Mismatching sha256sum on L5 download server

[FranklyFlawless]

This issue has also been experienced by a different user during April 2024:

@jjakob

I’m trying to flash a new image now, after struggling for a while with librem5-flash-image not finding a matching image I found I need to add --stable for it to find it. Now I have another problem, the image is downloaded but the image fails checksum verification.

/Downloads/librem5-flash-image-v0.0.4$ ./scripts/librem5r4-flash-image --stable
2024-04-04 03:32:26 INFO Looking for librem5r4 plain byzantium image
2024-04-04 03:32:27 INFO Found disk image Build "stable" 'Last stable librem5r4 build' from Fri Jun 23 22:43:18 2023
2024-04-04 03:32:28 INFO Found uboot Build 85 from Thu Aug 25 15:22:41 2022
2024-04-04 03:32:28 INFO Downloading to ./tmp_librem5r4-flash-image_zflholae
2024-04-04 03:32:29 INFO Downloading image from https://storage.puri.sm/librem5/images/byzantium/latest/librem5r4/plain/artifact/librem5r4.img.xz
                                                                                                                                                                                                                  2024-04-04 03:34:57 INFO Calculating sha256sum of ./tmp_librem5r4-flash-image_zflholae/librem5r4.img                                                                                                                
2024-04-04 03:35:25 ERROR Checksum of image 27107f77b443a65e0446aec11c79754fdc623e3a40328d898b5fb0c0188fed70 does not match 6cfc1c2671a76baf3fc72ca611856143e3b74c969239ac8a695ce881a1467672                       
2024-04-04 03:35:25 INFO Cleaning up.

If I knew where to download and check the hash of the image and uboot I’d do that myself. I know where the image is, at that URL, not sure where the u-boot images are, looks like a jenkins job?
I see that the image checksum is in a file meta.yml next to the image.

@jjakob

It’s odd that if I download the image myself and compute its decompressed checksum, I get a match. Why librem5-flash-image doesn’t, I don’t know, must be a bug.

@jjakob

The trick was to download the image, decompress it, then run the update script like this:

./scripts/librem5-flash-image --dir . --stable