apt update fails with unexpected file size for arm64 Packages index (mirror sync issue)

[qbeeukraine]

Bug Report

Describe the bug

When running apt update on a Debian Bookworm arm64 system, fetching the Fluent Bit package index fails with a file size mismatch. The Packages.bz2 downloaded from the CDN (36209 bytes) does not match the size declared in the Release file (36702 bytes). The Release file was published moments before the error occurred, indicating a CDN propagation race condition where the Cloudflare edge node (172.67.152.166) was still serving the previous version of the index.

To Reproduce

• Rubular link if applicable: N/A
• Example log message if applicable: N/A
• Steps to reproduce the problem:
  1. Configure the Fluent Bit apt repository on a Debian Bookworm arm64 system per the official docs.
  2. Run apt update within minutes of a new package index being published.
  3. Observe the File has unexpected size error for the binary-arm64/Packages.bz2 file.

Expected behavior

apt update should complete successfully. The package index served by the CDN should match the size and hashes declared in the Release file at all times, or the Release file should not be served until all CDN edge nodes have the updated index.

Screenshots

Err:7 https://packages.fluentbit.io/debian/bookworm bookworm/main arm64 Packages
  File has unexpected size (36209 != 36702). Mirror sync in progress? [IP: 172.67.152.166 443]
  Hashes of expected file:
   - Filesize:36702 [weak]
   - SHA512:b815eabed574b715a057f7329d2d928f12d9e230ff2defa18e8fbb19da04bba8a9e0ffcc8b93580dfe4841290b1b1c53907429dcdde14ee053128c524dcf73f3
   - SHA256:f6a04d5b491f0aa529e43f9810e3301b1066d590892db0bc5a4751890ff2c098
   - SHA1:d3b9b857eaf7479c95e8bcc3ff9158fbb1f6514b [weak]
   - MD5Sum:82978ccf19f72bf407c1115c330675fc [weak]
  Release file created at: Tue, 14 Apr 2026 18:48:51 +0000

E: Failed to fetch https://packages.fluentbit.io/debian/bookworm/dists/bookworm/main/binary-arm64/Packages.bz2  File has unexpected size (36209 != 36702). Mirror sync in progress? [IP: 172.67.152.166 443]
E: Some index files failed to download. They have been ignored, or old ones used instead.

Your Environment

• Version used: Latest available in repository as of 2026-04-14
• Configuration: Standard Fluent Bit apt repository (https://packages.fluentbit.io/debian/bookworm)
• Environment name and version: Bare metal embedded board (Debian Bookworm)
• Server type and version: N/A
• Operating System and version: Debian GNU/Linux 12 (Bookworm), arm64
• Filters and plugins: N/A

[cosmo0920]

I tested with the freshly pulled docker container:

