Disk image download links broken

Help and Support
1

Disk image download links on Download - OSMC are broken, e.g. 2018.12-1 links to OSMC_TGT_rbp2_20190105.img.gz and of course has the wrong (i.e. probably right) checksum.
Letting the web server index a directory containing the disk images would trivially resolve this and save all future effort maintaining links.

2

That’s the correct version.
Can you clarify what the problem is?

The 2018.12-1 release of OSMC was compiled as an image on 5th January 2019; 4 days after its release as an OTA update.

3

Look at the file name and link name of all other images. It’s a pattern; a little confusing on first look, admittedly. It’s fine.

@sam_nazarko I guess AJCxZ0 is irritated by the discrepancy of compiling date / file name and release name.

4

Sam,

I understand your point, however the mismatch of the dates gives the impression that these are different releases, since there is no other release or version indication, i.e. the date is the version to the end user.

It’s even more problematic that the checksum does not match, e.g.

|Release|Checksum (MD5)|
|2018.12-1|6eeeec53de4e983b4b710b92fcce8edb|

$ wget --no-proxy --verbose http://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving download.osmc.tv (download.osmc.tv)... 159.253.212.250
Connecting to download.osmc.tv (download.osmc.tv)|159.253.212.250|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mirrorservice.org/sites/edge.samnazarko.co.uk/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz [following]
--2019-03-16 15:42:33--  http://mirrorservice.org/sites/edge.samnazarko.co.uk/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving mirrorservice.org (mirrorservice.org)... 2001:630:341:12::184, 212.219.56.184
Connecting to mirrorservice.org (mirrorservice.org)|2001:630:341:12::184|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 185420666 (177M) [application/x-gzip]
Saving to: ‘OSMC_TGT_rbp2_20190105.img.gz’

OSMC_TGT_rbp2_20190 100%[===================>] 176.83M  7.97MB/s    in 21s     

2019-03-16 15:42:53 (8.54 MB/s) - ‘OSMC_TGT_rbp2_20190105.img.gz’ saved [185420666/185420666]

$ md5sum OSMC_TGT_rbp2_20190105.img.gz 
a5f48cb07cb9278960ff59bd48aba265  OSMC_TGT_rbp2_20190105.img.gz

While a different issue I should also mention that this image appears to have a problem gunzipping, since this could be related.

$ gunzip -v OSMC_TGT_rbp2_20190105.img.gz 
OSMC_TGT_rbp2_20190105.img.gz:	
gzip: OSMC_TGT_rbp2_20190105.img.gz: invalid compressed data--crc error
$ file OSMC_TGT_rbp2_20190105.img.gz
OSMC_TGT_rbp2_20190105.img.gz: gzip compressed data, was "OSMC_TGT_rbp2_20190105.img", last modified: Sat Jan  5 13:46:22 2019, from Unix
5

Your download appears to be corrupted. Can you try downloading the file again?

Sam

6

I notice the link is http:// ( which really should be https:// ), so trying again:

$ wget --no-proxy --no-check-certificate --verbose https://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
--2019-03-16 16:51:28--  https://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving download.osmc.tv (download.osmc.tv)... 159.253.212.250
Connecting to download.osmc.tv (download.osmc.tv)|159.253.212.250|:443... connected.
WARNING: no certificate subject alternative name matches
	requested host name ‘download.osmc.tv’.
HTTP request sent, awaiting response... 302 Found
Location: http://anorien.csc.warwick.ac.uk/mirrors/osmc/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz [following]
--2019-03-16 16:51:29--  http://anorien.csc.warwick.ac.uk/mirrors/osmc/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving anorien.csc.warwick.ac.uk (anorien.csc.warwick.ac.uk)... 137.205.124.72
Connecting to anorien.csc.warwick.ac.uk (anorien.csc.warwick.ac.uk)|137.205.124.72|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 185420666 (177M) [application/x-gzip]
Saving to: ‘OSMC_TGT_rbp2_20190105.img.gz’

OSMC_TGT_rbp2_20190 100%[===================>] 176.83M  9.80MB/s    in 20s     

2019-03-16 16:51:49 (8.90 MB/s) - ‘OSMC_TGT_rbp2_20190105.img.gz’ saved [185420666/185420666]

$ md5sum OSMC_TGT_rbp2_20190105.img.gz
a995549a240a9b3bd195a5781e50b2e8  OSMC_TGT_rbp2_20190105.img.gz

Tried the same download on another platform (Fedora 29, vs. Ubuntu 18.04) with exactly the same result.

$ wget --no-proxy --verbose https://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
...
2019-03-16 16:54:43 (8.53 MB/s) - ‘OSMC_TGT_rbp2_20190105.img.gz’ saved [185420666/185420666]

$ md5sum OSMC_TGT_rbp2_20190105.img.gz 
a995549a240a9b3bd195a5781e50b2e8  OSMC_TGT_rbp2_20190105.img.gz

Tried the same download from a client running another platform (RHEL 6) on a completely different network.

