Aurora Sha256 hash does not match downloaded file

Bluefin and Aurora
1

I downloaded Aurora and the SHA256 hash for a desktop with NVIDIA from https://getaurora.dev/. I hashed the ISO and it didn’t match the SHA256 hash. Furthermore, when I tried to download only the hash (not the entire ISO) over Tor from the same website, and using the same settings, I got a different hash.

What’s up with that? Do y’all have a public signing key for verifying these hashes?

The next thing I tried after that was building aurora on my own machine using the instructions here Building Locally, and it failed during the last step sudo just aurora-iso due to …/bluefin/scripts/files/output not being a valid directory.

2

Which ISO did you download?

3

Aurora Desktop NVIDIA

4

They’re both matching here, assuming this is the ISO you downloaded:

❯ sha256sum aurora-nvidia-stable.iso
46d9c67b36e9ffac25eb929a7aa3c78ad5fd6830258278a85e798e66235fb0cb  aurora-nvidia-stable.iso

jorge@exo ~ took 5s 
❯ cat aurora-nvidia-stable.iso-CHECKSUM 
46d9c67b36e9ffac25eb929a7aa3c78ad5fd6830258278a85e798e66235fb0cb  aurora-nvidia-stable.iso
5

Hi, I can’t replicate your issue. I downloaded the ISO and checksum fresh off the site, it’s the same Checksum as far as I can tell.

~
❯ sha256sum Downloads/aurora-nvidia-stable.iso
46d9c67b36e9ffac25eb929a7aa3c78ad5fd6830258278a85e798e66235fb0cb  Downloads/aurora-nvidia-stable.iso

~ took 4s
❯ cat Downloads/aurora-nvidia-stable.iso-CHECKSUM
46d9c67b36e9ffac25eb929a7aa3c78ad5fd6830258278a85e798e66235fb0cb  aurora-nvidia-stable.iso
6

I ended up going with bluefin since it did match the first time I downloaded it. What I experienced was probably a fluke (hopefully).

7

Guys, I tried downloading it again today and experienced the same thing. Neither the checksum for the developer version, nor the normal desktop version match what y’all posted. I’m getting a checksum file that starts with 371ffce for the desktop version, and f625260 for the developer version. That’s when I tried downloading the checksum files from the aurora website today.

8

It’s impossible to help you unless you provide the full hashes and files you downloaded:

371ffce48e2f26e6ec5b295476c75f6a4f6b419395e03df97fe846477e699593  aurora-nvidia-stable.iso
f6252605b06a97790a9544caa56d39720599692b6afced01698ee3aef0924ae2  aurora-dx-nvidia-stable.iso

Those look right to me? They’re not going to match week over week since they’re updated regularly.