Skip to content

kernel: get past the CDN's cache for sha256sums.asc, and wait for a release to be listed - #81

Merged
fcuny merged 1 commit into
mainfrom
wt/kernel-checksum-cdn
Oct 31, 2026
Merged

fcuny merged 1 commit into
mainfrom
wt/kernel-checksum-cdn

Conversation

@fcuny

@fcuny fcuny commented Oct 30, 2026

Copy link
Copy Markdown
Owner

The daily update failed on 7.3.1: cdn.kernel.org served an old copy of sha256sums.asc that didn't list it, 90 minutes after kernel.org's server had it.

Changes to fetch in kernel/lib.sh, which build.sh uses too:

  • sha256sums.asc is fetched with a query string, which gets past the CDN's cache (x-cache: MISS).
  • If the release isn't listed, it tries again for 10 minutes (kernel.org lists it a few minutes after publishing the tarball), then says it isn't listed. The download is kept; only a real mismatch removes it.
  • curl --retry 3 on both downloads.

Tested in a Debian VM, with sleep stubbed: 7.3.1 checks out, an unlisted release retries then fails and keeps the tarball, and a corrupt tarball is removed.

🤖 Generated with Claude Code

…elease to be listed

The daily update failed on 7.3.1: cdn.kernel.org served a copy of
sha256sums.asc from before kernel.org listed it, an hour and a half
after it had. A query string gets past the cache. kernel.org also
lists a release a few minutes after it publishes it, so fetch tries
for 10 minutes before it gives up, and says the release isn't listed
rather than that its checksum is bad, without removing the download.

The downloads retry on transient errors too.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@fcuny
fcuny marked this pull request as ready for review October 31, 2026 19:16
@fcuny
fcuny merged commit bb89948 into main Oct 31, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant