dustinblackman / phantomized

All dynamic PhantomJS ELFs in one simple tar
69 stars 149 forks source link

Getting 403 when attempting to install #5

Open alechirsch opened 3 years ago

alechirsch commented 3 years ago

I can no longer successfully download this in docker. This might be a github issue?

Request with wget

wget "https://github.com/dustinblackman/phantomized/releases/download/2.1.1a/dockerized-phantomjs.tar.gz"

Output

--2021-09-20 16:39:30--  https://github.com/dustinblackman/phantomized/releases/download/2.1.1a/dockerized-phantomjs.tar.gz
Resolving github.com (github.com)... 192.30.255.112
Connecting to github.com (github.com)|192.30.255.112|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-releases.githubusercontent.com/52157194/305abf04-8971-11e7-8b33-82b8b9512a88?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210920T223930Z&X-Amz-Expires=300&X-Amz-Signature=8b56943c08f5044a56ccc6904918d88b6c776181f54ab1c5b419de266e897f73&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=52157194&response-content-disposition=attachment%3B%20filename%3Ddockerized-phantomjs.tar.gz&response-content-type=application%2Foctet-stream [following]
--2021-09-20 16:39:30--  https://github-releases.githubusercontent.com/52157194/305abf04-8971-11e7-8b33-82b8b9512a88?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210920T223930Z&X-Amz-Expires=300&X-Amz-Signature=8b56943c08f5044a56ccc6904918d88b6c776181f54ab1c5b419de266e897f73&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=52157194&response-content-disposition=attachment%3B%20filename%3Ddockerized-phantomjs.tar.gz&response-content-type=application%2Foctet-stream
Resolving github-releases.githubusercontent.com (github-releases.githubusercontent.com)... 185.199.108.154, 185.199.109.154, 185.199.110.154, ...
Connecting to github-releases.githubusercontent.com (github-releases.githubusercontent.com)|185.199.108.154|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
2021-09-20 16:39:30 ERROR 403: Forbidden.

Request with curl command from README

curl -Ls "https://github.com/dustinblackman/phantomized/releases/download/2.1.1a/dockerized-phantomjs.tar.gz"

Output

<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>SignatureDoesNotMatch</Code><Message>The request signature we calculated does not match the signature you provided. Check your key and signing method.</Message><AWSAccessKeyId>AKIAIWNJYAX4CSVEH53A</AWSAccessKeyId><StringToSign>AWS4-HMAC-SHA256
20210920T224344Z
20210920/us-east-1/s3/aws4_request
2657d14e90b354125805a702e121c60640d3244017dcddafb70de3bf3e54aaaa</StringToSign><SignatureProvided>73969abeef0ded69e3503abf936ac707d743d313ecf739f326743634c8e9b17a</SignatureProvided><StringToSignBytes>41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 0a 32 30 32 31 30 39 32 30 54 32 32 34 33 34 34 5a 0a 32 30 32 31 30 39 32 30 2f 75 73 2d 65 61 73 74 2d 31 2f 73 33 2f 61 77 73 34 5f 72 65 71 75 65 73 74 0a 32 36 35 37 64 31 34 65 39 30 62 33 35 34 31 32 35 38 30 35 61 37 30 32 65 31 32 31 63 36 30 36 34 30 64 33 32 34 34 30 31 37 64 63 64 64 61 66 62 37 30 64 65 33 62 66 33 65 35 34 61 61 61 61</StringToSignBytes><CanonicalRequest>GET
/52157194/305abf04-8971-11e7-8b33-82b8b9512a88
X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20210920T224344Z&amp;X-Amz-Expires=300&amp;X-Amz-SignedHeaders=host&amp;actor_id=0&amp;key_id=0&amp;repo_id=52157194&amp;response-content-disposition=attachment%3B%20filename%3Ddockerized-phantomjs.tar.gz&amp;response-content-type=application%2Foctet-stream
host:github-production-release-asset-2e65be.s3.amazonaws.com

