search

k3s-io / k3s

Lightweight Kubernetes
https://k3s.io
Apache License 2.0
27.66k stars 2.32k forks source link

get.k3s.io - k3s binary corrupted in virtual box - Download sha256 does not match #1911

Closed ergoz closed 4 years ago

ergoz commented 4 years ago

Version: Try to install from channels: stable, latest, testing

Describe the bug Just see in reproduce steps

To Reproduce Ubuntu 18.04 and Debian 10

root@k3s-master:/home/ergoz# curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=stable INSTALL_K3S_EXEC="--disable=traefik" sh -s -
[INFO]  Finding release for channel stable
[INFO]  Using v1.18.3+k3s1 as release
[INFO]  Downloading hash https://github.com/rancher/k3s/releases/download/v1.18.3+k3s1/sha256sum-amd64.txt
[INFO]  Downloading binary https://github.com/rancher/k3s/releases/download/v1.18.3+k3s1/k3s
[INFO]  Verifying binary download
[ERROR]  Download sha256 does not match e9ac0c0cfec9d36c3d86450467cfd147c6ee944eeef17d5d245aec9af7682898, got b440ce6f5377ea5ac6e732486762ee50128b5dd82c58b8d301f88cebf5fba97e

Expected behavior installed k3s without errors

Additional context / logs

root@k3s-master:/home/ergoz# df -h
Filesystem      Size  Used Avail Use% Mounted on
udev            1.9G     0  1.9G   0% /dev
tmpfs           395M 1004K  394M   1% /run
/dev/sda2        20G  6.1G   13G  33% /
tmpfs           2.0G     0  2.0G   0% /dev/shm
tmpfs           5.0M     0  5.0M   0% /run/lock
tmpfs           2.0G     0  2.0G   0% /sys/fs/cgroup
/dev/loop0       98M   98M     0 100% /snap/core/9289
/dev/loop1       90M   90M     0 100% /snap/core/8268
tmpfs           395M     0  395M   0% /run/user/1000
unzip is already the newest version (6.0-21ubuntu1).
zlib1g is already the newest version (1:1.2.11.dfsg-0ubuntu2).
tar is already the newest version (1.29b-2ubuntu0.1).
root@k3s-master:/home/ergoz# curl --version
curl 7.58.0 (x86_64-pc-linux-gnu) libcurl/7.58.0 OpenSSL/1.1.1 zlib/1.2.11 libidn2/2.0.4 libpsl/0.19.1 (+libidn2/2.0.4) nghttp2/1.30.0 librtmp/2.3
Release-Date: 2018-01-24
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp smb smbs smtp smtps telnet tftp 
Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL

P.S. Sorry for bad English, it is not native for me :)

ergoz commented 4 years ago

hmm. it is strange, but if i'm downloading by chrome browser on windows and send to server via scp - everything is ok and sha256 of k3s is same as in txt file. But if i uses curl or wget in virtualbox server- it does not match... Does anybody know why it can be??? Same problem in #1910

same problem with curl and wget: curl

root@k3s-master:/home/ergoz# curl -Lf https://github.com/rancher/k3s/releases/download/v1.18.3%2Bk3s1/k3s -o k3s
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   616  100   616    0     0   2774      0 --:--:-- --:--:-- --:--:--  2787
100 51.1M  100 51.1M    0     0  3771k      0  0:00:13  0:00:13 --:--:-- 4599k
root@k3s-master:/home/ergoz# sha256sum k3s
a2038dbc6f9e15b16685d46b50a9036135592b9af07ca51258144ade55a1bcc3  k3s

wget

root@k3s-master:/home/ergoz# wget https://github.com/rancher/k3s/releases/download/v1.18.3%2Bk3s1/k3s -d
DEBUG output created by Wget 1.19.4 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Converted file name 'k3s' (UTF-8) -> 'k3s' (UTF-8)
--2020-06-16 14:20:34--  https://github.com/rancher/k3s/releases/download/v1.18.3%2Bk3s1/k3s
Resolving github.com (github.com)... 140.82.118.4
Caching github.com => 140.82.118.4
Connecting to github.com (github.com)|140.82.118.4|:443... connected.
Created socket 5.
Releasing 0x000055ee8d6ae060 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 5 to SSL handle 0x000055ee8d6ae8e0
certificate:
  subject: CN=github.com,O=GitHub\\, Inc.,L=San Francisco,ST=California,C=US
  issuer:  CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US
X509 certificate successfully verified and matches host github.com

