From Fedora Project Wiki

Associated release criterion
This test case is associated with the Basic_Release_Criteria#correct-checksums release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion. If so, please file a bug and nominate it as blocking the appropriate milestone, using the blocker bug nomination page.
Associated release criterion
This test case is associated with the Fedora_42_Final_Release_Criteria#image-consistency-verification release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion. If so, please file a bug and nominate it as blocking the appropriate milestone, using the blocker bug nomination page.


Description

This test is intended to verify that the posted ISO media matches the published SHA-256 checksum. Additionally, for ISO media that includes an embedded MD5 checksum, this test verifies that checkisomd5 (used by the installer) correctly locates and verifies the embedded MD5 sum.

Setup

  1. Download the .iso media files you need to test
  2. Download the matching CHECKSUM file. For example, Fedora-42-i386-CHECKSUM.

How to test

  1. Validate that the published CHECKSUM matches the downloaded ISO files by running the command sha256sum. For example, you might type: <pre<noinclude></noinclude>>sha256sum -c Fedora-42-i386-CHECKSUM</pre<noinclude></noinclude>>
  2. Validate the md5sum imprinted inside the ISO images. First, install the isomd5sum package and then check all ISO files using the checkisomd5 command, for example:
    for ISO in Fedora-*.iso ; do echo "= $ISO =" ; checkisomd5 $ISO ; echo; done

Expected Results

  1. The command sha256sum should return OK results. For example: <pre<noinclude></noinclude>>$ sha256sum -c Fedora-42-i386-CHECKSUM Fedora-42-i386-DVD.iso: OK Fedora-42-i386-netinst.iso: OK</pre<noinclude></noinclude>>
  2. The command checkisomd5 should either return:
    The media check is complete, the result is: PASS.
    It is OK to use this media.

    or:

    The media check is complete, the result is: NA.
    No checksum information available, unable to verify media.