host
UNSIGNED-PAYLOAD</CanonicalRequest><CanonicalRequestBytes>47 45 54 0a 2f 35 32 31 35 37 31 39 34 2f 33 30 35 61 62 66 30 34 2d 38 39 37 31 2d 31 31 65 37 2d 38 62 33 33 2d 38 32 62 38 62 39 35 31 32 61 38 38 0a 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 26 58 2d 41 6d 7a 2d 43 72 65 64 65 6e 74 69 61 6c 3d 41 4b 49 41 49 57 4e 4a 59 41 58 34 43 53 56 45 48 35 33 41 25 32 46 32 30 32 31 30 39 32 30 25 32 46 75 73 2d 65 61 73 74 2d 31 25 32 46 73 33 25 32 46 61 77 73 34 5f 72 65 71 75 65 73 74 26 58 2d 41 6d 7a 2d 44 61 74 65 3d 32 30 32 31 30 39 32 30 54 32 32 34 33 34 34 5a 26 58 2d 41 6d 7a 2d 45 78 70 69 72 65 73 3d 33 30 30 26 58 2d 41 6d 7a 2d 53 69 67 6e 65 64 48 65 61 64 65 72 73 3d 68 6f 73 74 26 61 63 74 6f 72 5f 69 64 3d 30 26 6b 65 79 5f 69 64 3d 30 26 72 65 70 6f 5f 69 64 3d 35 32 31 35 37 31 39 34 26 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 3d 61 74 74 61 63 68 6d 65 6e 74 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 33 44 64 6f 63 6b 65 72 69 7a 65 64 2d 70 68 61 6e 74 6f 6d 6a 73 2e 74 61 72 2e 67 7a 26 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3d 61 70 70 6c 69 63 61 74 69 6f 6e 25 32 46 6f 63 74 65 74 2d 73 74 72 65 61 6d 0a 68 6f 73 74 3a 67 69 74 68 75 62 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 72 65 6c 65 61 73 65 2d 61 73 73 65 74 2d 32 65 36 35 62 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 0a 0a 68 6f 73 74 0a 55 4e 53 49 47 4e 45 44 2d 50 41 59 4c 4f 41 44</CanonicalRequestBytes><RequestId>X88A6R1JBHRDXG7F</RequestId><HostId>+082R6mAVpCgH+kw12XPlPg/J4+aQYAx/o7JklrZi8KslksKhsbvVHUIVTDTNt1flsG1AhkXfO4=</HostId></Error>
indragunawan82 commented 3 years ago

i have same production issue with this .. please help to fix it , i cannot download in my docker

indragunawan82 commented 3 years ago

image

kid-icarus commented 3 years ago

This package hasn't been changed in 5 years. This isn't a problem with this repository, but rather, it implies that something is wrong with GitHub's infra. My hunch is that perhaps GitHub mismanaged an s3 secret key rotation.

indragunawan82 commented 3 years ago

so what can we do now? can we alert gitHub team ?

kid-icarus commented 3 years ago

I filed a ticket with GitHub but it's under my personal account and I don't believe others can view it: https://support.github.com/ticket/personal/0/1319501

No updates so far, I filed 20 minutes ago. I'll post here if I get a response.

