Apt Update Errors, Mismatched Hash & Size

Nebula-System · April 15, 2025, 12:19pm

i’m working on my Pocket Reform and getting it fully configured and i’m running into a litany of errors about a mismatched size and hash? apt says it might be a mirror sync, so i tried going to the URL manually and it shows the files there just fine and downloadable, so it makes me concerned i need to fix my sources.list or similar. here’s the log output

Get:1 https://mntre.com/reform-debian-repo reform/main arm64 flash-kernel arm64 3.109+reform1 [32.7 kB]
Err:1 https://mntre.com/reform-debian-repo reform/main arm64 flash-kernel arm64 3.109+reform1
  Hash Sum mismatch
  Hashes of expected file:
   - SHA256:23ca1ed4da95fe4900a53fba25d2217fc12fd9a0e0d76cf4430e9d3065d0f50b
   - SHA1:093049a259edf3a8391e5f2149792367837395fb [weak]
   - MD5Sum:2c7619cb06f46c7790092dd70afdfc94 [weak]
   - Filesize:32680 [weak]
  Hashes of received file:
   - SHA256:676a3458c76336bb52f14cffc9d431cee126ecdaf6276a00d7cc8481f051f2a5
   - SHA1:5e4f21d80ebfec538895b40cc711f990cf72ce5d [weak]
   - MD5Sum:d0e67743116eb354ad89718e80faf6b1 [weak]
   - Filesize:32680 [weak]
  Last modification reported: Sun, 13 Apr 2025 12:47:07 +0000
Err:2 https://mntre.com/reform-debian-repo reform/main arm64 linux-headers-6.12.22-common all 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:3 https://mntre.com/reform-debian-repo reform/main arm64 linux-image-6.12.22-mnt-reform-arm64 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:4 https://mntre.com/reform-debian-repo reform/main arm64 linux-kbuild-6.12.22 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:5 https://mntre.com/reform-debian-repo reform/main arm64 linux-headers-6.12.22-mnt-reform-arm64 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:6 https://mntre.com/reform-debian-repo reform/main arm64 linux-headers-mnt-reform-arm64 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:7 https://mntre.com/reform-debian-repo reform/main arm64 linux-image-mnt-reform-arm64 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:8 https://mntre.com/reform-debian-repo reform/main arm64 linux-libc-dev all 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:9 https://mntre.com/reform-debian-repo reform/main arm64 reform-qcacld2-6.12.22-mnt-reform-arm64 arm64 20250411T215357Z
  404  Not Found [IP: 91.250.115.15 443]
Err:10 https://mntre.com/reform-debian-repo reform/main arm64 reform-qcacld2 arm64 20250411T215357Z
  404  Not Found [IP: 91.250.115.15 443]
Get:11 https://mntre.com/reform-debian-repo reform/main arm64 reform2-lpc-dkms all 1.71-1+reform1 [23.8 kB]
Err:11 https://mntre.com/reform-debian-repo reform/main arm64 reform2-lpc-dkms all 1.71-1+reform1
  File has unexpected size (23792 != 23760). Mirror sync in progress? [IP: 91.250.115.15 443]
  Hashes of expected file:
   - SHA256:8b1612f60ac63210a4c5d0eca95098e43e666bc52f358277b84c0d7c8b19a853
   - SHA1:1e6b9c098f5a36800a15e9a6d329c878066a0247 [weak]
   - MD5Sum:5183992a26bc27599d61173a5272de20 [weak]
   - Filesize:23760 [weak]
Get:12 https://mntre.com/reform-debian-repo reform/main arm64 reform-tools all 1.71-1+reform1 [611 kB]
Err:12 https://mntre.com/reform-debian-repo reform/main arm64 reform-tools all 1.71-1+reform1
  File has unexpected size (611020 != 611000). Mirror sync in progress? [IP: 91.250.115.15 443]
  Hashes of expected file:
   - SHA256:e88896aa20ce94bf29d81ec9f6f7ad37519430aeec13ae73a3d719ec5e3fb0be
   - SHA1:794a012101ac32f742a8c01f1b367268fe5e3d48 [weak]
   - MD5Sum:f7f72463959310dc0a1b92bff61521f7 [weak]
   - Filesize:611000 [weak]
Fetched 32.7 kB in 2s (17.3 kB/s)

lemme know if this is something i need to fix or something wrong on MNT’s end. in the meantime running sudo apt upgrade --fix-broken worked just fine for upgrading everything else.

josch · April 15, 2025, 1:01pm

I’d like to get to the bottom of this. Do you happen to have the flash-kernel package still present in your /var/cache/apt/archives? I hope you didn’t run apt clean yet… If you still have it, can you upload that package to somewhere so that I can investigate? Thank you!

