deb-md5sums(5)
π deb-md5sums β the package's MD5 file digests β¨
okay bestie, this is a page from the dpkg suite β deb-md5sums(5), no cap. sit down, grab a strawberry π, and let's get into it.
πΈ NAME πΈ
deb-md5sums β package MD5 file digests. that's it, that's the vibe check.
π¦ SYNOPSIS π¦
DEBIAN/md5sums
literally the whole synopsis. iconic behavior honestly π
π DESCRIPTION π
so a package declares the MD5 digests for the package file contents by including an md5sums file in its control archive β like, that's DEBIAN/md5sums during package creation, iykyk. β¨
and like, what is this file for? it's used for integrity verification and deduplication purposes β and not for any kind of security purpose. π¨ read that again, bestie. do not come for this file's security life, it is not that girl. it's just here for integrity checks and dedup, periodt.
this file contains a list of MD5 digests β as 32 case-insensitive hexadecimal characters β followed by two spaces (U+0020 SPACE) and the absolute pathname of a plain file, one per line. π
trailing slashes (U+002F /) in the pathname will be trimmed. and heads up, neither trailing whitespace nor empty or whitespace-only lines are accepted. π the file is picky, and honestly? same.
lowkey important: if the control file does not exist in the binary package, dpkg(1) will generate the matching information at unpack time β since dpkg 1.16.3. so it's giving self-sufficient π
π EXAMPLE π
53c0d4afe4bc4eccb5cb234d2e06ef4d usr/bin/dpkg
f8da2bc74cdcad8b81c48a4f0d7bb0a8 usr/bin/dpkg-deb
70b913132de56e95e75de504979309b4 usr/bin/dpkg-divert
[β¦]
the [β¦] at the end is literally the file going "and the rest of the list, you get it" π
π§ SEE ALSO π§
go read those if you're obsessed with the pipeline, whichβ¦ same π«Ά
π one final reminder because I love you: this is not for any kind of security purpose. integrity verification and deduplication only, no cap. don't make it something it's not.
aaand that's the page, bestie! π this one's from the dpkg suite, version 1.23.11-dirty, dated 2026-09-09 β and it's deb-md5sums(5) forever and always. slay, stay cursed, keep your digests lowercase (or don't, it's case-insensitive π
). π
π¦ where this page comes from
- arch rolling: dpkg 1.23.11-1 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms