This is done using GnuPG signatures and the keyring installed on your machine to check it against. APT, the package management tool on Ubuntu, will check it for you already by verifying the integrity all the way from the developer last to touch it until it gets installed on your machine.
This is why one should always check the integrity of the files you are running on your PC. This may just be a harmless one-off, but if you downloaded it from an untrusted source, somebody may have altered it without you knowing it. All we know from there is that your image is different than the "official" ones on the Ubuntu servers. Yours didn't match and produced a completely different string.
In a case of a mismatch, several things could have caused it: download from an untrusted source, unreliable network connection, local file system corruption, etc. If it matches, then both files are exactly the same 1 and you're all set. You can check the integrity of your copy by running the same checksum and verify it is the same as Ubuntu has published. For each file available, Ubuntu publishes SHA1, SHA256 and MD5 checksums (available on your favourite mirror, e.g. Ubuntu installation media are large sets of downloads. In the meantime, just re-download it from a reliable source and check it using md5sum after download against the list of published hashes here: Ubuntu community wiki - UbuntuHashes. We've determined that from the comments - here's the how and why. Your ISO file is not the same as the release on the download servers and is probably corrupt.
0 kommentar(er)