Nebula-System · April 15, 2025, 1:43pm

just saw this, and nope, didn’t run apt clean, will upload the thing and share via google drive in a moment

Nebula-System · April 15, 2025, 1:54pm

found it, but it’s in /var/cache/apt/archives/partial, and it’s .deb.FAILED file extension.

there’s also a couple other files here

any ideas for a fix?

josch · April 15, 2025, 2:00pm

Thank you. I need to investigate this further. Please feel free to ping me if I fail to follow up on this.

Does an “apt update” before you “apt upgrade” fix your issue?

Nebula-System · April 15, 2025, 2:03pm

my default order of operations is already sudo apt update then sudo apt upgrade, it’s half a second longer and tends to work out problems like this.

and yeah i’ll probably ping in a few days to a week. that said, is that package like, gonna break my system without it? if so i can manually install, tho if it’s nonessential, i’ll leave it so i can test things and get back to you, for environment preservation and testing and finding a fix

josch · April 15, 2025, 6:34pm

flash-kernel is the component which generates your /boot/boot.scr. That file is the script which u-boot executes to load the right kernel, initramfs and device tree. Unless you are using /boot/extlinux/extlinux.conf to boot (for example via the u-boot-menu package) the flash-kernel package is quite essential in the sense that without the /boot/boot.scr your system will not boot.

Nebula-System · April 16, 2025, 12:54pm

i’ll manually install it later today then. i was hoping it could be left alone for debugging but i’d rather not risk it

that said it’s been booting just fine, so that’s really odd. if you need anything more from me, let me know

Nebula-System · April 16, 2025, 2:12pm

so there was other packages i was missing including linux-headers-common and i figured out that the link apt tried following had %2b instead of + between package name and reform. i’m manually downloading those now as well.

edit: are some of the ones there for the full MNT Reform and not the pocket? in the pool/main/l/linux repo. and will i be fine downloading the ones that just have a messed up URL, or should i wait for you to send me a fix before downloading others?

josch · April 16, 2025, 6:13pm

Good. I’m grateful that you thought of offering your system for the purpose of tracking down a problem which you assumed needs its current state being frozen. This is indeed something that would often help. In this case though you did the right thing by installing it because:

I think I know what the problem is and I can keep investigating it independently
the flash-kernel package is essential to your system and it’s dangerous to experiment with it

I think this is probably because the package was never removed. The console output you posted is rather a problem in upgrading it. Not a problem in installing it.

What part was missing this header?

Why did you manually download them instead of using apt to install them? Are you saying that running apt update did not fix your problem?

Can you rephrase your question? I’m not sure what you want to ask here.

The URL is not messed up. The thing with the + is a transformation of Debian package names in an attempt to make it possible to store them on filesystems that do not allow the + character. So this is a feature and not a bug.

The fix should be: run apt update. If that didn’t fix it, then I’d be interested to see your console output of your apt update execution.

Also, maybe your system is “interesting” in other ways. Would you mind pasting the output of sudo reform-check?

Nebula-System · April 16, 2025, 9:54pm

absolutely, i can’t tell you how many times i’ve seen others have a similar problem, fix it on their own, and then the solution’s lost lol.

gotcha, i had a feeling that was the case.

it just said that it was missing that package when i ran apt upgrade, along with a few other things. here’s the list:

flash-kernel_3.109+reform1_arm64.deb
linux-headers-6.12.22-common_6.12.22-1+reform20250412T175526Z_all.deb
linux-libc-dev_6.12.22-1+reform20250412T175526Z_all.deb
reform2-lpc-dkms_1.71-1+reform1_all.deb
reform-tools_1.71-1+reform1_all.deb

it was a bunch from the pool/main/l/linux folder of the repo

apt update did not fix the issue. i fixed it by manually downloading and using dpkg -i to install the errored package deb files as that seemed like the best option and i didn’t want to risk anything else that seemed important get left out.

