Hash Sum mismatch in no-subscription repo

G0ldmember

Well-Known Member
Oct 2, 2019
45
6
48
Germany
Hi,

since yesterday we have a hash sum mismatch in the no-subscription repo that we use for testing before we update the prod servers with enterprise subscription.

Example:

Code:
Fehler: Fehlschlag beim Holen von http://download.proxmox.com/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb Hash-Summe stimmt nicht überein
   Hashes of expected file:
    - SHA512:52cfe658cecc59cd81a021af964975720154e4fa839d5533ffe9393b5f3815e528ce7f02f78dc998bf7bf2fc93ed08bb9899fef491dcab3a7679b0fdce90efaf
    - SHA256:e9926085a2db087f920b49116e5b6a57766c12383f433ea2e8cfdb864d3c937a
    - MD5Sum:5d870e8aebfdaac08865f5be41dfb0fd [weak]
    - Filesize:1233888 [weak]
   Hashes of received file:
    - SHA512:81e97d8493054533b2a047925e441225e6de3ba4e7ff0edc03c018e01ce827b021b47842b32ba829140923368f8b191af311c886219d6a34fbbe81f5c3308985
    - SHA256:4143714e1abcb8ecbe62e542c142ceb23b2a93cdde0eb560ec17371a1dc6d9f1
    - MD5Sum:92976b4c5af21380be13d5b8055d5e07 [weak]
    - Filesize:1233888 [weak]
   Last modification reported: Sat, 05 Sep 2026 20:08:55 +0000
Fehler: Einige Archive konnten nicht heruntergeladen werden; vielleicht »apt-get update« ausführen oder mit »--fix-missing« probieren?

Anything wrong with the Release file and the Hashs?
 
Hi @G0ldmember

thanks for reporting this!

Tested on my end but here the checksums match.

What CDN host does your PVE node use to download and does the issue persist?
Code:
host download.proxmox.com

Best regards
Jonas
 
Hi @G0ldmember

thanks for reporting this!

Tested on my end but here the checksums match.

What CDN host does your PVE node use to download and does the issue persist?
Code:
host download.proxmox.com

Best regards
Jonas
Hi, it's

Code:
download.proxmox.com is an alias for download.cdn.proxmox.com.
download.cdn.proxmox.com is an alias for de.eu.cdn.proxmox.com.
de.eu.cdn.proxmox.com is an alias for de.cdn.proxmox.com.
de.cdn.proxmox.com has address 212.224.123.70
de.cdn.proxmox.com has IPv6 address 2a01:7e0:0:424::249
 
Just checked the package from that mirror and on my end it also matches the Packages file.

Could you please try again on your machine?
 
In the Packages file there's
Code:
Filename: dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
Size: 1233888
MD5sum: 5d870e8aebfdaac08865f5be41dfb0fd
SHA256: e9926085a2db087f920b49116e5b6a57766c12383f433ea2e8cfdb864d3c937a
SHA512: 52cfe658cecc59cd81a021af964975720154e4fa839d5533ffe9393b5f3815e528ce7f02f78dc998bf7bf2fc93ed08bb9899fef491dcab3a7679b0fdce90efaf

But the actual files checksum is

- SHA512:81e97d8493054533b2a047925e441225e6de3ba4e7ff0edc03c018e01ce827b021b47842b32ba829140923368f8b191af311c886219d6a34fbbe81f5c3308985
- SHA256:4143714e1abcb8ecbe62e542c142ceb23b2a93cdde0eb560ec17371a1dc6d9f1



Code:
➜  ~ wget http://download.proxmox.com/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
--2026-09-10 14:18:37--  http://download.proxmox.com/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
Auflösen des Hostnamens download.proxmox.com (download.proxmox.com) … 2a01:7e0:0:424::249, 45.84.67.184
Verbindungsaufbau zu download.proxmox.com (download.proxmox.com)|2a01:7e0:0:424::249|:80 … verbunden.
HTTP-Anforderung gesendet, auf Antwort wird gewartet … 200 OK
Länge: 1233888 (1,2M) [application/octet-stream]
Wird in ‘ceph-mgr_19.2.6-pve4_amd64.deb’ gespeichert.

ceph-mgr_19.2.6-pve4_amd64.deb                              100%[=================================================================================================================================================>]   1,18M  --.-KB/s    in 0,04s  

2026-09-10 14:18:38 (26,3 MB/s) - ‘ceph-mgr_19.2.6-pve4_amd64.deb’ gespeichert [1233888/1233888]

➜  ~ sha512sum ceph-mgr_19.2.6-pve4_amd64.deb
81e97d8493054533b2a047925e441225e6de3ba4e7ff0edc03c018e01ce827b021b47842b32ba829140923368f8b191af311c886219d6a34fbbe81f5c3308985  ceph-mgr_19.2.6-pve4_amd64.deb
 
