What the message looks like
There were problems with the code integrity check. More information…
Results:
- core
- INVALID_HASH
- core/js/mimetypelist.js
- EXTRA_FILE
- core/old-backup.phpCommon causes
- Files were left over or mixed after a manual update, for example an old folder copied over a new one.
- A core or app file was edited by hand, or a backup, patch or
.origfile was put into the program folder. - An upload or unzip was incomplete, so files are missing (
MISSING_FILE) or damaged (INVALID_HASH). - An app that did not come from the App Store, or a custom theme placed in the wrong folder, is reported as extra.
Check
- Check the core files
- Check one app
sudo -u www-data php occ integrity:check-app calendar - Which version is installed?
sudo -u www-data php occ status - Files changed in the last days
find /var/www/nextcloud -maxdepth 2 -type f -mtime -3 -not -path '*/data/*' | head -n 20
Fix
- Read the result:
INVALID_HASHmeans the file was changed,MISSING_FILEmeans it is gone,EXTRA_FILEmeans it does not belong there. - Download the archive of exactly your installed version from the official source, verify its checksum, and copy the reported files back from it.
- Move
EXTRA_FILEentries out of the program folder, for example to a backup folder outside the web root. - Put custom themes and apps in
themes/andcustom_apps/, not into core folders. Useupdater/updater.pharor the web updater for future updates. - Run
occ integrity:check-coreagain, then press the rescan button in the admin overview.
FAQ
Can I ignore this warning?
It can point to a broken or tampered installation, so do not leave it. If the list holds only a file you changed on purpose, document it. Otherwise restore the original so updates and support stay predictable.
Does the check touch my data directory?
No. It only looks at the program files, the shipped apps and the signed apps. Your data folder is not compared.