Question about the validity of Rocky-9-latest-x86_64-minimal.iso.CHECKSUM

Rocky Linux Help & Support
1

Hello,
I have a question regarding the checksum file for Rocky Linux 9.

I downloaded the following files from:

  • Rocky-9-latest-x86_64-minimal.iso
  • Rocky-9-latest-x86_64-minimal.iso.CHECKSUM

The checksum file contains:

Rocky-9-latest-x86_64-minimal.iso: 1480048640 bytes

SHA256 (Rocky-9-latest-x86_64-minimal.iso) = d338032cd1cdd41c67139f2f71b4c832c8e4a21943106519db9c7137df7a63d4

The SHA256 checksum matches successfully. However, the size shown in the CHECKSUM file does not match the actual ISO size, which is approximately 2.7 GB.

Does this affect the validity of the CHECKSUM file?

Thank you.

2

If the sha256sum matches then you are fine. The size in the file is irrelevant really. Not sure why it’s incorrect or what generated and added it to the checksum file.

3

Sounds to me some automated process has put the wrong file size in there. You’ll notice that the bytes matches the size of the boot.iso rather than the minimal iso.

Rocky-9-latest-x86_64-boot.iso	1480048640	2026-May-25 17:10:54Z

I expect the automated process that generates the checksum and concatenates the iso file size into the file doesn’t work correctly. Instead of probably iterating over the file list as it should to append the appropriate size, it’s returning the size of the boot.iso each time.

4

We (release engineering) will need to look into this and get it fixed. But, as @iwalker has pointed out, the key is the sha256sum. If that matches, you’re good!

5

The explanation helps me a lot. Thanks for your reply.