Last edited:
Code:
$ wget http://\[2a01:7e0:0:424::249\]/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
--2026-09-10 14:50:22--  http://[2a01:7e0:0:424::249]/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
Connecting to [2a01:7e0:0:424::249]:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1233888 (1.2M) [application/octet-stream]
Saving to: ‘ceph-mgr_19.2.6-pve4_amd64.deb’

ceph-mgr_19.2.6-pve4_amd64.deb           100%[==================================================================================>]   1.18M  --.-KB/s    in 0.1s

2026-09-10 14:50:22 (11.1 MB/s) - ‘ceph-mgr_19.2.6-pve4_amd64.deb’ saved [1233888/1233888]

$ sha512sum ceph-mgr_19.2.6-pve4_amd64.deb
52cfe658cecc59cd81a021af964975720154e4fa839d5533ffe9393b5f3815e528ce7f02f78dc998bf7bf2fc93ed08bb9899fef491dcab3a7679b0fdce90efaf  ceph-mgr_19.2.6-pve4_amd64.deb
 
Now it's a different CDN node :)

Code:
➜  /tmp wget http://\[2a01:7e0:0:424::249\]/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
--2026-09-10 16:32:26--  http://[2a01:7e0:0:424::249]/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
Verbindungsaufbau zu [2a01:7e0:0:424::249]:80 … verbunden.
HTTP-Anforderung gesendet, auf Antwort wird gewartet … 200 OK
Länge: 1233888 (1,2M) [application/octet-stream]
Wird in ‘ceph-mgr_19.2.6-pve4_amd64.deb’ gespeichert.

ceph-mgr_19.2.6-pve4_amd64.de 100%[=================================================>]   1,18M  --.-KB/s    in 0,05s  

2026-09-10 16:32:26 (25,9 MB/s) - ‘ceph-mgr_19.2.6-pve4_amd64.deb’ gespeichert [1233888/1233888]

➜  /tmp sha512sum ceph-mgr_19.2.6-pve4_amd64.deb
52cfe658cecc59cd81a021af964975720154e4fa839d5533ffe9393b5f3815e528ce7f02f78dc998bf7bf2fc93ed08bb9899fef491dcab3a7679b0fdce90efaf  ceph-mgr_19.2.6-pve4_amd64.deb

➜  /tmp wget http://download.proxmox.com/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
--2026-09-10 16:32:47--  http://download.proxmox.com/debian/ceph-squid/dists/trixie/no-subscription/binary-amd64/ceph-mgr_19.2.6-pve4_amd64.deb
Auflösen des Hostnamens download.proxmox.com (download.proxmox.com) … 2a0b:7140:5:100::167, 185.219.221.167
Verbindungsaufbau zu download.proxmox.com (download.proxmox.com)|2a0b:7140:5:100::167|:80 … verbunden.
HTTP-Anforderung gesendet, auf Antwort wird gewartet … 200 OK
Länge: 1233888 (1,2M) [application/octet-stream]
Wird in ‘ceph-mgr_19.2.6-pve4_amd64.deb.1’ gespeichert.

ceph-mgr_19.2.6-pve4_amd64.de 100%[=================================================>]   1,18M  --.-KB/s    in 0,05s  

2026-09-10 16:32:48 (21,8 MB/s) - ‘ceph-mgr_19.2.6-pve4_amd64.deb.1’ gespeichert [1233888/1233888]

➜  /tmp sha512sum ceph-mgr_19.2.6-pve4_amd64.deb.1
81e97d8493054533b2a047925e441225e6de3ba4e7ff0edc03c018e01ce827b021b47842b32ba829140923368f8b191af311c886219d6a34fbbe81f5c3308985  ceph-mgr_19.2.6-pve4_amd64.deb.1

➜  /tmp host download.proxmox.com
download.proxmox.com is an alias for download.cdn.proxmox.com.
download.cdn.proxmox.com is an alias for de.eu.cdn.proxmox.com.
de.eu.cdn.proxmox.com is an alias for de2.cdn.proxmox.com.
de2.cdn.proxmox.com has address 185.219.221.167
de2.cdn.proxmox.com has IPv6 address 2a0b:7140:5:100::167
 
Last edited:
That's unexpected, especially since it is the same wrong checksum both times.

I think we have established that the CDN is fine so let's focus on your system.
What kind of storage are you using for the root disk and what kind of NICs?
In the best case please provide the following:
Code:
uname -r
lscpu
ethtool <uplink-NIC>
ethtool -i <uplink-NIC>

Best regards
Jonas