apt-get update: Sources.bz2 Hash Sum mismatch, aptitude update: no errors
Linux - SoftwareThis forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Ubuntu, apt-get update: Sources.bz2 Hash Sum mismatch, aptitude update: no errors
After installing VirtualBox OSE when I run "sudo apt-get update" it returns the following error:
Code:
W: Failed to fetch http://ir.archive.ubuntu.com/ubuntu/dists/intrepid-updates/main/source/Sources.bz2 Hash Sum mismatch
E: Some index files failed to download, they have been ignored, or old ones used instead.
I uninstalled VirtualBox OSE and that didn't work, I reinstalled VirtualBox OSE but that didn't work either.
I have also tried "sudo apt-get update -o Acquire::http::No-Cache=True" and "sudo apt-get update -o Acquire::BrokenProxy=true" and received the same error.
I've also tried switching to the main server and to loads of different servers around the globe to no avail.
The strange thing is that "sudo aptitude update" completes without an error!
1. How do I fix this problem?
2. What's the difference between apt-get and aptitude?
3. Does "sudo aptitude update" do the same job as "sudo apt-get update"?
Thanks for your consideration.
-- Aidin Sabetian
The contents of /etc/apt/sources.list:
Code:
# deb cdrom:[Ubuntu 8.10 _Intrepid Ibex_ - Release i386 (20081029.5)]/ intrepid main restricted
deb-src http://archive.ubuntu.com/ubuntu/ intrepid main restricted #Added by software-properties
# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://ir.archive.ubuntu.com/ubuntu/ intrepid main restricted
deb-src http://ir.archive.ubuntu.com/ubuntu/ intrepid restricted main multiverse universe #Added by software-properties
## Major bug fix updates produced after the final release of the
## distribution.
deb http://ir.archive.ubuntu.com/ubuntu/ intrepid-updates main restricted
deb-src http://ir.archive.ubuntu.com/ubuntu/ intrepid-updates restricted main multiverse universe #Added by software-properties
## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL NOT receive any
## review or updates from the Ubuntu security team.
deb http://ir.archive.ubuntu.com/ubuntu/ intrepid universe
deb http://ir.archive.ubuntu.com/ubuntu/ intrepid-updates universe
## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## multiverse WILL NOT receive any review or updates from the Ubuntu
## security team.
deb http://ir.archive.ubuntu.com/ubuntu/ intrepid multiverse
deb http://ir.archive.ubuntu.com/ubuntu/ intrepid-updates multiverse
## Uncomment the following two lines to add software from the 'backports'
## repository.
## N.B. software from this repository may not have been tested as
## extensively as that contained in the main release, although it includes
## newer versions of some applications which may provide useful features.
## Also, please note that software in backports WILL NOT receive any review
## or updates from the Ubuntu security team.
# deb http://ir.archive.ubuntu.com/ubuntu/ intrepid-backports main restricted universe multiverse
# deb-src http://ir.archive.ubuntu.com/ubuntu/ intrepid-backports main restricted universe multiverse
## Uncomment the following two lines to add software from Canonical's
## 'partner' repository. This software is not part of Ubuntu, but is
## offered by Canonical and the respective vendors as a service to Ubuntu
## users.
deb http://archive.canonical.com/ubuntu intrepid partner
deb-src http://archive.canonical.com/ubuntu intrepid partner
deb http://security.ubuntu.com/ubuntu intrepid-security main restricted
deb-src http://security.ubuntu.com/ubuntu intrepid-security restricted main multiverse universe #Added by software-properties
deb http://security.ubuntu.com/ubuntu intrepid-security universe
deb http://security.ubuntu.com/ubuntu intrepid-security multiverse
Last edited by Aidin Sabetian; 01-17-2009 at 09:19 AM.
Switched to the main server BADSIG 40976EAF437D05B5 <ftpmaster@ubuntu.com>
I again switched to the main server, now I get a different error when running "sudo apt-get update" and "sudo aptitude update":
Code:
Reading package lists... Done
W: GPG error: http://archive.ubuntu.com intrepid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: You may want to run apt-get update to correct these problems
Notice that "sudo aptitude update" which used to run without any errors now returns the same error as "sudo apt-get update".