since i was manually installing i wanted to check if those deb files were for any Reform, and not a specific version, since there was multiples of some with similar names, and i was curious as to which were 100% the correct ones, but i just downloaded the ones that matched what APT was asking for, and forgot to edit that i figured it out myself

i had a feeling

and yeah it didn’t. here’s sudo apt update’s output:

nebula@The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods:~$ sudo apt update
Get:1 http://deb.debian.org/debian unstable InRelease [205 kB]
Get:2 http://deb.debian.org/debian unstable/main arm64 Packages.diff/Index [63.6 kB]
Ign:3 https://mntre.com/reform-debian-repo reform InRelease
Get:4 http://deb.debian.org/debian unstable/main Translation-en.diff/Index [63.6 kB]
Get:5 http://deb.debian.org/debian unstable/main all Contents (deb).diff/Index [63.8 kB]
Hit:6 https://mntre.com/reform-debian-repo reform Release                                                              
Get:7 http://deb.debian.org/debian unstable/main arm64 Contents (deb).diff/Index [63.9 kB]                             
Get:8 http://deb.debian.org/debian unstable/main arm64 Components [4,684 kB]                                           
Ign:9 https://mntre.com/reform-debian-repo reform Release.gpg                                                          
Get:10 http://deb.debian.org/debian unstable/main Icons (48x48) [3,758 kB]                                             
Get:11 http://deb.debian.org/debian unstable/main Icons (64x64) [7,711 kB]                                             
Get:12 http://deb.debian.org/debian unstable/main arm64 Packages [10.1 MB]                                             
Get:13 http://deb.debian.org/debian unstable/main Translation-en [7,419 kB]                                            
Get:14 http://deb.debian.org/debian unstable/main all Contents (deb) [42.3 MB]                                         
Get:15 http://deb.debian.org/debian unstable/main arm64 Contents (deb) [14.9 MB]                                       
Fetched 91.3 MB in 1min 5s (1,409 kB/s)                                                                                
11 packages can be upgraded. Run 'apt list --upgradable' to see them.
Notice: Missing Signed-By in the sources.list(5) entry for 'https://mntre.com/reform-debian-repo'
Notice: Missing Signed-By in the sources.list(5) entry for 'http://deb.debian.org/debian'

and here’s sudo apt upgrade’s output as well, which, by the way, is a bit different than it was before as i manually installed most of what it wanted that it didn’t get on its own, so there’s less errors, tho the errors are the same ones.

nebula@The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods:~$ sudo apt upgrade
The following package was automatically installed and is no longer required:
  reform-qcacld2-6.12.21-mnt-reform-arm64
Use 'sudo apt autoremove' to remove it.

Upgrading:
  bind9-dnsutils  bind9-libs  libfuse3-4     linux-image-mnt-reform-arm64  python3-zeroconf
  bind9-host      fuse3       libnghttp2-14  python3-tqdm                  reform-qcacld2

Installing dependencies:
  linux-image-6.12.22-mnt-reform-arm64  reform-qcacld2-6.12.22-mnt-reform-arm64

Suggested packages:
  firmware-linux-free  linux-doc-6.12  debian-kernel-handbook

Not upgrading:
  linux-headers-mnt-reform-arm64

Summary:
  Upgrading: 10, Installing: 2, Removing: 0, Not Upgrading: 1
  Download size: 74.8 MB
  Space needed: 152 MB / 1,663 GB available
  └─ in /boot:  91.8 MB / 279 MB available