sksankarraj commented 3 years ago

Thanks people. Facing same issue

<Error>
<Code>SignatureDoesNotMatch</Code>
<Message>The request signature we calculated does not match the signature you provided. Check your key and signing method.</Message>
<AWSAccessKeyId>AKIAIWNJYAX4CSVEH53A</AWSAccessKeyId>
<StringToSign>AWS4-HMAC-SHA256 20210921T031314Z 20210921/us-east-1/s3/aws4_request 33606067be188b5f6311fe58621b8295d5cd23f11be039050c7075ffb49abc76</StringToSign>
<SignatureProvided>f7b62f6258834da0744e4a825f279212de8ccfca48d34e989407d450e3815504</SignatureProvided>
<StringToSignBytes>41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 0a 32 30 32 31 30 39 32 31 54 30 33 31 33 31 34 5a 0a 32 30 32 31 30 39 32 31 2f 75 73 2d 65 61 73 74 2d 31 2f 73 33 2f 61 77 73 34 5f 72 65 71 75 65 73 74 0a 33 33 36 30 36 30 36 37 62 65 31 38 38 62 35 66 36 33 31 31 66 65 35 38 36 32 31 62 38 32 39 35 64 35 63 64 32 33 66 31 31 62 65 30 33 39 30 35 30 63 37 30 37 35 66 66 62 34 39 61 62 63 37 36</StringToSignBytes>
<CanonicalRequest>GET /52157194/b2bfc358-d7ee-11e5-8cb7-f4585730c59b X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210921%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210921T031314Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&actor_id=10474978&key_id=0&repo_id=52157194&response-content-disposition=attachment%3B%20filename%3Ddockerized-phantomjs.tar.gz&response-content-type=application%2Foctet-stream host:github-production-release-asset-2e65be.s3.amazonaws.com host UNSIGNED-PAYLOAD</CanonicalRequest>
<CanonicalRequestBytes>47 45 54 0a 2f 35 32 31 35 37 31 39 34 2f 62 32 62 66 63 33 35 38 2d 64 37 65 65 2d 31 31 65 35 2d 38 63 62 37 2d 66 34 35 38 35 37 33 30 63 35 39 62 0a 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 26 58 2d 41 6d 7a 2d 43 72 65 64 65 6e 74 69 61 6c 3d 41 4b 49 41 49 57 4e 4a 59 41 58 34 43 53 56 45 48 35 33 41 25 32 46 32 30 32 31 30 39 32 31 25 32 46 75 73 2d 65 61 73 74 2d 31 25 32 46 73 33 25 32 46 61 77 73 34 5f 72 65 71 75 65 73 74 26 58 2d 41 6d 7a 2d 44 61 74 65 3d 32 30 32 31 30 39 32 31 54 30 33 31 33 31 34 5a 26 58 2d 41 6d 7a 2d 45 78 70 69 72 65 73 3d 33 30 30 26 58 2d 41 6d 7a 2d 53 69 67 6e 65 64 48 65 61 64 65 72 73 3d 68 6f 73 74 26 61 63 74 6f 72 5f 69 64 3d 31 30 34 37 34 39 37 38 26 6b 65 79 5f 69 64 3d 30 26 72 65 70 6f 5f 69 64 3d 35 32 31 35 37 31 39 34 26 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 3d 61 74 74 61 63 68 6d 65 6e 74 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 33 44 64 6f 63 6b 65 72 69 7a 65 64 2d 70 68 61 6e 74 6f 6d 6a 73 2e 74 61 72 2e 67 7a 26 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3d 61 70 70 6c 69 63 61 74 69 6f 6e 25 32 46 6f 63 74 65 74 2d 73 74 72 65 61 6d 0a 68 6f 73 74 3a 67 69 74 68 75 62 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 72 65 6c 65 61 73 65 2d 61 73 73 65 74 2d 32 65 36 35 62 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 0a 0a 68 6f 73 74 0a 55 4e 53 49 47 4e 45 44 2d 50 41 59 4c 4f 41 44</CanonicalRequestBytes>
<RequestId>5H3HS9CQ65CEGHR1</RequestId>
<HostId>kgfTAtBCXE8Bfpnz+OD31R+Vkp/uJDrevs49SCuW9TMWWw6yru81XVi4UmX+FVYWj0m1KGYit4s=</HostId>
</Error>

Something wrong with Github it seems.

dnmahendra commented 3 years ago

You can run the./build.sh and get your own dockerized-phantomjs.tar.gz file as an alternative. I had to make a few changes to the Dockerfile as the old one is not working.

FROM ubuntu:18.04

# Setup system deps
RUN apt update
RUN apt -y install wget build-essential curl rsync tar python3.8 python3-pip git libfontconfig1

RUN python3 --version
RUN pip3 --version
# Setup Node
ENV NODE_VERSION 4.4.2
ENV NPM_VERSION 3.8.5

RUN git clone https://github.com/creationix/nvm.git /.nvm
RUN echo "source /.nvm/nvm.sh" >> /etc/bash.bashrc
RUN /bin/bash -c 'source /.nvm/nvm.sh && nvm install $NODE_VERSION && nvm use $NODE_VERSION && nvm alias default $NODE_VERSION && ln -s /.nvm/versions/node/v$NODE_VERSION/bin/node /usr/local/bin/node && ln -s /.nvm/versions/node/v$NODE_VERSION/bin/npm /usr/local/bin/npm'
RUN npm install -g npm@$NPM_VERSION

# Setup dockerize
RUN pip3 install git+https://github.com/larsks/dockerize

# Copy package.json
COPY ./package.json /app/
WORKDIR /app/

# Install node deps
RUN npm install --production

# Copy script
COPY ./index.js /app/

CMD ["npm", "run", "create"]
jamesottaway commented 3 years ago

Looks like it's fixed now.

sksankarraj commented 3 years ago

Yep they fixed it now.

kid-icarus commented 3 years ago

image

looks like they fixed it! 🙂