[CentOS] Broken repo / mirrors?

[Robert Nichols]

On 05/28/2010 11:37 AM, R P Herrold wrote:
> On Fri, 28 May 2010, Robert Heller wrote:
>> At Fri, 28 May 2010 16:35:44 +0200 CentOS mailing list<centos at centos.org>  wrote:
>>> On Friday 28 May 2010, Robert Heller wrote:
>
>> It seems like there is a major snafu somewhere -- it is not just a
>> random mirror here or there not being up-to-date, but more of a
>> wholesale problem -- are we *sure* the metadata on the root server is
>> not broken somehow?
>
> The distribution repodata usually lags the files the way most
> mirrors choose to retrieve it (quite properly as that is the
> most 'automatable' approach); the cascade nature of the
> mirroring network and the lack of direct control of WHEN a
> mirror (or more likely, intermediate distribution mirror)
> BECAUSE CENTOS RELIES ON DONATED RESOURCES causes periodic
> skew as the system comes back in to coherency.  This is one of
> those times

This doesn't appear to be a lag problem.  For each of the broken packages,
the mirror does have a file with the expected name and a size that matches
the metadata.  The downloaded file does pass a "rpm -q --checksig" test,
but yum claims, "[Errno -1] Package does not match intended download".
If the affected packages are manually fetched with wget using the same
URL that yum reported as broken, all the signatures check OK and
"yum localinstall" upgrades the packages without complaint.

The same error occurs on all mirrors and on the baseurl repo.  It appears
that a metadata file was pushed with checksums that do not match some of
the files in the repo.

-- 
Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.