Continue? [Y/n] y
Get:1 http://deb.debian.org/debian unstable/main arm64 libnghttp2-14 arm64 1.64.0-1.1 [71.4 kB]
Get:2 http://deb.debian.org/debian unstable/main arm64 bind9-dnsutils arm64 1:9.20.8-1 [156 kB]
Get:3 http://deb.debian.org/debian unstable/main arm64 bind9-host arm64 1:9.20.8-1 [52.1 kB]
Get:4 http://deb.debian.org/debian unstable/main arm64 bind9-libs arm64 1:9.20.8-1 [1,093 kB]
Get:5 http://deb.debian.org/debian unstable/main arm64 fuse3 arm64 3.17.1+git250416-1 [39.3 kB]
Get:6 http://deb.debian.org/debian unstable/main arm64 libfuse3-4 arm64 3.17.1+git250416-1 [92.8 kB]
Err:7 https://mntre.com/reform-debian-repo reform/main arm64 linux-image-6.12.22-mnt-reform-arm64 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Get:8 http://deb.debian.org/debian unstable/main arm64 python3-tqdm all 4.67.1-4 [90.8 kB]
Get:9 http://deb.debian.org/debian unstable/main arm64 python3-zeroconf all 0.146.5-1 [82.1 kB]
Err:10 https://mntre.com/reform-debian-repo reform/main arm64 linux-image-mnt-reform-arm64 arm64 6.12.22-1+reform20250411T055815Z
  404  Not Found [IP: 91.250.115.15 443]
Err:11 https://mntre.com/reform-debian-repo reform/main arm64 reform-qcacld2-6.12.22-mnt-reform-arm64 arm64 20250411T215357Z
  404  Not Found [IP: 91.250.115.15 443]
Err:12 https://mntre.com/reform-debian-repo reform/main arm64 reform-qcacld2 arm64 20250411T215357Z
  404  Not Found [IP: 91.250.115.15 443]
Fetched 1,678 kB in 1s (2,040 kB/s)                               
Error: Failed to fetch https://mntre.com/reform-debian-repo/pool/main/l/linux/linux-image-6.12.22-mnt-reform-arm64_6.12.22-1%2breform20250411T055815Z_arm64.deb  404  Not Found [IP: 91.250.115.15 443]
Error: Failed to fetch https://mntre.com/reform-debian-repo/pool/main/l/linux/linux-image-mnt-reform-arm64_6.12.22-1%2breform20250411T055815Z_arm64.deb  404  Not Found [IP: 91.250.115.15 443]
Error: Failed to fetch https://mntre.com/reform-debian-repo/pool/main/r/reform-qcacld2-6.12.22-mnt-reform-arm64/reform-qcacld2-6.12.22-mnt-reform-arm64_20250411T215357Z_arm64.deb  404  Not Found [IP: 91.250.115.15 443]
Error: Failed to fetch https://mntre.com/reform-debian-repo/pool/main/r/reform-qcacld2/reform-qcacld2_20250411T215357Z_arm64.deb  404  Not Found [IP: 91.250.115.15 443]
Error: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

and here’s sudo reform-check’s output:

nebula@The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods:~$ sudo reform-check
I: Contents of /proc/device-tree/model: MNT Pocket Reform with BPI-CM4 Module
I: `uname -a` output: Linux The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods 6.12.21-mnt-reform-arm64 #1 SMP Debian 6.12.21-1+reform20250403T221306Z (2025-04-03) aarch64 GNU/Linux
I: Version of linux-image-mnt-reform-arm64: 6.12.21-1+reform20250403T221306Z
I: Version of reform-tools: 1.71-1+reform1
I: Mount source of /: /dev/reformvg/root (LVM vg 'reformvg' on LUKS device 'reform_crypt' on SSD)
I: Mount source of /boot: /dev/mmcblk1p1 (eMMC)
W: MNT Reform Desktop meta-package is not installed: reform-desktop-full
dpkg-query: no packages found matching reform-desktop-full
dpkg-query: no packages found matching reform-desktop-full
dpkg-query: no packages found matching reform-desktop-full
W: MNT Reform Desktop meta-package is not installed: reform-desktop-minimal
dpkg-query: no packages found matching reform-desktop-minimal
dpkg-query: no packages found matching reform-desktop-minimal
dpkg-query: no packages found matching reform-desktop-minimal
E: root account has no password (maybe run passwd -l root)
I: kernel boot parameters your system does use but which are not the default:
 + fbcon=font:TER16x32

josch · April 17, 2025, 7:09am

Oh wow. Okay, now we have two problems.

Could you also please post the contents of your /etc/apt/sources.list and any potential files inside the /etc/apt/sources.list.d directory?