I went to System > Administration > Software Sources > Authentication tab, then deleted every key, and restored the default keys and got the same error again.
Last edited by Aidin Sabetian; 01-17-2009 at 08:55 AM.
SOLVED: apt-get update: Sources.bz2 Hash Sum mismatch, aptitude update: no errors
I resolved the problem, here are the details:
The main server is overloaded and too busy serving probably thousands of users worldwide. hence the error.
In System > Administration > Software Sources > Download from, I switched to an Italian mirror (http://giano.com.dist.unige.it/ubuntu) and ran "sudo apt-get update", the problem went away!
Last edited by Aidin Sabetian; 01-17-2009 at 09:18 AM.
The problem arose again after installing the adobe flash plugin
The problem arose again after installing the adobe flash plugin.
"sudo apt-get update" using the mirror "http://giano.com.dist.unige.it/ubuntu" returns:
Code:
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://giano.com.dist.unige.it intrepid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://giano.com.dist.unige.it intrepid-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: Failed to fetch http://giano.com.dist.unige.it/ubuntu/dists/intrepid-updates/Release
W: Failed to fetch http://giano.com.dist.unige.it/ubuntu/dists/intrepid-security/Release
W: Some index files failed to download, they have been ignored, or old ones used instead.
W: You may want to run apt-get update to correct these problems
"sudo aptitude update" using the mirror "http://giano.com.dist.unige.it/ubuntu" returns:
Code:
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://giano.com.dist.unige.it intrepid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://giano.com.dist.unige.it intrepid-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: You may want to run apt-get update to correct these problems
"sudo apt-get update" using the main server returns:
Code:
W: GPG error: http://archive.ubuntu.com intrepid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/intrepid-security/universe/source/Sources.bz2 Hash Sum mismatch
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/intrepid-security/universe/binary-i386/Packages.bz2 Hash Sum mismatch
E: Some index files failed to download, they have been ignored, or old ones used instead.
"sudo aptitude update" using the main server returns:
Code:
W: GPG error: http://archive.ubuntu.com intrepid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: You may want to run apt-get update to correct these problems
---
the output of "sudo apt-get update" using the mirror "http://giano.com.dist.unige.it/ubuntu":
Code:
0% [Working]
Hit http://archive.canonical.com intrepid Release.gpg
5% [Connecting to giano.com.dist.unige.it (130.251.19.2)]
Hit http://giano.com.dist.unige.it intrepid Release.gpg
10% [Waiting for headers]
10% [Waiting for headers] [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid/main Translation-en_US
15% [Waiting for headers]
15% [Waiting for headers] [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid/restricted Translation-en_US
20% [Waiting for headers]
Ign http://archive.canonical.com intrepid/partner Translation-en_US
25% [Connecting to giano.com.dist.unige.it (130.251.19.2)]
Hit http://archive.canonical.com intrepid Release
25% [Waiting for headers]
25% [Release gpgv 7007] [Waiting for headers]
27% [Waiting for headers]
Hit http://archive.canonical.com intrepid/partner Packages
31% [Waiting for headers]
Hit http://archive.canonical.com intrepid/partner Sources
36% [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid/universe Translation-en_US
40% [Working]
40% [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid/multiverse Translation-en_US
45% [Working]
Get:1 http://giano.com.dist.unige.it intrepid-updates Release.gpg [189B]
4% [1 Release.gpg 0/189B 0%]
94% [Working]
94% [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid-updates/main Translation-en_US
95% [Working]
95% [Connecting to giano.com.dist.unige.it (130.251.19.2)]
95% [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid-updates/restricted Translation-en_US
95% [Connecting to giano.com.dist.unige.it (130.251.19.2)]
95% [Waiting for headers]
Ign http://giano.com.dist.unige.it intrepid-updates/universe Translation-en_US
96% [Working]
96% [Waiting for headers] 30B/s 0s
Ign http://giano.com.dist.unige.it intrepid-updates/multiverse Translation-en_US
96% [Working] 30B/s 0s
Get:2 http://giano.com.dist.unige.it intrepid-security Release.gpg [189B]
51% [2 Release.gpg 0/189B 0%] 30B/s 6s
