From Fedora Project Wiki
Description
This test is intended to verify that the posted images match the published SHA-256 checksums. Additionally, for ISO media that includes an embedded MD5 checksum, this test verifies that checkisomd5
(used by the installer) correctly locates and verifies the embedded MD5 sum.
Setup
- Download the image files you need to test
- Download the matching CHECKSUM file (normally located in the same directory as the image files). For example,
Fedora-Workstation-42_Beta-1.4-CHECKSUM
(the filename is different for each Fedora edition and compose version).
How to test
- Validate that the published CHECKSUM matches the downloaded image files by running the command
sha256sum
. For example, you might type:sha256sum -c Fedora-Workstation-42_Beta-1.4-CHECKSUM
- If validating ISO image(s) with embedded checksum(s), validate these. First, install the
isomd5sum
package and then check all ISO files using thecheckisomd5
command, for example:for ISO in Fedora-*.iso ; do echo "= $ISO =" ; checkisomd5 $ISO ; echo; done
Expected Results
- The command
sha256sum
should return OK results. For example:$ sha256sum -c Fedora-Workstation-42_Beta-1.4-CHECKSUM Fedora-Server-netinst-x86_64-42_Beta-1.4.iso: OK Fedora-Server-dvd-x86_64-42_Beta-1.4.iso: OK
- The command
checkisomd5
should either return:The media check is complete, the result is: PASS. It is OK to use this media.
or:
The media check is complete, the result is: NA. No checksum information available, unable to verify media.