RE: POSTGRESQL 10 Media download with CHECKSUM VALUE

Dear Haroon,

As we cannot proceed using rpm without checksum value and yum repository, what if i download Interactive installer by EnterpriseDB from the link given on https://www.postgresql.org website, If there is any way we can get the checksum for the file provided by https://www.enterprisedb.com/downloads/postgres-postgresql-downloads location. As I did not find any.

Regards,

Saeed Ahmed

From: Saeed Ahmed (DB)
Sent: Wednesday, January 24, 2018 2:52 PM
To: 'Haroon'
Cc: Magnus Hagander; Mohammad Ali Raza; Umair Shahid; pgsql-admin(at)postgresql(dot)org; Adnan Hamd Us Salam
Subject: RE: POSTGRESQL 10 Media download with CHECKSUM VALUE

Dear Haroon,

Really appreciate your prompt reply. There are some limitation due to company policy we are not having internet connection on the host to use the yum repository. The only option we have to manually copy the rpm to the host machine. So we cannot avail the Yum repository facility. If I download the file directly from the link mention below. Doest the checksum_data value will work for this particular RPM.

https://download.postgresql.org/pub/repos/yum/10/redhat/rhel-7-x86_64/postgresql10-server-10.1-1PGDG.rhel7.x86_64.rpm

checksum_data = d669c07f3c670299f2f1adc5a81ec90187bffc9aca0e8ceb7aa51a9194614910

Thanks.

Regards,

Saeed Ahmed

From: Haroon [mailto:muhammad(dot)haroon(at)2ndquadrant(dot)com]
Sent: Wednesday, January 24, 2018 2:05 PM
To: Saeed Ahmed (DB)
Cc: Magnus Hagander; Mohammad Ali Raza; Umair Shahid; pgsql-admin(at)postgresql(dot)org<mailto:pgsql-admin(at)postgresql(dot)org>; Adnan Hamd Us Salam
Subject: Re: POSTGRESQL 10 Media download with CHECKSUM VALUE

On 24 January 2018 at 12:56, Saeed Ahmed (DB) <saeed(dot)ahmed1(at)telenor(dot)com(dot)pk<mailto:saeed(dot)ahmed1(at)telenor(dot)com(dot)pk>> wrote:
Hi Magnus Hagander,

Many thanks for the prompt response. We need a binary rpm for installation on linux RHEL7 environment and for that CHECKSUM is required. As the source tar file does not fulfill our requirement due to no expertise in compiling the source code. Is there any way as no success in finding the MD5 value for rpm on the website.

Package installation via Yum should automatically take care of verifying checksum and GPG signature (unless you manually disable PGP verification).

Yum repository where packages are hosted stores checksum and other relevant information in what is called yum db. So for example, for RHEL/CentOS 7.2, here's the Yum repository that contains relevant information on all the packages.

(Please refer to the relevant files for your minor version of RHEL/CentOS)

https://yum.postgresql.org/10/redhat/rhel-7.2-x86_64/repodata/

For information on specific packages in the repository, take a look here https://yum.postgresql.org/10/redhat/rhel-7.2-x86_64/repodata/3f8cd771d98c480622459107b80e97df46ffd9133dcba7976eab38bd6e36fbf4-primary.xml.gz.

So for example, if you wanted to get checksum for postgresql10-server rpm package, here's this excerpt from the file linked above for postgresql10-server version 10.1 rpm package:

<package type="rpm">

<name>postgresql10-server</name>

<arch>x86_64</arch>

<version epoch="0" ver="10.1" rel="1PGDG.rhel7"/>

<checksum type="sha256" pkgid="YES">d669c07f3c670299f2f1adc5a81ec90187bffc9aca0e8ceb7aa51a9194614910</checksum>

<summary>The programs needed to create and run a PostgreSQL server</summary>

The highlighted entry above should give you the sha256 checksum of the package in question.

Once you have installed the same package via Yum, you can verify this checksum against the installed package by running a query against yumdb. Essentially:

yumdb info <package name>

lists out the required information. For example, for postrgesql10-server package, here's the output:

[haroon(at)localhost ~]$ yumdb info postgresql10-server
Loaded plugins: fastestmirror, langpacks
postgresql10-server-10.1-1PGDG.rhel7.x86_64
checksum_data = d669c07f3c670299f2f1adc5a81ec90187bffc9aca0e8ceb7aa51a9194614910
checksum_type = sha256
command_line = install postgresql10-server
from_repo = pgdg10
from_repo_revision = 1516304771
from_repo_timestamp = 1516304876
installed_by = 1000
origin_url = https://download.postgresql.org/pub/repos/yum/10/redhat/rhel-7-x86_64/postgresql10-server-10.1-1PGDG.rhel7.x86_64.rpm
reason = user
releasever = 7
var_infra = stock
var_uuid = 3b612142-4be3-4551-b529-66391cfe3a9d

Regards,
Haroon

________________________________
This e-mail has been scanned for viruses by Forefront Protection @ Telenor Pakistan.