Hash Sum mismatch

[dragonslayr]

Am going to attempt to upgrade ubuntu 16.04 to 18, however, I’m getting Hash Sum mismatch while trying to update the system before the upgrade. Have been getting this error for the last few days… Wondering what the fix may be. Have tried apt-clean, apt-update, and rm -rf /var/lib/apt/lists/* but still get the error. Of course, I do not want to proceed until I get this error taken care of…

Ign:1 http://software.virtualmin.com/gpl/ubuntu virtualmin-xenial InRelease
Hit:2 http://us.archive.ubuntu.com/ubuntu xenial InRelease
Ign:3 http://software.virtualmin.com/gpl/ubuntu virtualmin-universal InRelease
Hit:4 http://software.virtualmin.com/gpl/ubuntu virtualmin-xenial Release
Hit:5 http://security.ubuntu.com/ubuntu xenial-security InRelease
Hit:6 http://us.archive.ubuntu.com/ubuntu xenial-updates InRelease
Hit:8 http://us.archive.ubuntu.com/ubuntu xenial-backports InRelease
Get:7 http://software.virtualmin.com/gpl/ubuntu virtualmin-universal Release [9,447 B]
Get:10 http://software.virtualmin.com/gpl/ubuntu virtualmin-universal Release.gpg [195 B]
Get:11 http://software.virtualmin.com/gpl/ubuntu virtualmin-universal/main amd64 Packages [18.4 kB]
Err:11 http://software.virtualmin.com/gpl/ubuntu virtualmin-universal/main amd64 Packages
Hash Sum mismatch
Get:12 http://software.virtualmin.com/gpl/ubuntu virtualmin-universal/main i386 Packages [17.0 kB]
Fetched 9,642 B in 0s (12.2 kB/s)
Reading package lists… Done
W: http://software.virtualmin.com/gpl/ubuntu/dists/virtualmin-universal/Release.gpg: Signature by key 31D2B18872EAF68EFB81F81DE8DD3FA0A0BDBCF9 uses weak digest algorithm (SHA1)
E: Failed to fetch store:/var/lib/apt/lists/partial/software.virtualmin.com_gpl_ubuntu_dists_virtualmin-universal_main_binary-amd64_Packages.bz2 Hash Sum mismatch
E: Some index files failed to download. They have been ignored, or old ones used instead.

[DrCarsonBeckett]

@Joe said there were issues with the repos / depos, but he said it should be fixed now (most of the issues at least).
When did you try it the last time?

[Joe]

apt-get clean

Software Repository Maintenance

OK, I think the repos are in good shape again, after a few messes. A few problems that came up and their solutions: Everybody with Debian or Ubuntu: You probably want to run apt-get clean; apt-get update If you have Virtualmin Pro on Debian/Ubuntu, you may have accidentally downgraded to Virtualmin GPL if you ran an update without noticing that it was the GPL module (webmin-virtual-server_6.0.8_gpl or similar) because I had a typo in my repo generation scripts I merged GPL and Pro. I’ll roll …

[dimitrist]

getting this today on debian buster / amd64 :

N: Skipping acquire of configured file ‘main/binary-amd64/Packages’ as repository ‘http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease’ doesn’t support architecture ‘amd64’

already ran apt clean, but still fails.

[Joe]

That is a harmless (though annoying) warning. I thought I knew how to fix it, but it seems to be sticking around for some reason. But, it should not prevent updates…it’s just chattery.

Edit: Also this is a different problem than the original hash sum mismatch problem report. Please open new topics for new problems.

[streger]

Not sure if this is the right place to post, but here it goes.
I still have the same problem on the servers where virtualmin-nginx version is installed

