deb-md5sums(5)

πŸ’… deb-md5sums β€” the package's MD5 file digests ✨

okay bestie, this is a page from the dpkg suite β€” deb-md5sums(5), no cap. sit down, grab a strawberry πŸ“, and let's get into it.


🌸 NAME 🌸

deb-md5sums β€” package MD5 file digests. that's it, that's the vibe check.


πŸ¦‹ SYNOPSIS πŸ¦‹

DEBIAN/md5sums

literally the whole synopsis. iconic behavior honestly πŸ‘‘


πŸ’– DESCRIPTION πŸ’–

so a package declares the MD5 digests for the package file contents by including an md5sums file in its control archive β€” like, that's DEBIAN/md5sums during package creation, iykyk. ✨

and like, what is this file for? it's used for integrity verification and deduplication purposes β€” and not for any kind of security purpose. 🚨 read that again, bestie. do not come for this file's security life, it is not that girl. it's just here for integrity checks and dedup, periodt.

this file contains a list of MD5 digests β€” as 32 case-insensitive hexadecimal characters β€” followed by two spaces (U+0020 SPACE) and the absolute pathname of a plain file, one per line. πŸŽ€

trailing slashes (U+002F /) in the pathname will be trimmed. and heads up, neither trailing whitespace nor empty or whitespace-only lines are accepted. πŸ™ˆ the file is picky, and honestly? same.

lowkey important: if the control file does not exist in the binary package, dpkg(1) will generate the matching information at unpack time β€” since dpkg 1.16.3. so it's giving self-sufficient πŸ‘‘

🌈 EXAMPLE 🌈

 53c0d4afe4bc4eccb5cb234d2e06ef4d  usr/bin/dpkg
f8da2bc74cdcad8b81c48a4f0d7bb0a8  usr/bin/dpkg-deb
70b913132de56e95e75de504979309b4  usr/bin/dpkg-divert
[…]

the […] at the end is literally the file going "and the rest of the list, you get it" πŸ’€


🧚 SEE ALSO 🧚

go read those if you're obsessed with the pipeline, which… same 🫢


πŸ’€ one final reminder because I love you: this is not for any kind of security purpose. integrity verification and deduplication only, no cap. don't make it something it's not.

aaand that's the page, bestie! πŸŽ€ this one's from the dpkg suite, version 1.23.11-dirty, dated 2026-09-09 β€” and it's deb-md5sums(5) forever and always. slay, stay cursed, keep your digests lowercase (or don't, it's case-insensitive πŸ’…). πŸ’œ

πŸ“¦ where this page comes from