# Integrity check failed core -\> extra file -\> .rnd

**URL:** <https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958>\
**Category:** ℹ️ Support\
**Tags:** nc14, integrity-check\
**Created:** [November 25, 2018, 10:37pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958 "2018-11-25T22:37:29Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![wassallj](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wassallj/32/12092_2.png) [@wassallj](https://help.nextcloud.com/u/wassallj)\
**Post date:** [November 25, 2018, 10:37pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/1 "2018-11-25T22:37:30Z")

</div>

Typically would follow the standard support template but this issue seems generic and not OS dependent.

Fresh install of 14.0.4 on Ubuntu 18.10. Getting an integrity check fail but I can’t seem to pinpoint what’s causing it. Initially had it fail because of the tar archive left in the web-root but upon removing that, its complaining about a `.rnd` file. I had a suspicion this was related to the first fail so I wiped the directory and started fresh. Everything else works fine but it’s bugging me that I can’t seem to pinpoint what is causing the issue.

```auto
Results
=======
- core
	- EXTRA_FILE
		- .rnd

Raw output
==========
Array
(
    [core] => Array
        (
            [EXTRA_FILE] => Array
                (
                    [.rnd] => Array
                        (
                            [expected] =>

```

I can update this with additional information if necessary.

---

<div class="post-metadata">

**Author:** ![SuseB](https://help.nextcloud.com/letter_avatar/suseb/32/6_22734026db12803ebb3e059622ac3534.png) [@SuseB](https://help.nextcloud.com/u/SuseB)\
**Post date:** [November 26, 2018, 3:52pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/2 "2018-11-26T15:52:05Z")

</div>

I have the same problem,  
I wanted to update from 14.0.3 to 14.0.4 and get the error message,  
is there already a solution?

---

<div class="post-metadata">

**Author:** ![MichaIng](https://help.nextcloud.com/user_avatar/help.nextcloud.com/michaing/32/2125_2.png) [@MichaIng](https://help.nextcloud.com/u/MichaIng)\
**Post date:** [November 26, 2018, 5:26pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/3 "2018-11-26T17:26:00Z")

</div>

Either remove the .rnd file from Nextcloud dir or move out outside, run the update and move it inside again.

I guess something from the webserver or some other tool/system component creates it automatically, but Nextcloud does not like it.  
In case it needs to be added to the integrity check exclusion list.

You are both on Ubuntu 18.10?  
Which webserver do you use?

---

<div class="post-metadata">

**Author:** ![wassallj](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wassallj/32/12092_2.png) [@wassallj](https://help.nextcloud.com/u/wassallj)\
**Post date:** [November 26, 2018, 5:52pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/4 "2018-11-26T17:52:09Z")

</div>

Took a lot of digging around and having to `tree -a | grep .rnd` to find the two copies of that file to fix it. One was in the `ocs` folder and the other the web root. Strangely enough, the error page doesn’t give the location of the files which is odd since it did when I had the install tar. Is this a bug or?

Edit:

> [@MichaIng](#):
>
> Which webserver do you use?

Apache 2.4.34 with PHP 7.2.10.

Given how my issue was related to a clean install it doesn’t appear to be a update issue; perhaps it is Webserver related?

---

<div class="post-metadata">

**Author:** ![MichaIng](https://help.nextcloud.com/user_avatar/help.nextcloud.com/michaing/32/2125_2.png) [@MichaIng](https://help.nextcloud.com/u/MichaIng)\
**Post date:** [November 26, 2018, 7:47pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/5 "2018-11-26T19:47:20Z")

</div>

From the integrity check output I would have expected it at `/path/to/nextcloud/core/.rnd` 🤔. Not sure why the full path is not shown there.

Perhaps if it’s in webroot, it is excluded from the check, but not if inside a sub dir.  
Indeed, just checked, and I have `/path/to/nextcloud/.rnd` as well, but no integrity check issue.

Further research about where they come from: [https://askubuntu.com/a/379947](https://askubuntu.com/a/379947)

- Looks like from OpenSSL. According to the link you can safely remove them. Should be recreated automatically, if needed by OpenSSL.

---

<div class="post-metadata">

**Author:** ![SuseB](https://help.nextcloud.com/letter_avatar/suseb/32/6_22734026db12803ebb3e059622ac3534.png) [@SuseB](https://help.nextcloud.com/u/SuseB)\
**Post date:** [November 26, 2018, 8:44pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/6 "2018-11-26T20:44:07Z")

</div>

Have deleted the file .rnd in /path/to/nextcloud/ and then made the update. Everything works.

