Description

This test is intended to verify that the posted ISO media matches the published sha256sum ^[1]. Additionally, for ISO media that includes an embedded MD5 ^[2] checksum, this test verifies that checkisomd5 (used by the installer) correctly locates and verifies the embedded MD5 sum.

Setup

1. Download the .iso media files you wish to test
2. Download the matching CHECKSUM file. For example, Fedora-18-i386-CHECKSUM.

How to test

1. Validate that the published CHECKSUM matches the downloaded ISO files by running the command sha256sum. For example, you might type:

   sha256sum -c Fedora-15-i386-CHECKSUM

2. For all DVD.iso, boot.iso and Live.iso images, validate the md5sum imprinted inside the ISO image. When testing Multi-Install.iso or Multi-Desktop.iso DVD images, this step does not apply. First, install the isomd5sum package by typing: yum install isomd5sum. Next, to check all ISO files using the checkisomd5 command, you might type:

   for ISO in Fedora-*.iso ; do echo "= $ISO =" ; checkisomd5 $ISO ; echo; done

Expected Results

1. The command sha256sum should return OK results. For example:

   $ sha256sum -c Fedora-15-i386-CHECKSUM
   Fedora-15-i386-DVD.iso: OK
   Fedora-15-i386-netinst.iso: OK

2. The command checkisomd5, when run against installation or Live ISO images should indicate that it is OK to use this media for each ISO image. For example:

   The media check is complete, the result is: PASS.
   
   It is OK to use this media.

   The command checkisomd5, when run against ISO images that do not embed a MD5 sum, such as Multi-Install.iso or Multi-Desktop.iso, should indicate that No checksum information available, unable to verify media.. For example:

   The media check is complete, the result is: NA.
   
   No checksum information available, unable to verify media.

References

1. ↑ https://secure.wikimedia.org/wikipedia/en/wiki/SHA-2
2. ↑ https://secure.wikimedia.org/wikipedia/en/wiki/MD5