Debian 12 min failed md5 checksum

[PostedPortal]

I’m using debsums package to verify md5 signatures for integrity of all binaries and packages.

One of the failed items was /etc/apt/sources.list.d/qubes-r4.list

Should we be concerned?

Furthermore are there any debsums equivalent for fedora?

thanks

[apparatus]

@PostedPortal

One of the failed items was /etc/apt/sources.list.d/qubes-r4.list

Should we be concerned?

Maybe you’ve changed it before?

@PostedPortal

Furthermore are there any debsums equivalent for fedora?

Verifying installation

Not sure if the category is good, feel free to reassign where it belongs. Maintaining OEM disk image, which is standard ISO installation + additional packages + updates + tweaks to provide up to date templates, is not an easy task. Doing so comes with a lot of valid questions from end users on integrity, and providing proof/auditability is also not so easy, but interesting in itself and a filed of needed improvements. I’m posting here to try to get an understanding of what touches what after …

[PostedPortal]

Nope, i dont have the technical know how to change that lol. The only thing i have installed is signal

[apparatus]

You can compare it with the default to see what’s changed:

QubesOS/qubes-core-agent-linux/blob/main/package-managers/apt-qubes-r4.list.in