinema.org/a/418512.svg)](https://asciinema.org/a/418512)

NOTE : Failed a comment in the recording, the right command is listed in the script : 

```bash
#!/bin/bash

echo "Command Used : curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/void-live-x86_64-20210218-xfce.iso"
curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/void-live-x86_64-20210218-xfce.iso

echo "Command Used : curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.sig"
curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.sig

echo "Command Used : curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.txt"
curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.txt

echo "Command Used : curl -L -O --verbose https://raw.githubusercontent.com/void-linux/void-packages/master/srcpkgs/void-release-keys/files/void-release-20210218.pub"

curl -L -O --verbose https://raw.githubusercontent.com/void-linux/void-packages/master/srcpkgs/void-release-keys/files/void-release-20210218.pub

echo "Command Used : sha256sum -c --ignore-missing sha256sum.txt"

sha256sum -c --ignore-missing sha256sum.txt

echo "Command Used : signify -C -p /etc/signify/void-release-20191109.pub -x sha256sum.sig void-GCP-musl-PLATFORMFS-20191109.tar.xz"

signify -C -p void-release-20210218.pub -x sha256sum.sig void-live-x86_64-20210218-xfce.iso

echo "Command Used : rpm -q signify"

rpm -q signify
```

Re: XFCE glibc live signing fails

[Duncaen]

[-- Attachment #1: Type: text/plain, Size: 358 bytes --]

New comment by Duncaen on void-packages repository

https://github.com/void-linux/void-packages/issues/31318#issuecomment-855302124

Comment:
Looks like the checksum simply does not match on your end, so signature verification of course fails too.
Could be anything on your end, something corrupting the download or it being corrupted when writing to disk.

Re: XFCE glibc live signing fails

[Duncaen]

[-- Attachment #1: Type: text/plain, Size: 359 bytes --]

New comment by Duncaen on void-packages repository

https://github.com/void-linux/void-packages/issues/31318#issuecomment-855302124

Comment:
Looks like the checksum simply does not match on your end, so signature verification of course fails too.
Could be anything on your end, something corrupting the download or it being corrupted while writing to disk.

Re: XFCE glibc live signing fails

[Stig124]

[-- Attachment #1: Type: text/plain, Size: 176 bytes --]

New comment by Stig124 on void-packages repository

https://github.com/void-linux/void-packages/issues/31318#issuecomment-855454704

Comment:
You're right, fscheck did wonders

Re: [ISSUE] [CLOSED] XFCE glibc live signing fails

[Stig124]

[-- Attachment #1: Type: text/plain, Size: 1832 bytes --]

Closed issue by Stig124 on void-packages repository

https://github.com/void-linux/void-packages/issues/31318

Description:
GLIBC XFCE live fails to sign randomly, you can see the whole method in this asciinema (will add a successful signing recording when one successfully verify)
[![asciicast](https://asciinema.org/a/418512.svg)](https://asciinema.org/a/418512)

NOTE : Failed a comment in the recording, the right command is listed in the script : 

```bash
#!/bin/bash

echo "Command Used : curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/void-live-x86_64-20210218-xfce.iso"
curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/void-live-x86_64-20210218-xfce.iso

echo "Command Used : curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.sig"
curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.sig

echo "Command Used : curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.txt"
curl -L -O --verbose https://alpha.de.repo.voidlinux.org/live/current/sha256sum.txt

echo "Command Used : curl -L -O --verbose https://raw.githubusercontent.com/void-linux/void-packages/master/srcpkgs/void-release-keys/files/void-release-20210218.pub"

curl -L -O --verbose https://raw.githubusercontent.com/void-linux/void-packages/master/srcpkgs/void-release-keys/files/void-release-20210218.pub

echo "Command Used : sha256sum -c --ignore-missing sha256sum.txt"

sha256sum -c --ignore-missing sha256sum.txt

echo "Command Used : signify -C -p /etc/signify/void-release-20191109.pub -x sha256sum.sig void-GCP-musl-PLATFORMFS-20191109.tar.xz"

signify -C -p void-release-20210218.pub -x sha256sum.sig void-live-x86_64-20210218-xfce.iso

echo "Command Used : rpm -q signify"

rpm -q signify
```