Your apt update output says that apt is ignoring the MNT repository and that explains why the hashes apt knows about do not get updated to their actual values. Now we have to figure out why apt decides to ignore the repo…

Nebula-System · April 17, 2025, 4:56pm

here’s sources.list.d:

nebula@The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods:/etc/apt/sources.list.d$ cat *
Types: deb
URIs: https://mntre.com/reform-debian-repo
Suites: reform
Components: main
Architectures: arm64
Trusted: yes
# Modernized from /etc/apt/sources.list
Types: deb
URIs: http://deb.debian.org/debian/
Suites: unstable
Components: main  non-free-firmware
Signed-By:

and the only other file was sources.list.bak, instead of sources.list, which reads this:

nebula@The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods:/etc/apt$ cat sources.list.bak
deb http://deb.debian.org/debian unstable main non-free-firmware

would it be safe to assume i need to change that extension to remove the .bak and then things should just magically work?

josch · April 17, 2025, 5:26pm

Hrm… there are a few oddities in your sources.list. Can you post the output of:

apt-cache policy

And this one is a lot:

apt-get indextargets

Nebula-System · April 17, 2025, 5:57pm

here’s the cache policy:

nebula@The-Reform-Titan-Of-Horrors-Entropys-Paradox-And-Doom-Of-Gods:~$ sudo apt-cache policy
Package files:
 100 /var/lib/dpkg/status
     release a=now
 500 http://deb.debian.org/debian unstable/non-free-firmware arm64 Packages
     release o=Debian,a=unstable,n=sid,l=Debian,c=non-free-firmware,b=arm64
     origin deb.debian.org
 500 http://deb.debian.org/debian unstable/main arm64 Packages
     release o=Debian,a=unstable,n=sid,l=Debian,c=main,b=arm64
     origin deb.debian.org
 990 https://mntre.com/reform-debian-repo reform/main arm64 Packages
     release a=reform,n=reform,l=reform,c=main,b=arm64
     origin mntre.com
Pinned packages:

here’s the index targets:

MetaKey: main/binary-arm64/Packages
ShortDesc: Packages
Description: https://mntre.com/reform-debian-repo reform/main arm64 Packages
URI: https://mntre.com/reform-debian-repo/dists/reform/main/binary-arm64/Packages
Filename: /var/lib/apt/lists/mntre.com_reform-debian-repo_dists_reform_main_binary-arm64_Packages
Optional: no
KeepCompressed: no
Codename: reform
Label: reform
Suite: reform
Trusted: yes
Architecture: arm64
Base-URI: https://mntre.com/reform-debian-repo/dists/reform/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Packages
DefaultEnabled: yes
Fallback-Of: 
Identifier: Packages
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: reform
Repo-URI: https://mntre.com/reform-debian-repo/
Site: https://mntre.com/reform-debian-repo
Sourcesentry: /etc/apt/sources.list.d/mntre.sources:1
Target-Of: deb

MetaKey: main/Contents-arm64
ShortDesc: Contents-arm64
Description: https://mntre.com/reform-debian-repo reform/main arm64 Contents (deb)
URI: https://mntre.com/reform-debian-repo/dists/reform/main/Contents-arm64
Filename: /var/lib/apt/lists/mntre.com_reform-debian-repo_dists_reform_main_Contents-arm64.lz4
Optional: yes
KeepCompressed: yes
Codename: reform
Label: reform
Suite: reform
Trusted: yes
Architecture: arm64
Base-URI: https://mntre.com/reform-debian-repo/dists/reform/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Contents-deb
DefaultEnabled: yes
Fallback-Of: 
Identifier: Contents-deb
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: reform
Repo-URI: https://mntre.com/reform-debian-repo/
Site: https://mntre.com/reform-debian-repo
Sourcesentry: /etc/apt/sources.list.d/mntre.sources:1
Target-Of: deb