$ wget --no-proxy --no-check-certificate --verbose https://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
--2019-03-16 16:58:00--  https://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving download.osmc.tv... 159.253.212.250
Connecting to download.osmc.tv|159.253.212.250|:443... connected.
WARNING: no certificate subject alternative name matches
	requested host name “download.osmc.tv”.
HTTP request sent, awaiting response... 302 Found
Location: http://ftp.acc.umu.se/mirror/osmc.tv/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz [following]
--2019-03-16 16:58:00--  http://ftp.acc.umu.se/mirror/osmc.tv/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving ftp.acc.umu.se... 194.71.11.165, 194.71.11.173, 2001:6b0:19::173, ...
Connecting to ftp.acc.umu.se|194.71.11.165|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://gensho.ftp.acc.umu.se/mirror/osmc.tv/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz [following]
--2019-03-16 16:58:00--  http://gensho.ftp.acc.umu.se/mirror/osmc.tv/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving gensho.ftp.acc.umu.se... 194.71.11.176, 2001:6b0:19::176
Connecting to gensho.ftp.acc.umu.se|194.71.11.176|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 185420666 (177M) [application/x-gzip]
Saving to: “OSMC_TGT_rbp2_20190105.img.gz”

100%[======================================>] 185,420,666 14.8M/s   in 13s     

2019-03-16 16:58:14 (14.0 MB/s) - “OSMC_TGT_rbp2_20190105.img.gz” saved [185420666/185420666]

$ md5sum OSMC_TGT_rbp2_20190105.img.gz 
a995549a240a9b3bd195a5781e50b2e8  OSMC_TGT_rbp2_20190105.img.gz

I don’t think the problem is at my end, but I could be wrong. Let me know if you’d likely me to try something else. FWIW, the first download I tried was with a web browser.

7

That’s the checksum for the Pi1 image.

8

So it is and thanks for catching my mistake, which in this case was only my copy-n-paste here (including the link in the quote) and not noticing this mistake when comparing the subsequent checksums.

Raspberry Pi 2 / 3 / 3+
Release Checksum (MD5)
2018.12-1 a995549a240a9b3bd195a5781e50b2e8

As you see, the actual checksum for the HTTP download, i.e. as linked, of the correct image is different from the subsequent download(s) over HTTPS. Noteworthy is that the HTTP download is explicitly bypassing my proxy and that the downloaded image size over each is reportedly the same: 185420666 (177M).

Testing the HTTP download from the RHEL 6 host on the different network (not Verizon FiOS) gets a valid download, albeit with the wrong MIME type from the web server.

$ wget --no-proxy --no-check-certificate --verbose http://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
--2019-03-16 17:27:37--  http://download.osmc.tv/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving download.osmc.tv... 159.253.212.250
Connecting to download.osmc.tv|159.253.212.250|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mirror.zetup.net/osmc/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz [following]
--2019-03-16 17:27:37--  http://mirror.zetup.net/osmc/osmc/download/installers/diskimages/OSMC_TGT_rbp2_20190105.img.gz
Resolving mirror.zetup.net... 109.205.222.4, 2a02:1380:2009:1::4
Connecting to mirror.zetup.net|109.205.222.4|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 185420666 (177M) [text/plain]
Saving to: “OSMC_TGT_rbp2_20190105.img.gz”

100%[======================================>] 185,420,666 5.35M/s   in 75s     

2019-03-16 17:28:54 (2.35 MB/s) - “OSMC_TGT_rbp2_20190105.img.gz” saved [185420666/185420666]

$ md5sum OSMC_TGT_rbp2_20190105.img.gz 
a995549a240a9b3bd195a5781e50b2e8  OSMC_TGT_rbp2_20190105.img.gz

Absent another error on my part, this suggests that the transparent proxy on my ISP’s network or (less likely) another hop is interfering with the HTTP download. Since I already mentioned that nothing should be http:// any more I won’t belabour that point, but would be happy to make a feature request to fix the links.

9

It seems fashionable lately to criticise updates over HTTP. VLC got criticised to the point where some of their developers received abuse over this; but their verification method prevents compromise.

OSMC updates are delivered over HTTP, but we use GPG. So there is no chance of package tampering. I do however recognise that: 1) it can be observed that there is an OSMC system on the network; 2) it can be observed which updates / package versions are being downloaded.

OSMC image downloads are delivered over HTTP; but checksums are delivered via HTTPS.

Eventually we will serve everything over HTTPS; but some of our mirrors do not yet support this. Providing OSMC downloads and updates in a regionally distributed manner will always be a challenge. I do understand and respect the complaints. I would like to see this completed by the end of 2019.

Cheers

Sam

1 Like