Bug#405132: cdimage.debian.org: etch multi-arch netinst CD fails integrity check

[Francesco Poli <frx@firenze.linux.it>]

Package: cdimage.debian.org
Severity: normal

Hi!

I downloaded a recent snapshot of the new multi-arch netinst CD ISO image.
I checked the image MD5 checksum and it is OK.
I burned the CD and then tried to check the integrity of its content:

  $ mount /cdrom/
  $ cd /cdrom/
  $ grep -A 4 labeled README.txt 
     This CD-ROM is labeled
  
       Debian GNU/Linux testing "Etch" - Official Snapshot
     Multi-architecture i386/amd64/powerpc NETINST #1 20061228-09:45
  
  $ md5sum -c md5sum.txt 
  md5sum: MD5 check failed for './md5sum.txt'
  $ grep 'md5sum\.txt' md5sum.txt 
  f9e0046389c212f1efa8b26469f844e9  ./md5sum.txt
  $ md5sum ./md5sum.txt 
  c25ce4f626d23a50f57c83ad214c357b  ./md5sum.txt
  $ cd
  $ eject /cdrom/

It seems that the `md5sum.txt' file includes a line which claims
to report the MD5 checksum of the file itself.
The checksum is obviously incorrect (AFAICT, it could only be correct
if one managed to converge an appropriate iterative procedure...).

I think that `md5sum.txt' MD5 checksum should not be included in
`md5sum.txt' itself...

Actually it seems that it used to be excluded in sarge CDs:

  $ mount /cdrom/
  $ cd /cdrom/
  $ grep -A 3 labeled README.txt 
     This CD-ROM is labeled
  
       Debian GNU/Linux 3.1 r0a "Sarge" - Official i386 Binary-1
  
  $ md5sum -c md5sum.txt 
  $ grep 'md5sum\.txt' md5sum.txt
  $ cd
  $ eject /cdrom/