98% [Working] 30B/s 0s
98% [Waiting for headers] 30B/s 0s
Ign http://giano.com.dist.unige.it intrepid-security/main Translation-en_US
98% [Working] 30B/s 0s
98% [Waiting for headers] 30B/s 0s
Ign http://giano.com.dist.unige.it intrepid-security/restricted Translation-en_US
98% [Connecting to giano.com.dist.unige.it (130.251.19.2)] 30B/s 0s
98% [Waiting for headers] 30B/s 0s
98% [Waiting for headers] 30B/s 0s
Ign http://giano.com.dist.unige.it intrepid-security/universe Translation-en_US
99% [Working] 30B/s 0s
99% [Waiting for headers] 30B/s 0s
Ign http://giano.com.dist.unige.it intrepid-security/multiverse Translation-en_US
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid Release
99% [Connecting to giano.com.dist.unige.it (130.251.19.2)] 30B/s 0s
99% [Release gpgv 65861] [Connecting to giano.com.dist.unige.it (130.251.19.2)]
97% [Connecting to giano.com.dist.unige.it (130.251.19.2)] 30B/s 0s
Get:3 http://giano.com.dist.unige.it intrepid-updates Release [51.2kB]
99% [Connecting to giano.com.dist.unige.it (130.251.19.2)] 30B/s 0s
99% [3 Release gpgv 51208] [Connecting to giano.com.dist.unige.it (130.251.19.2
Err http://giano.com.dist.unige.it intrepid-updates Release
99% [Connecting to giano.com.dist.unige.it (130.251.19.2)] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid-security Release
99% [Working] 30B/s 0s
99% [Release gpgv 44004] 30B/s 0s
Err http://giano.com.dist.unige.it intrepid-security Release
99% [Connecting to giano.com.dist.unige.it (130.251.19.2)] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/main Sources
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/restricted Sources
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/main Packages
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/restricted Packages
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/multiverse Sources
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/universe Sources
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/universe Packages
99% [Working] 30B/s 0s
Hit http://giano.com.dist.unige.it intrepid/multiverse Packages
99% [Working] 30B/s 0s
Fetched 379B in 10s (35B/s)
Reading package lists... 0%
Reading package lists... 100%
Reading package lists... Done
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://giano.com.dist.unige.it intrepid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://giano.com.dist.unige.it intrepid-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: Failed to fetch http://giano.com.dist.unige.it/ubuntu/dists/intrepid-updates/Release
W: Failed to fetch http://giano.com.dist.unige.it/ubuntu/dists/intrepid-security/Release
W: Some index files failed to download, they have been ignored, or old ones used instead.
W: You may want to run apt-get update to correct these problems
Last edited by Aidin Sabetian; 01-22-2009 at 05:48 AM.
I had this problem before but even after reinstalling Ubuntu I'm still getting the same errors.
I tried removing the authentication keys in "Software Sources" and restored the defaults to no avail
Last edited by Aidin Sabetian; 01-22-2009 at 06:21 AM.
The problem was that my ISP cached the files and forcefully overrode the "expire" header. The *only* solution is using a proxy or VPN to update the repository.
When done updating, you can unset the $http_proxy variable.
Code:
$ unset http_proxy
$ unset https_proxy
The following command shows if $http_proxy is set:
Code:
$ echo $http_proxy
$ echo $https_proxy
Though the best solution would be:
Alternatively you can use a proxy-wrapper for channelling "apt-get" transactions through a proxy, "tsocks" is a very nice proxy-wrapper. Install tsocks, configure it, and then enter:
Code:
$ tsocks sudo apt-get update
Last edited by Aidin Sabetian; 05-02-2010 at 04:01 PM.
Solved: again without changing /etc/apt/source.list or setting up a proxy
This error occurs also for me every time a new virtualbox package is released. I run an apt-cacher-ng apt proxy on our LAN and no matter how I configure it or delete the relevant cache files on the server, it doesn't clear the problem at the client. I have however found a solution that always resolves the issue. Whilst the problem is probably a server side problem, it can only be resolved on the client side:
Removing these cached lists clears the problem on Ubuntu Karmic and Debian lenny. It would be nice to resolve this on the server side, but for now, this works to clear the problem without having to mess with sources.list.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.