md5sum error for latest

I am trying to install the latest copy of nextcloud. After I download and when try to do md5sum -c I am seeing errors saying latest.metadata: no such file or directory.
Here is the error.
md5sum -c latest.tar.bz2.md5 < latest.tar.bz2
latest.tar.bz2: OK
md5sum: latest.metadata: No such file or directory
latest.metadata: FAILED open or read
md5sum: WARNING: 1 listed file could not be read

Is there a fix for this or any workaround? Thanks.

Support intro

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 29.0.5): replace me
Operating system and version (eg, Ubuntu 24.04): replace me
Apache or nginx version (eg, Apache 2.4.25): replace me
PHP version (eg, 8.3): replace me

The issue you are facing:

Is this the first time you’ve seen this error? (Y/N):

Steps to replicate it:

The output of your Nextcloud log in Admin > Logging:

PASTE HERE

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

PASTE HERE

The output of your Apache/nginx/system log in /var/log/____:

PASTE HERE

Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

PASTE HERE

https://download.nextcloud.com/server/releases/
https://download.nextcloud.com/server/releases/latest.zip
https://download.nextcloud.com/server/releases/latest.zip.md5

0fc98fa472670240fd935fb7e2e647e0  latest.zip
2773729c4c1e1a11ddb0f0fa06d17101  latest.metadata

I think there is no point in trying to check this file as it does not exist. But maybe someone can explain why this file is in the MD5 file at all.

I think it is sufficient if you calculate the MD5 of latest.zip and then compare it with the entry in latest.zip.md5.

It is questionable whether this review really makes sense. The checksum is located on the same server as the ZIP file. If an attacker has access to the download server, he can of course exchange the ZIP file and the checksum at the same time.

It might be possible to increase security if the MD5 checksums were also published e.g. here at GitHub. Better only on GitHub and not at all on the download server to force the check via a second server. That wouldn’t be a really big effort. Here a hack of Linux Mint from 2016 in case you need reasons why this might make sense. Of course, if you don’t check the ZIP file at all, none of this will help.

1 Like

I’m not sure what this metadata file is supposed to be, especially since it doesn’t even seem to be available for download. But I’m no expert in this area.

So, like @devnull said, I’d say just ignore the metadata checksum and only compare the checksm for the latest.zip file, either manually or if you want to use it in a script, you could use the following command:

head -n 1 "latest.zip.md5" | awk -v file="latest.zip" '{print $1, file}' | md5sum -c

The metadata file is new for >=30.0.0. There is one for that release:

https://download.nextcloud.com/server/releases/nextcloud-30.0.0.metadata

Appears associated with the new occ migrations:preview command.

1 Like

Ah right, and it actually works with latest.zip and latest-30.zip as well if you download it to the same location and rename it accordingly.

$ md5sum -c latest.zip.md5 < latest.zip
latest.zip: OK
latest.metadata: OK

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.