---

<div class="post-metadata">

**Author:** ![Tas-sos](https://help.nextcloud.com/user_avatar/help.nextcloud.com/tas-sos/32/4251_2.png) [@Tas-sos](https://help.nextcloud.com/u/Tas-sos)\
**Post date:** [August 8, 2019, 6:40am UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/7 "2019-08-08T06:40:28Z")

</div>

I’ll mention my own approach to this issue, just to help the next ones and so they do not to get confused.

I had a similar problem and it was solved by simply deleting these files (I _never restored them - I deleted them_)

### Details of my server

**Operating system** : Ubuntu server 16.04.6 LTS

**Web server:** Apache/2.4.39 (Ubuntu)

**Database:** MariaDB - 10.0.38

**PHP version:** 7.3.

Details mention here:

> <https://github.com/nextcloud/server/issues/16317#issuecomment-519381517>

So @MichaIng, I didn’t move it them inside again.  
@SuseB 👍

Thank you. 🙂

---

<div class="post-metadata">

**Author:** ![MiXiM](https://help.nextcloud.com/user_avatar/help.nextcloud.com/mixim/32/274_2.png) [@MiXiM](https://help.nextcloud.com/u/MiXiM)\
**Post date:** [August 16, 2019, 9:04am UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/8 "2019-08-16T09:04:52Z")

</div>

I just see the .rnd-file is written one time at login, but don’t know why.  
Is it an error of the Nextcloud or an error of webserver/operating system ?  
Ubuntu 18.04.2 LTS  
Nextcloud 16.0.4

---

<div class="post-metadata">

**Author:** ![MichaIng](https://help.nextcloud.com/user_avatar/help.nextcloud.com/michaing/32/2125_2.png) [@MichaIng](https://help.nextcloud.com/u/MichaIng)\
**Post date:** [August 16, 2019, 12:11pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/9 "2019-08-16T12:11:31Z")

</div>

It is a “feature” of OpenSSL to collect entropy/randomness if required for cryptography tasks, so for any certificate or key generation, encrypted network connection and such. However I never found one on my systems, no sure in which case these are used. Actually there are kernel files that provide entropy `/dev/random` and `/dev/urandom`. Probably OpenSSL (or the software that use its libs) create those files if the regular entropy pool is empty or if they don’t have permissions to access, not sure. Hard to find details about it.

Permissions would be actually a good reason. Lets say the webserver has no `/dev/urandom` access, so it (respectively OpenSSL, when being called) creates `.rnd` in your webroot to collect randomness there outside of `/dev/urandom`. Most likely the users home is used to store this file, which fits to other reports I found. The webserver usually runs as `www-data` with `/var/www` as its home dir. In your case the file is `/var/www/.rnd`, right?

If you are in mood to track it down, could you paste the following to check permissions:  
`ls -l /dev/*random`

---

<div class="post-metadata">

**Author:** ![kesselb](https://help.nextcloud.com/user_avatar/help.nextcloud.com/kesselb/32/74519_2.png) [@kesselb](https://help.nextcloud.com/u/kesselb)\
**Post date:** [August 16, 2019, 5:52pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/10 "2019-08-16T17:52:10Z")

</div>

Starting with Nextcloud 17 these files are ignored from integrity check and updater.

> <https://github.com/nextcloud/server/pull/16492>

  

> <https://github.com/nextcloud/updater/pull/236>

---

<div class="post-metadata">

**Author:** ![ygoe](https://help.nextcloud.com/letter_avatar/ygoe/32/6_22734026db12803ebb3e059622ac3534.png) [@ygoe](https://help.nextcloud.com/u/ygoe)\
**Post date:** [March 21, 2020, 8:47pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/11 "2020-03-21T20:47:07Z")

</div>

How can I exclude other files as well? It seems that this specific file was added to the product updater code. That doesn’t help anybody else. I have files that are part of the webserver infrastructure (cgi-bin directory with some files) and are impossible to remove because then PHP and Nextcloud would no longer execute (and even the web server fail to start). Can I specify these files (or the entire directory) somewhere myself without yet another product patch for my specific environment?

---

<div class="post-metadata">

**Author:** ![system](https://help.nextcloud.com/user_avatar/help.nextcloud.com/system/32/29333_2.png) [@system](https://help.nextcloud.com/u/system)\
**Post date:** [September 23, 2024, 4:51pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/12 "2024-09-23T16:51:30Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 9, 2024, 3:39pm UTC](https://help.nextcloud.com/t/integrity-check-failed-core-extra-file-rnd/41958/13 "2024-12-09T15:39:31Z")

</div>


