Fedora: Incorrect checksums for netstandard-targeting-pack RPM breaks package install/update

[agc93]

The netstandard-targeting-pack-2.1.0-x64.rpm from the https://packages.microsoft.com/fedora/30/prod/ repo has the incorrect checksum causing DNF to bail out, blocking system updates.

The calculated checksum of the package (when directly downloading the rpm) is 45e199caf1151a750d11d9c5c7669d6e23d8dbb33da54d1d90bde55745996480 which fails against the official F30 yum repo.

Full output below:

Downloading Packages:
[MIRROR] netstandard-targeting-pack-2.1.0-x64.rpm: Downloading successful, but checksum doesn't match. Calculated: 45e199caf1151a750d11d9c5c7669d6e23d8dbb33da54d1d90bde55745996480(sha256)  Expected: fa194a8c12913dcec85c8d24bfc91686a7b93128b4c05346df16e2c641e2ba41(sha256) 
[FAILED] netstandard-targeting-pack-2.1.0-x64.rpm: No more mirrors to try - All mirrors were already tried without success                                                                                        

Error: Error downloading packages:
  Cannot download netstandard-targeting-pack-2.1.0-x64.rpm: All mirrors were tried

This can be replicated using the following Dockerfile (or run commands on a live F30 install)

FROM fedora:30
RUN curl https://packages.microsoft.com/config/fedora/30/prod.repo | tee /etc/yum.repos.d/microsoft-prod.repo
RUN dnf install -y netstandard-targeting-pack-2.1

[dagood]

Thanks for the report with details, this looks like a similar problem as #3853 so I'm adding it to my email thread with the Linux Repo Admins to figure out what's going on here.

[craigjbass]

@dagood I think this is a dupe of #3853 just different RHEL-like flavours giving slightly different messages.

[dagood]

That's probably true, I'm going to leave this one open as well until we know for sure though, and it might also be a useful signpost for anyone looking through issues who might skip over an issue with CentOS in the title when they're using a different RPM-using distro.

[dagood]

I finally decided to rename #3853 to reference each distro and include the more specific error messages for each distro. So, I'm closing this issue as a duplicate now.

(Sorry for the indecisiveness, I was hoping this would be resolved sooner so it wouldn't be as important to organize these.)