pkg.sh: Use md5 for the dput hash option #158

Merged
Jan Lindemann merged 1 commit from jan/fix/20261027-pkg-sh-use-md-for-the-dput-hash-option into master 2026-10-27 08:27:58 +01:00 AGit

2026-10-27

pkg.sh: Use md5 for the dput hash option
All checks were successful
CI / Packaging - Kali Linux (pull_request) Successful in 5m0s
CI / Packaging - OpenSUSE Tumbleweed (pull_request) Successful in 5m8s
CI / Packaging test (pull_request) Successful in 0s
CI / Packaging - Kali Linux (push) Successful in 4m59s
CI / Packaging - OpenSUSE Tumbleweed (push) Successful in 4m58s
CI / Packaging test (push) Successful in 0s
Tonight's CI upgraded dput from 1.2.4 to 1.2.6 on Kali Linux and
subsequently failed:

  xzcat /tmp/20261027-010000-rollout-failed.log.xz | grep -ai -C 1 checksum
  Trying to upload package to janware-debian
  Checksum doesn't match for dist/src/jw-pkg_1.0.0-281.dsc
  make[1]: *** [make/pkg-dist.mk:288: pkg-release-reinstall] Error 1

The dput config generated for debian uploads sets hash = sha, while the
Files: section of a .changes file only carries MD5 checksums. dput verifies
each listed file by comparing the configured hash of the file against
that MD5 column, so a sha verification can never match and the upload is
rejected at the first file, the .dsc.

Set the option to md5, the only hash the .changes Files: section carries
and dput's built-in default.

Not sure, yet, if this is a fix or a workaround of a dput bug.

Assisted-by: unsloth/Qwen3.8-27B-GGUF:Q4_K_M with pi.dev v1.4.0
Signed-off-by: Jan Lindemann <jan@janware.com>
2026-10-27 08:17:43 +01:00