root@server ~ # apt-get clean
root@server ~ # apt update
Hit:1 http://mirror.hetzner.de/ubuntu/packages bionic InRelease
Hit:2 http://mirror.hetzner.de/ubuntu/packages bionic-updates InRelease                      
Hit:3 http://mirror.hetzner.de/ubuntu/packages bionic-backports InRelease                    
Hit:4 http://mirror.hetzner.de/ubuntu/packages bionic-security InRelease                     
Hit:5 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease             
Hit:6 http://ppa.launchpad.net/ondrej/nginx/ubuntu bionic InRelease                          
Hit:7 http://ppa.launchpad.net/ondrej/php/ubuntu bionic InRelease                            
Hit:8 http://security.ubuntu.com/ubuntu bionic-security InRelease                            
Hit:9 http://archive.ubuntu.com/ubuntu bionic InRelease                 
Get:10 http://archive.ubuntu.com/ubuntu bionic-updates InRelease [88.7 kB]
Get:11 http://archive.ubuntu.com/ubuntu bionic-backports InRelease [74.6 kB]
Fetched 163 kB in 2s (84.2 kB/s)                               
Reading package lists... Done
Building dependency tree       
Reading state information... Done
3 packages can be upgraded. Run 'apt list --upgradable' to see them.
N: Skipping acquire of configured file 'main/binary-i386/Packages' as repository 'http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease' doesn't support architecture 'i386'
N: Skipping acquire of configured file 'main/binary-amd64/Packages' as repository 'http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal InRelease' doesn't support architecture 'amd64'
root@server ~ # apt list --upgradable
Listing... Done
webmin/virtualmin-universal 1.942 all [upgradable from: 1.941]
webmin-virtualmin-nginx/virtualmin-universal 2.6 all [upgradable from: 2.5]
webmin-virtualmin-sqlite/virtualmin-universal 1.6 all [upgradable from: 1.5]
root@server ~ # apt upgrade
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  webmin webmin-virtualmin-nginx webmin-virtualmin-sqlite
3 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 17.2 MB of archives.
After this operation, 29.3 MB disk space will be freed.
Do you want to continue? [Y/n] y
Get:1 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal/main all webmin all 1.942 [17.0 MB]
Get:2 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal/main all webmin-virtualmin-nginx all 2.6 [108 kB]
Err:2 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal/main all webmin-virtualmin-nginx all 2.6
  File has unexpected size (108206 != 108220). Mirror sync in progress? [IP: 163.172.162.254 80]
  Hashes of expected file:
   - SHA512:eeb0101093aa6907ebac3baf527566a593b45cbe62d4300f2c7886613c1d629bbfb10a78f96f0ca0615506d23fa57026e6b0e10f45df37378c364d9e4e89150d
   - SHA256:0eee763d023bc600671192a5f7dabc17eeb41b26ac90af9cf86d5e32994b90d9
   - SHA1:3f692fdee0ba6f802329ec94eddd79240a46715c [weak]
   - MD5Sum:de7542e8854d5ec6f3afb888022c7e56 [weak]
   - Filesize:108220 [weak]
Get:3 http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal/main all webmin-virtualmin-sqlite all 1.6 [19.9 kB]
Fetched 17.1 MB in 1s (12.9 MB/s)              
E: Failed to fetch http://software.virtualmin.com/vm/6/gpl/apt/pool/main/w/webmin-virtualmin-nginx/webmin-virtualmin-nginx_2.6_all.deb  File has unexpected size (108206 != 108220). Mirror sync in progress? [IP: 163.172.162.254 80]
   Hashes of expected file:
    - SHA512:eeb0101093aa6907ebac3baf527566a593b45cbe62d4300f2c7886613c1d629bbfb10a78f96f0ca0615506d23fa57026e6b0e10f45df37378c364d9e4e89150d
    - SHA256:0eee763d023bc600671192a5f7dabc17eeb41b26ac90af9cf86d5e32994b90d9
    - SHA1:3f692fdee0ba6f802329ec94eddd79240a46715c [weak]
    - MD5Sum:de7542e8854d5ec6f3afb888022c7e56 [weak]
    - Filesize:108220 [weak]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

[grumpyniffler]

Same problem for me here too. Yesterday freshly installed server on debian 10.

[glaous]

Same problem for me here too. Yesterday freshly installed server on debian 10.

apt-key adv --recv-keys --keyserver http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin-6
apt clean

OK but not resolv

The following packages have been kept back:
webmin-virtualmin-mailman
The following packages will be upgraded:
webmin-virtualmin-nginx
1 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
Need to get 108 kB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://software.virtualmin.com/vm/6/apt virtualmin-universal/main all webmin-virtualmin-nginx all 2.6 [108 kB]
Err:1 http://software.virtualmin.com/vm/6/apt virtualmin-universal/main all webmin-virtualmin-nginx all 2.6
File has unexpected size (108206 != 108220). Mirror sync in progress? [IP: 163.172.162.254 80]
Hashes of expected file:

• SHA512:eeb0101093aa6907ebac3baf527566a593b45cbe62d4300f2c7886613c1d629bbfb10a78f96f0ca0615506d23fa57026e6b0e10f45df37378c364d9e4e89150d
• SHA256:0eee763d023bc600671192a5f7dabc17eeb41b26ac90af9cf86d5e32994b90d9
• SHA1:3f692fdee0ba6f802329ec94eddd79240a46715c [weak]
• MD5Sum:de7542e8854d5ec6f3afb888022c7e56 [weak]
• Filesize:108220 [weak]
  E: Failed to fetch http://software.virtualmin.com/vm/6/apt/pool/main/w/webmin-virtualmin-nginx/webmin-virtualmin-nginx_2.6_all.deb File has unexpected size (108206 != 108220). Mirror sync in progress? [IP: 163.172.162.254 80]
  Hashes of expected file:
  - SHA512:eeb0101093aa6907ebac3baf527566a593b45cbe62d4300f2c7886613c1d629bbfb10a78f96f0ca0615506d23fa57026e6b0e10f45df37378c364d9e4e89150d
  - SHA256:0eee763d023bc600671192a5f7dabc17eeb41b26ac90af9cf86d5e32994b90d9
  - SHA1:3f692fdee0ba6f802329ec94eddd79240a46715c [weak]
  - MD5Sum:de7542e8854d5ec6f3afb888022c7e56 [weak]
  - Filesize:108220 [weak]
  E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
  root@ns372899:~# apt-get update
  Hit:1 http://security.debian.org buster/updates InRelease
  Hit:2 Index of /debian buster InRelease
  Hit:3 http://software.virtualmin.com/vm/6/apt virtualmin-buster InRelease
  Hit:4 http://software.virtualmin.com/vm/6/apt virtualmin-universal InRelease
  Hit:5 Index of /debian buster-updates InRelease
  Hit:6 Index of /debian buster-backports InRelease
  Hit:7 https://deb.nodesource.com/node_13.x buster InRelease
  Reading package lists… Done
  N: Skipping acquire of configured file ‘main/binary-amd64/Packages’ as repository ‘http://software.virtualmin.com/vm/6/apt virtualmin-universal InRelease’ doesn’t support architecture ‘amd64’
  N: Usage of apt_auth.conf(5) should be preferred over embedding login information directly in the sources.list(5) entry for ‘http://software.virtualmin.com/vm/6/apt’
  N: Usage of apt_auth.conf(5) should be preferred over embedding login information directly in the sources.list(5) entry for ‘http://software.virtualmin.com/vm/6/apt’

[DrCarsonBeckett]

Its most likely the same or similar to: Software Repository Maintenance .
@Joe already said he’'s trying to fix the issues and I highly assume they are connected.

[glaous]

Ok joe, we’re all with you, you’re a champion

[Joe]

OK, nginx (and mailman) packages are fixed.

There’s still the warning for architecture support, which I still can’t figure out, but that one is harmless.

[DrCarsonBeckett]

For me, that works again too (architecture warning).

[streger]

It works now, thanks @Joe

[sylvainf]

Hi,

I had the Hash Sum Mismatch error but after cleaning up the /var/lib/apt/lists directory, I get an invalid signature.

I did an apt-get clean, rm /var/lib/apt/lists/* and apt-get update again and it gives me:

W: GPG error: http://software.virtualmin.com/gpl/ubuntu virtualmin-universal Release: The following signatures were invalid: 31D2B18872EAF68EFB81F81DE8DD3FA0A0BDBCF9
E: The repository 'http://software.virtualmin.com/gpl/ubuntu virtualmin-universal Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

The other files have valid signatures.

This is on Ubuntu 18.04.

[DrCarsonBeckett]

Check this: Virtualmin module updates .

[sylvainf]

Changing the repository and adding the new GnuPG key fixed my problem.

Thanks.