MetaKey: main/binary-arm64/Packages
ShortDesc: Packages
Description: http://deb.debian.org/debian unstable/main arm64 Packages
URI: http://deb.debian.org/debian/dists/unstable/main/binary-arm64/Packages
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_binary-arm64_Packages
Optional: no
KeepCompressed: no
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: arm64
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Packages
DefaultEnabled: yes
Fallback-Of: 
Identifier: Packages
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: main/i18n/Translation-en
ShortDesc: Translation-en
Description: http://deb.debian.org/debian unstable/main Translation-en
URI: http://deb.debian.org/debian/dists/unstable/main/i18n/Translation-en
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_i18n_Translation-en
Optional: yes
KeepCompressed: no
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Translations
DefaultEnabled: yes
Fallback-Of: 
Identifier: Translations
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
Language: en
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: main/dep11/Components-arm64.yml
ShortDesc: Components-arm64
Description: http://deb.debian.org/debian unstable/main arm64 Components
URI: http://deb.debian.org/debian/dists/unstable/main/dep11/Components-arm64.yml
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_dep11_Components-arm64.yml.gz
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: arm64
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: DEP-11
DefaultEnabled: yes
Fallback-Of: 
Identifier: DEP-11
KeepCompressedAs: gz uncompressed
Native-Architecture: arm64
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: main/dep11/icons-48x48.tar
ShortDesc: icons-48x48
Description: http://deb.debian.org/debian unstable/main Icons (48x48)
URI: http://deb.debian.org/debian/dists/unstable/main/dep11/icons-48x48.tar
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_dep11_icons-48x48.tar.gz
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: DEP-11-icons-small
DefaultEnabled: yes
Fallback-Of: 
Identifier: DEP-11-icons-small
KeepCompressedAs: gz uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: main/dep11/icons-64x64.tar
ShortDesc: icons-64x64
Description: http://deb.debian.org/debian unstable/main Icons (64x64)
URI: http://deb.debian.org/debian/dists/unstable/main/dep11/icons-64x64.tar
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_dep11_icons-64x64.tar.gz
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: DEP-11-icons
DefaultEnabled: yes
Fallback-Of: 
Identifier: DEP-11-icons
KeepCompressedAs: gz uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: main/Contents-arm64
ShortDesc: Contents-arm64
Description: http://deb.debian.org/debian unstable/main arm64 Contents (deb)
URI: http://deb.debian.org/debian/dists/unstable/main/Contents-arm64
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_Contents-arm64.lz4
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: arm64
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Contents-deb
DefaultEnabled: yes
Fallback-Of: 
Identifier: Contents-deb
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: main/Contents-all
ShortDesc: Contents-all
Description: http://deb.debian.org/debian unstable/main all Contents (deb)
URI: http://deb.debian.org/debian/dists/unstable/main/Contents-all
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_Contents-all.lz4
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: all
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: main
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Contents-deb
DefaultEnabled: yes
Fallback-Of: 
Identifier: Contents-deb
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/binary-arm64/Packages
ShortDesc: Packages
Description: http://deb.debian.org/debian unstable/non-free-firmware arm64 Packages
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/binary-arm64/Packages
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_binary-arm64_Packages
Optional: no
KeepCompressed: no
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: arm64
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Packages
DefaultEnabled: yes
Fallback-Of: 
Identifier: Packages
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/i18n/Translation-en
ShortDesc: Translation-en
Description: http://deb.debian.org/debian unstable/non-free-firmware Translation-en
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/i18n/Translation-en
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_i18n_Translation-en
Optional: yes
KeepCompressed: no
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Translations
DefaultEnabled: yes
Fallback-Of: 
Identifier: Translations
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
Language: en
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/dep11/Components-arm64.yml
ShortDesc: Components-arm64
Description: http://deb.debian.org/debian unstable/non-free-firmware arm64 Components
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/dep11/Components-arm64.yml
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_dep11_Components-arm64.yml.gz
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: arm64
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: DEP-11
DefaultEnabled: yes
Fallback-Of: 
Identifier: DEP-11
KeepCompressedAs: gz uncompressed
Native-Architecture: arm64
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/dep11/icons-48x48.tar
ShortDesc: icons-48x48
Description: http://deb.debian.org/debian unstable/non-free-firmware Icons (48x48)
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/dep11/icons-48x48.tar
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_dep11_icons-48x48.tar.gz
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: DEP-11-icons-small
DefaultEnabled: yes
Fallback-Of: 
Identifier: DEP-11-icons-small
KeepCompressedAs: gz uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/dep11/icons-64x64.tar
ShortDesc: icons-64x64
Description: http://deb.debian.org/debian unstable/non-free-firmware Icons (64x64)
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/dep11/icons-64x64.tar
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_dep11_icons-64x64.tar.gz
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: DEP-11-icons
DefaultEnabled: yes
Fallback-Of: 
Identifier: DEP-11-icons
KeepCompressedAs: gz uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/Contents-arm64
ShortDesc: Contents-arm64
Description: http://deb.debian.org/debian unstable/non-free-firmware arm64 Contents (deb)
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/Contents-arm64
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_Contents-arm64.lz4
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: arm64
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Contents-deb
DefaultEnabled: yes
Fallback-Of: 
Identifier: Contents-deb
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

