• Type: Bug
    • Status: Resolved
    • Priority: Normal
    • Resolution: Not a Bug
    • Affects Version/s: 5.4.1
    • Fix Version/s: None
    • Component/s: Debian
    • Environment:

      We are running Artifactory Professional 5.4.1 rev 50054
      OS: Ubuntu 14.04.5 LTS
      HW: Dual CPU 24 cores, 250G ram


      We have set up a remote repo that looks like this

      Package Type: Debian
      Repository Path:
      Repository Layout: maven-2-default
      Remote Repository URL:

      Which we are using frequently to build docker containers that are based on different versions of Ubuntu. Right now we are seeing a lot of problem with "Hash sum mismatch" when trying to fetch and install packages from this repo. It happens both for index files, all Ubuntu versions, and individual packages, mostly for Ubuntu 16.04 packages.

      We have tried various workarounds like doing "sudo rm -rf /var/lib/apt/lists/*" before apt-get clean, update and install.
      We have tried to add different configurations for apt like

      { \"gz\", \"bz2\"; }

      Acquire::ForceHash "sha1";
      to a file in /etc/apt/apt.conf.d/

      Sometimes it seems to help for awhile but we keep ending up with the hash sum mismatch problem, sometimes we can get a few Docker builds through if we do Zap cache, but it usually doesn't last for long.

      I have tried to verify the hash sums that apt-get claims is not matching up but I have not been able see any thing strange there. If I fetch the packages manually and compare the hash sums with the values in Artifactory it all seems to match. And the same correct hashes are visible in the apt-get command when I enable debug printouts for apt-get.

      If we skip our Artifactory server and use the Ubuntu repository directly we never see these problems.

      We are kind of stuck here and not really sure what to do, any insights would be appreciated. And I would be happy to supply more information.




            jens.look Jens Löök
            2 Vote for this issue
            2 Start watching this issue