Arch Linux User Repository

There is no version dependency on this package on purpose! You could read comments back from 2011 to understand why.

I made a bash function to install it:

set_new_sha256_and_install_virtualbox_ext_oracle(){
cd /tmp; wget https://aur.archlinux.org/cgit/aur.git/snapshot/virtualbox-ext-oracle.tar.gz
tar xvf virtualbox-ext-oracle.tar.gz
cd virtualbox-ext-oracle/
source PKGBUILD
wget $source
NEWSHA256=$(sha256sum *vbox-extpack|awk {'print $1'})
Line=$(printf "sha256sums=('"$NEWSHA256"')")
sed -i "s/sha256sums.*/$Line/g" PKGBUILD
makepkg -sc
sudo pacman -U *.pkg.tar.zst
}
set_new_sha256_and_install_virtualbox_ext_oracle;

@eworm, is it possible to update both the invalid checksum issue and also remove the force dependency version check that breaks updates on many systems?

Until the maintainer updates the checksum in the PKGBUILD...

Download the vbox ExtPack from Oracle and check the sha256sum: https://www.oracle.com/virtualization/technologies/vm/downloads/virtualbox-downloads.html
https://download.virtualbox.org/virtualbox/7.0.6/Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack
Now check the same file/version in the virtualbox-ext-oracle build directory, verifying it's the same.
Edit the PKGBUILD sha256sums to the checksum you just verified.
Either manually build with the edited PKGBUILD using makepkg or use your AUR helper if it has that capability.
If you see something similar to this, you can now install it with pacman.

==> Finished making: virtualbox-ext-oracle 7.0.6-1 (Sun Jan 22 00:11:00 2023)
:: aurch ==> Copied AUR package/s to host AURREPO:
     1  virtualbox-ext-oracle-7.0.6-1-any.pkg.tar.zst
:: aurch ==> Adding package/s to host 'AURREPO' database.
==> Extracting aur-repo.db.tar.gz to a temporary location...
==> Extracting aur-repo.files.tar.gz to a temporary location...
==> Adding package '/home/jeff/AUR/repo/virtualbox-ext-oracle-7.0.6-1-any.pkg.tar.zst'
  -> Computing checksums...
  -> Removing existing entry 'virtualbox-ext-oracle-7.0.4-1'...
  -> Creating 'desc' db entry...
  -> Creating 'files' db entry...
==> Creating updated database file '/home/jeff/AUR/repo/aur-repo.db.tar.gz'

I see people posting checksums here, but it's better if you determine if they're correct or not yourself.
No point in blindly copy/pasting when it's this easy to check.

please update checksums for 7.0.6 thanks

correct SHA256SUM for the file that gets downloaded in the PKGBUILD is

292961aa8723b54f96f89f6d8abf7d8e29259d94b7de831dbffb9ae15d346434 *Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack

reference: https://download.virtualbox.org/virtualbox/7.0.6/SHA256SUMS

The sha256 in the PKGBUILD appears to be for the wrong package. Referenced here: https://download.virtualbox.org/virtualbox/7.0.6/SHA256SUMS

21c3595361bb2365efe6139f1da724d362daa63fb92c38f686a01aa9200628b2 - Oracle_VM_VirtualBox_Extension_Pack-7.0.6-155176.vbox-extpack

292961aa8723b54f96f89f6d8abf7d8e29259d94b7de831dbffb9ae15d346434 - Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack

292961aa8723b54f96f89f6d8abf7d8e29259d94b7de831dbffb9ae15d346434 - Oracle_VM_VirtualBox_Extension_Pack-7.0.6a-155176.vbox-extpack

Thanks @nelg. I was stuck with my system update with errors and found your comment here. I tried running it and the last command to install this package again, yay virtualbox-ext-oracle, is failing with:

  2 aur/virtualbox-ext-oracle-dev 7.0.7.155247-1 (+0 0.00) 
    Oracle VM VirtualBox Extension Pack for virtualbox dev version
1 aur/virtualbox-ext-oracle 7.0.6-1 (+1362 2.29) 
    Oracle VM VirtualBox Extension Pack
==> Packages to install (eg: 1 2 3, 1-3 or ^4)
==> 1
:: Checking for conflicts...
:: Checking for inner conflicts...
[Aur:1]  virtualbox-ext-oracle-7.0.6-1

  1 virtualbox-ext-oracle            (Build Files Exist)
==> Packages to cleanBuild?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
:: (1/1) Downloaded PKGBUILD: virtualbox-ext-oracle
  1 virtualbox-ext-oracle            (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> 
:: (1/1) Parsing SRCINFO: virtualbox-ext-oracle
==> Making package: virtualbox-ext-oracle 7.0.6-1 (Fri 20 Jan 2023 01:00:21 PM PST)
==> Retrieving sources...
  -> Downloading Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 17.6M  100 17.6M    0     0  11.0M      0  0:00:01  0:00:01 --:--:-- 11.0M
==> Validating source files with sha256sums...
    Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack ... FAILED
==> ERROR: One or more files did not pass the validity check!
 -> error downloading sources: virtualbox-ext-oracle 
         context: exit status 1 


==> Making package: virtualbox-ext-oracle 7.0.6-1 (Fri 20 Jan 2023 01:00:25 PM PST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack
==> Validating source files with sha256sums...
    Oracle_VM_VirtualBox_Extension_Pack-7.0.6.vbox-extpack ... FAILED
==> ERROR: One or more files did not pass the validity check!
 -> error making: virtualbox-ext-oracle

For those needing a quick fix:

Uninstall virtualbox-ext-oracle, upgrade virtualbox, install virtualbox-ext-oracle

yay -R virtualbox-ext-oracle
yay virtualbox
yay virtualbox-ext-oracle

Commit https://aur.archlinux.org/cgit/aur.git/commit/?h=virtualbox-ext-oracle&id=8009c93e77a8a8317574ef42f5167a9d0a8fbb85

appears to be where the version pinning has occurred. This has broken my system updates as well.