Bug 27913

Summary: gtkhash: GUI checksum generator and (with file manager plugins) checker
Product: Mageia Reporter: Alex Kotov <alex_q_2000>
Component: New RPM package requestAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED FIXED QA Contact:
Severity: enhancement    
Priority: Normal CC: geiger.david68210, lewyssmith
Version: Cauldron   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Source RPM: CVE:
Status comment:
Attachments: GtkHash+gtkhash-nemo plugin

Description Alex Kotov 2020-12-23 12:27:22 CET
Hello.

Are there any plans to include in Mageia-8 such a great tool as "GtkHash" and plugins to file managers for quick verification of checksums and integrity of files (for example *.iso and others) that are downloaded over the network?

"GtkHash" itself is located here: https://github.com/tristanheaven/gtkhash

For myself, I rebuilt the package from Fedora-33:
https://download-ib01.fedoraproject.org/pub/fedora/linux/releases/33/Everything/source/tree/Packages/g/gtkhash-1.4-2.fc33.src.rpm

It already includes "GtkHash" and plugins for Thunar, Nemo, Nautilus and Caja. Additionally, see the screenshot "GtkHash+gtkhash-nemo plugin". On it I check MD5 for the downloaded image Mageia-8-beta2-Live-Xfce-x86_64.iso in the "GtkHash" program itself and via the Nemo plugin.

The tool turned out to be very convenient: I Downloaded an md5 file, copied the value from it, opened the file properties (or "GtkHash" itself), pasted it from the buffer, and clicked the Hash button. If the indicator color is green , the image (or other file) is okay.

My working version from Fedora-33 *.src.rpm-package is here:
https://cloud.mail.ru/public/9wsA/sR4GZushY

Enabling this tool will help quickly eliminate a number of problems, for example, with images downloaded from the Internet *.iso and others.

Sincerely, Alex
Comment 1 Alex Kotov 2020-12-23 12:28:14 CET
Created attachment 12144 [details]
GtkHash+gtkhash-nemo plugin
Comment 2 Lewis Smith 2020-12-23 21:25:54 CET
Thank you for this suggestion, and the work you have put into it.
If I understand this correctly:
"GtkHash is a desktop utility for computing message digests or checksums"
Computing rather than checking.

The manoeuvre you describe in comment 0 actually looks more complicated than what we suggest on the download pages (for example):
 https://www.mageia.org/en/downloads/get/?q=Mageia-8-beta2-x86_64.iso
which says:
- download a checksum (link given)
- $ md5sum -c Mageia-8-beta2-x86_64.iso.md5 # You need both iso and checksum file in the same folder
 Mageia-8-beta2-x86_64.iso: OK
- $ sha512sum -c Mageia-8-beta2-x86_64.iso.sha512 # You need both iso and checksum file in the same folder
 Mageia-8-beta2-x86_64.iso: OK

That is, we are conscientious about both the need to checksum downloaded ISOs, and making this not just possible, but easy! I am sure you would agree that the given commands (only 1 needed) *are* easy.

This is not to deny wider usefulness of the software, and the fact that it avoids the command line.
You are obviously a competent packager. Would you not consider offering to maintain this Mageia package yourself?
 https://wiki.mageia.org/en/Becoming_a_Mageia_Packager

Await your response before passing this on.

Summary: GtkHash: Request for inclusion in the Mageia-8 distribution => gtkhash: GUI checksum generator and (with file manager plugins) checker
CC: (none) => lewyssmith

Comment 3 Alex Kotov 2020-12-24 08:48:20 CET
Hello, Lewis Smith.

About GtkHash... Everything is exactly like that, but the ability to check the checksum is also in GtkHash itself (in addition to copying from the buffer, you can download code from a file) and in plugins (pasting from the clipboard). As I understand it, when you click the Hash button, 2 operations are performed: generation and comparison.

Lewis Smith, I carefully read "Becoming_a_Mageia_Packager" on Your link.

I am absolutely convinced that for such a wonderful and bright distribution as Mageia Linux, package building should be done by professionals and people who have been properly trained and trained. As for me, my level is that of an Amateur. I can redo something that has already been done before me or make something of my own based on an existing one. I really enjoy reverse engineering, Troubleshooting and error detection. You may think me naive, but I am delighted with the dialogue with people from other countries, even without knowing the language: it is a different way of thinking, different options, solutions, concepts. Due to the fact that now in Russia no one knows what will happen tomorrow, I am afraid I will not have time to approach the issues of building packages in detail: after the new Year, most likely, I will lose my job again, and in the future-moving to another city; the situation is very tense. Although, I think that now everything is in a difficult situation.

But this does not prevent me from congratulating You and the entire wonderful Mageia Linux team on the upcoming New Year (2021) and wishing everyone good health, happiness in your personal life and further successful development of Your wonderful project. Mageia is the best! :)

Sincerely,
Alex
Comment 4 Alex Kotov 2020-12-24 13:22:49 CET
Lewis Smith, in order not to distract the Mageia team too much from important things before the release of Mageia-8, as well as if You decide to include this package (s), I want to additionally inform you of the following...

Changes in spec (1.4-3):
---
1. BuildRequires:  libappstream-glib -> BuildRequires:  pkgconfig(appstream)
2. Requires: Thunar -> Requires: thunar

Testing of plugins:
---
gtkhash-caja ... passed
gtkhash-nemo ... passed
gtkhash-thunar ... passed
gtkhash-nautilus ... passed

Additionally, rpm-packages for the i586 architecture are collected.
Duplicate the link: https://cloud.mail.ru/public/9wsA/sR4GZushY

Sincerely,
Alex
Comment 5 David GEIGER 2020-12-24 14:44:17 CET
gtkhash now imported on Cauldron:

http://svnweb.mageia.org/packages?view=revision&revision=1663452

CC: (none) => geiger.david68210

Comment 6 Alex Kotov 2020-12-24 15:32:41 CET
Hurray! You have accepted GtkHash! Now I will also create checksum files for my large files and check others through the GUI. Lewis Smith and David GEIGER - Thank you very much. :)
Comment 7 Alex Kotov 2020-12-24 18:35:42 CET
David GEIGER, "gtkhash-1.4-1.mga8" and plugins are installed from the French repository and tested in Mageia-Cauldron (MATE, GNOME, Cinnamon, XFCE). Everything works: considers and verifies the checksum. Thank you again for your cooperation.

Kind regards,
Alex

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 8 Lewis Smith 2020-12-25 20:57:23 CET
Well, DavidG has once again done magic - fixed sooner than reported!
Thank you also Alex for your +ve feedback.

(In reply to Alex Kotov from comment #3)
> Lewis Smith, I carefully read "Becoming_a_Mageia_Packager" on Your link.
> I am absolutely convinced that for such a wonderful and bright distribution
> as Mageia Linux, package building should be done by professionals and people
> who have been properly trained and trained. As for me, my level is that of
> an Amateur
Accepting all the reasons you give later for not coming on board immediately, let me re-assure you about some things.
* Our most recent new packager had no previous experience in that field, and is now a valuable asset to Mageia.
* Nobody becomes a packager (sometimes called 'developer') without careful tuition - monitoring - beforehand.
* Mageia has *no* professionals. We are all amateurs, some more expert than others.
So if after your own upheavals you feel that you would like to contribute, please do come back to us.