md5sum: breaking Anaconda/Miniconda installation on Ubuntu 25.10
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 24.1k
- Forks
- 2k
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 365
Description
Description
The md5sum utility in uutils/coreutils version 0.2.2 produces different checksums than GNU coreutils' md5sum for the same input, causing installation failures for Anaconda and Miniconda on Ubuntu 25.10.
Environment
- OS: Ubuntu 25.10 (Questing Quokka)
- Architecture: x86_64
- uutils coreutils version: 0.2.2-0ubuntu2 (from rust-coreutils package)
- GNU coreutils version (working): 9.5-1ubuntu4
- Package: rust-coreutils 0.2.2-0ubuntu2
Reproduction
- Install Ubuntu 25.10 (which uses Rust-based coreutils by default)
- Download Miniconda installer:
wget https://repo.anaconda.com/miniconda/Miniconda3-py313_25.7.0-2-Linux-x86_64.sh - Verify external integrity (this passes):
sha256sum Miniconda3-py313_25.7.0-2-Linux-x86_64.sh - Run installer:
bash Miniconda3-py313_25.7.0-2-Linux-x86_64.sh - Observe failure during "Unpacking payload" with:
WARNING: md5sum mismatch of tar archive BrokenProcessPool: A process in the process pool was terminated abruptly
The same installer file works correctly after switching to GNU coreutils:
sudo apt install coreutils-from-gnu coreutils-from-uutils- --allow-remove-essential
bash Miniconda3-py313_25.7.0-2-Linux-x86_64.sh # Now succeeds
Version Comparison
uutils (problematic):
$ /usr/lib/cargo/bin/coreutils/md5sum --version
/usr/lib/cargo/bin/coreutils/md5sum (uutils coreutils) 0.2.2
GNU coreutils (working):
$ /usr/bin/gnumd5sum --version
md5sum (GNU coreutils) 9.5
Expected Behavior
md5sum should produce identical checksums to GNU coreutils' md5sum for the same input.
Actual Behavior
The installer's internal MD5 checksum verification fails because the calculated checksum doesn't match the expected value (which is correct for GNU coreutils).
Additional Context
- External file integrity check (SHA256) passes on multiple systems (Ubuntu 25.10 and 24.04 LTS)
- Issue occurs with both Anaconda 2025.06-0/1 and Miniconda py313_25.7.0-2
- The installers are self-extracting shell scripts that verify internal tar archive checksums during unpacking
- The issue is reproducible consistently on fresh Ubuntu 25.10 installations
- Original report: https://forum.anaconda.com/t/critical-installation-failure-persistent-internal-md5-mismatch-anaconda-miniconda-2025-06-on-ubuntu-25-10/107525
Impact
This is a critical compatibility issue. Ubuntu 25.10 users cannot install Anaconda/Miniconda (widely-used scientific computing platforms) without manually reverting to GNU coreutils, which undermines the goal of being a drop-in replacement.
Questions
- Are there known differences in how uutils
md5sumhandles piped input or processes data from tar archives? - What diagnostic information would help narrow down the root cause?
- Is there a way to extract a minimal test case from the installer to debug this further?
Disclaimer: This report was created with the assistance of Google Gemini 3.5 Pro and GitHub Copilot with Claude Sonnet 4.5 for clarity, comprehensive detailing of technical steps, and proper formatting according to the project's contributing guidelines. This disclaimer is included at my request for transparency reasons. Also, this issue has been created from my machine after the workaround (reverting to older coreutils) had already been applied and Anaconda successfully installed.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the md5sum entry point and reproduce the mismatch using the Miniconda installer and the provided Ubuntu 25.10 environment, comparing uutils output with GNU md5sum. Narrow the installer input to a minimal case if possible; done means uutils produces the same checksum and the installer completes successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- cli, operating-systems
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100