search

eclipse-theia / theia-ide

The Eclipse IDE is a modern and open IDE for cloud and desktop. The Theia IDE is based on the Theia platform. The Theia IDE is available as a downloadable desktop application. You can also try the latest version of the Theia IDE online. For more details, see the Readme below.
https://theia-ide.org/#theiaide
MIT License
343 stars 129 forks source link

TheiaIDE.AppImage has invalid checksum on Eclipse download site #397

Open 0rzech opened 1 month ago

0rzech commented 1 month ago

Bug Description:

TheiaIDE.AppImage has invalid checksum on Eclipse download site.

Steps to Reproduce:

  1. Go to https://www.eclipse.org/downloads/download.php?file=/theia/ide/latest/linux/TheiaIDE.AppImage .
  2. Click on SHA-512.
  3. The presented checksum is going to be: 
    c91a09a4911816a81ba18a042a9f0f4619db112250b596930dac2e9a8a2446946e591283e2651caa677113d9a3f54e184810b836ca3b84f1260c542f786283e3

Additional Information

The actual file checksum is:

e120d610d2b4b18696215a4e609ac53b8e5eef8f41c89324a95be2b01a73a87235f60594b8ca7f289e27ad1ad28fd6f73ba615c6a86651823fd3e2b66f1b6ef2
sgraband commented 1 month ago

I cannot reproduce this. I get the correct checksum. Could you re-check?

0rzech commented 1 month ago

Now I can't reproduce either, but at the time of creating this issue the download site did present that weird checksum (weird, because it did not match the previous version either, AFAIR).

Btw., while the download site did present the wrong checksum, the https://download.eclipse.org/theia/ide/1.53.200/linux/ download folder has been containing latest-linux.yml with correct one.

JonasHelming commented 2 weeks ago

@0rzech As there is currently no way to reproduce this, I suggest to close this and see whether it ever happens again. If this fine for you?

0rzech commented 2 weeks ago

TBH, if I were you, I'd wait until next release to see if there's again some time window of wrong checksum and eventually then close the issue. But the call is yours, of course! 🙂

JonasHelming commented 2 weeks ago

Yes, makes sense @sgraband Can you create a reminder please?

sgraband commented 2 weeks ago

I already monitored this with the latest release and it seems like the mirrors are indeed slow. It seems like the mirror is only updated after around 1-2 days. While we do not control the mirrors we can control what we link on the webpage. Therefore i will create a reminder for the next release to recheck this, as i am not sure which file is actually downloaded and which checksum is displayed and what we can do to decrease the impact that this has.