% podman run -it --rm debian:bookworm bash
Resolved "debian" as an alias (/etc/containers/registries.conf.d/000-shortnames.conf)
Trying to pull docker.io/library/debian:bookworm...
Getting image source signatures
Copying blob sha256:d03e31a3f7ef0d2866d799846c3a18286fab6fcddbd8c523f3cb5ed1bd2f31a3
Copying config sha256:7201a519de7f9fae9a822d3ec97a68ed57d02a9d1b26e335dcac0179080e7867
Writing manifest to image destination
root@bf92b5d798a5:/# sudo sh -c 'curl https://packages.fluentbit.io/fluentbit.key | gpg --dearmor > /usr/share/keyrings/fluentbit-keyring.gpg'
bash: sudo: command not found
root@bf92b5d798a5:/# sh -c 'curl https://packages.fluentbit.io/fluentbit.key | gpg --dearmor > /usr/share/keyrings/fluentbit-keyring.gpg'
sh: 1: curl: not found
sh: 1: gpg: not found
root@bf92b5d798a5:/# apt update 
Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Get:4 http://deb.debian.org/debian bookworm/main arm64 Packages [8691 kB]
Get:5 http://deb.debian.org/debian bookworm-updates/main arm64 Packages [6936 B]
Get:6 http://deb.debian.org/debian-security bookworm-security/main arm64 Packages [290 kB]
Fetched 9242 kB in 2s (4620 kB/s)                         
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
root@bf92b5d798a5:/# apt install curl gpg
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  ca-certificates dirmngr gnupg gnupg-l10n gnupg-utils gpg-agent gpg-wks-client gpg-wks-server gpgconf gpgsm krb5-locales libassuan0
  libbrotli1 libcurl4 libgpm2 libgssapi-krb5-2 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libksba8 libldap-2.5-0 libldap-common
  libncursesw6 libnghttp2-14 libnpth0 libpsl5 libreadline8 librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db libsqlite3-0 libssh2-1
  libssl3 openssl pinentry-curses publicsuffix readline-common
Suggested packages:
  dbus-user-session libpam-systemd pinentry-gnome3 tor parcimonie xloadimage scdaemon gpm krb5-doc krb5-user libsasl2-modules-gssapi-mit
  | libsasl2-modules-gssapi-heimdal libsasl2-modules-ldap libsasl2-modules-otp libsasl2-modules-sql pinentry-doc readline-doc
The following NEW packages will be installed:
  ca-certificates curl dirmngr gnupg gnupg-l10n gnupg-utils gpg gpg-agent gpg-wks-client gpg-wks-server gpgconf gpgsm krb5-locales
  libassuan0 libbrotli1 libcurl4 libgpm2 libgssapi-krb5-2 libk5crypto3 libkeyutils1 libkrb5-3 libkrb5support0 libksba8 libldap-2.5-0
  libldap-common libncursesw6 libnghttp2-14 libnpth0 libpsl5 libreadline8 librtmp1 libsasl2-2 libsasl2-modules libsasl2-modules-db
  libsqlite3-0 libssh2-1 libssl3 openssl pinentry-curses publicsuffix readline-common
0 upgraded, 41 newly installed, 0 to remove and 0 not upgraded.
Need to get 14.6 MB of archives.
After this operation, 36.1 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
<snip>
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
root@bf92b5d798a5:/# sh -c 'curl https://packages.fluentbit.io/fluentbit.key | gpg --dearmor > /usr/share/keyrings/fluentbit-keyring.gpg' 
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3175  100  3175    0     0   7901      0 --:--:-- --:--:-- --:--:--  7917
root@bf92b5d798a5:/# codename=$(grep -oP '(?<=VERSION_CODENAME=).*' /etc/os-release 2>/dev/null || lsb_release -cs 2>/dev/null)
root@bf92b5d798a5:/# echo "deb [signed-by=/usr/share/keyrings/fluentbit-keyring.gpg] https://packages.fluentbit.io/debian/$codename $codename main" | sudo tee /etc/apt/sources.list.d/fluent-bit.list
bash: sudo: command not found
root@bf92b5d798a5:/# echo "deb [signed-by=/usr/share/keyrings/fluentbit-keyring.gpg] https://packages.fluentbit.io/debian/$codename $codename main" | tee /etc/apt/sources.list.d/fluent-bit.list
deb [signed-by=/usr/share/keyrings/fluentbit-keyring.gpg] https://packages.fluentbit.io/debian/bookworm bookworm main
root@bf92b5d798a5:/# apt update
Hit:1 http://deb.debian.org/debian bookworm InRelease
Hit:2 http://deb.debian.org/debian bookworm-updates InRelease                 
Hit:3 http://deb.debian.org/debian-security bookworm-security InRelease       
Get:4 https://packages.fluentbit.io/debian/bookworm bookworm InRelease [7577 B]
Get:5 https://packages.fluentbit.io/debian/bookworm bookworm/main arm64 Packages [36.7 kB]
Fetched 44.3 kB in 1s (54.0 kB/s) 
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
root@bf92b5d798a5:/# apt install fleunt-bit 
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
E: Unable to locate package fleunt-bit
root@bf92b5d798a5:/# apt install fluent-bit 
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
  libpq5 libyaml-0-2
The following NEW packages will be installed:
  fluent-bit libpq5 libyaml-0-2
0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
Need to get 57.0 MB of archives.
After this operation, 137 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Get:1 http://deb.debian.org/debian-security bookworm-security/main arm64 libpq5 arm64 15.16-0+deb12u1 [187 kB]
Get:2 http://deb.debian.org/debian bookworm/main arm64 libyaml-0-2 arm64 0.2.5-1 [50.4 kB]
Get:3 https://packages.fluentbit.io/debian/bookworm bookworm/main arm64 fluent-bit arm64 5.0.3 [56.7 MB]
Fetched 57.0 MB in 6s (8872 kB/s)                                                                                                          
debconf: delaying package configuration, since apt-utils is not installed
Selecting previously unselected package libpq5:arm64.
(Reading database ... 7051 files and directories currently installed.)
Preparing to unpack .../libpq5_15.16-0+deb12u1_arm64.deb ...
Unpacking libpq5:arm64 (15.16-0+deb12u1) ...
Selecting previously unselected package libyaml-0-2:arm64.
Preparing to unpack .../libyaml-0-2_0.2.5-1_arm64.deb ...
Unpacking libyaml-0-2:arm64 (0.2.5-1) ...
Selecting previously unselected package fluent-bit.
Preparing to unpack .../fluent-bit_5.0.3_arm64.deb ...
Unpacking fluent-bit (5.0.3) ...
Setting up libyaml-0-2:arm64 (0.2.5-1) ...
Setting up libpq5:arm64 (15.16-0+deb12u1) ...
Setting up fluent-bit (5.0.3) ...
Processing triggers for libc-bin (2.36-9+deb12u13) ...

So, could you retry to update fluent-bit repo?