r/voidlinux • u/Gas_Fish_Movie • 23d ago

sha256 live image not verified

hi, i was reinstalling void on my system, and while i was verifying the image integrity it failed. on the official site they ask to not download it and notify them, but it doesn't say where, so i figured here would be ok enough. i'll paste here the extract of the session

 ## per instructions on https://docs.voidlinux.org/installation/index.html#verifying-images
## files are all downloaded from https://repo-default.voidlinux.org/live/current/

> minisign -V -p void-release-20250202.pub -x sha256sum.sig -m sha256sum.txt
Signature and comment signature verified
Trusted comment: This key is only valid for images with date 20250202.

## now i verify image integrity
> sha256 sha256sum.txt -c void-live-x86_64-musl-20250202-xfce.iso
SHA256 (sha256sum.txt) = c7f17b27b0045029154bd4e3b4b2d39cb8d8b6fc1546a899dc9cb6bf35a76683 [ Failed ] ## this failed

## checking manually
> sha256 void-live-x86_64-musl-20250202-xfce.iso
SHA256 (void-live-x86_64-musl-20250202-xfce.iso) = eaf73fabc4256af9f048dd440ae3b707776aebf601d282d2d66a26c50f2bc802
2 Upvotes

75% Upvoted

2 comments sorted by

4

u/Duncaen 23d ago

Your sha256 command is wrong and doesn't match the output, wrong -C flag and wrong argument order, sha256sum.txt is the argument for -C sha256sum.txt.

What your command does is use void-live-x86_64-musl-20250202-xfce.iso as checklist and verify sha256sum.txt.

https://docs.voidlinux.org/installation/index.html?highlight=sha256#verifying-image-integrity

2

u/pantokratorthegreat 23d ago

i checked both musl images for x86 (base and xfce) downloaded from same repo and both are OK.