MetaKey: non-free-firmware/Contents-all
ShortDesc: Contents-all
Description: http://deb.debian.org/debian unstable/non-free-firmware all Contents (deb)
URI: http://deb.debian.org/debian/dists/unstable/non-free-firmware/Contents-all
Filename: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_non-free-firmware_Contents-all.lz4
Optional: yes
KeepCompressed: yes
Codename: sid
Label: Debian
Origin: Debian
Suite: unstable
Trusted: yes
Architecture: all
Base-URI: http://deb.debian.org/debian/dists/unstable/
By-Hash: yes
Component: non-free-firmware
CompressionTypes: xz bz2 lzma gz lz4 zst uncompressed
Created-By: Contents-deb
DefaultEnabled: yes
Fallback-Of: 
Identifier: Contents-deb
KeepCompressedAs: lz4 zst gz xz bz2 lzma uncompressed
PDiffs: yes
Release: unstable
Repo-URI: http://deb.debian.org/debian/
Site: http://deb.debian.org/debian
Sourcesentry: /etc/apt/sources.list.d/moved-from-main.sources:1
Target-Of: deb

josch · April 17, 2025, 6:05pm

There is your problem. Your sources.list does not have two entries. It has only a single entry. There is an empty line missing where you have the # Modernized from... comment. You can see that apt considers this only a single entry from your indextargets output. The field Sourcesentry always has the same value for line 1 and never references a second stanza.

You can fix this by adding an empty line before or after the comment.

Did you create your sources.list manually or using modernize-sources?

josch · April 17, 2025, 7:17pm

Actually, there is even more. According to your indextargets output you have these files:

/etc/apt/sources.list.d/mntre.sources
/etc/apt/sources.list.d/moved-from-main.sources

Which of those two did you share when you said that this is “sources.list.d”?

josch · April 17, 2025, 7:19pm

Scratch what I wrote above. The forum view is so narrow that I didn’t see that what you ran was cat * and then of course there is no newline… Let me update this post with new thoughts about what is going on here…

EDIT:

Nope, I’m stumped. Assuming that your output indeed came from both mntre.sources (before the comment) and moved-from-main.sourcces (after the comment) your sources.list look just fine. And I cannot fathom why apt retains wrong hashes for packages even though you ran apt update before each of your apt upgrades. Maybe you were unlucky once and ran apt update while the mirror was updating and then sure, things are out-of-sync. But it would be very unlikely that the same thing happened for your second apt update && apt upgrade run as well. And for me, the contents of the mntre.com mirror look just fine… I’ll keep thinking about this but I do not have an idea right now.

Also, the actual underlying problem why you get different hashes for the same package is that the reform-debian-packages scripts rebuild packages with the timestamp of the latest git commit without bumping the package version. There are different ways to fix this but until I have decided for one and implemented it, running apt update before eachc apt upgrade is usually what prevents issues… hrm…

Nebula-System · April 17, 2025, 10:44pm

i guess let me know what to do to fix this, even if it’s “manually install this keyring and it should work itself out”. for now sudo apt upgrade --fix-missing has been working to upgrade my other packages, so i can keep using that while you come up with a concise fix for this.

as for this i didn’t make that manually, it was there as the sources.list.bak (as i said before) and i think at one point i ran modernize sources to make sure the Pocket was up to date fully, but i can’t remember. i know i updated everything in wayfire, moved everything to the ssd encrypted, then updated everything again, installed gnome, updated, then deleted sway. i think during that saga i did modernize sources right after moving things to the nvme, but i can’t remember.

also i hope this all isn’t driving you crazy, i have a tendency to run into really messy corner cases when things do go wrong, albeit rarely, and usually i can fix them on my own, but not here, so thanks a ton for the help so far.

josch · April 18, 2025, 1:02pm

Thank you for helping me to get to the bottom of this. I since found an open bug against apt which looks very similar to the problem you describe:

I just manually triggered the reform-debian-packages pipeline. If you now run apt update && apt full-upgrade, do you see the same problem you reported earlier?