---request begin---
GET /rancher/k3s/releases/download/v1.18.3%2Bk3s1/k3s HTTP/1.1
User-Agent: Wget/1.19.4 (linux-gnu)
Accept: */*
Accept-Encoding: identity
Host: github.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response... 
---response begin---
HTTP/1.1 302 Found
date: Tue, 16 Jun 2020 14:20:34 GMT
content-type: text/html; charset=utf-8
server: GitHub.com
status: 302 Found
vary: X-PJAX, Accept-Encoding, Accept, X-Requested-With, Accept-Encoding
location: https://github-production-release-asset-2e65be.s3.amazonaws.com/135516270/1568fc80-a3ed-11ea-8acc-10bc78fc268c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200616%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200616T142034Z&X-Amz-Expires=300&X-Amz-Signature=87baa15c3ee7a6c94d44ce1105276f24610cee0019bafe7a7eb8bc0184371590&X-Amz-SignedHeaders=host&actor_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dk3s&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expect-ct: max-age=2592000, report-uri="https://api.github.com/_private/browser/errors"
content-security-policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' uploads.github.com www.githubstatus.com collector.githubapp.com api.github.com www.google-analytics.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events wss://live.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com *.githubusercontent.com; manifest-src 'self'; media-src 'none'; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.com/socket-worker.js gist.github.com/socket-worker.js
Set-Cookie: _gh_sess=AVsto9PU1fqARfM0lx7SYX7BAKnBrH4TLXN7derTuMjaBe2IRT3c5a7CvtfeIyR7GDY91P0W4gSGilE1irEYfpep%2B7EA5%2FZNZg9dEcoLuawWmk7Jt%2BZDcvUG%2FJpoq83F2fD8He%2BV%2BoAuWA1ECQLKBCF1pOdiU6D%2Bi6zVVF%2F8%2FiKGM1jh50BRJIlWJq4s1VluvsPEHgY0xz95%2BQILXpx1yvNMrME7cd1UlCpH2SHWeyxmjbLlfpCIusDACjV3HXOOSZNhqKEIjdrD5W233rczJg%3D%3D--WIE3o6%2B06OSbHXM9--YZBKL318dAZbKTWXQCPlng%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
Set-Cookie: _octo=GH1.1.886475565.1592317234; Path=/; Domain=github.com; Expires=Wed, 16 Jun 2021 14:20:34 GMT; Secure; SameSite=Lax
Set-Cookie: logged_in=no; Path=/; Domain=github.com; Expires=Wed, 16 Jun 2021 14:20:34 GMT; HttpOnly; Secure; SameSite=Lax
Content-Length: 616
X-GitHub-Request-Id: EE1A:36880:D5373:12B84B:5EE8D532

---response end---
302 Found

Stored cookie github.com -1 (ANY) / <session> <secure> [expiry none] _gh_sess AVsto9PU1fqARfM0lx7SYX7BAKnBrH4TLXN7derTuMjaBe2IRT3c5a7CvtfeIyR7GDY91P0W4gSGilE1irEYfpep%2B7EA5%2FZNZg9dEcoLuawWmk7Jt%2BZDcvUG%2FJpoq83F2fD8He%2BV%2BoAuWA1ECQLKBCF1pOdiU6D%2Bi6zVVF%2F8%2FiKGM1jh50BRJIlWJq4s1VluvsPEHgY0xz95%2BQILXpx1yvNMrME7cd1UlCpH2SHWeyxmjbLlfpCIusDACjV3HXOOSZNhqKEIjdrD5W233rczJg%3D%3D--WIE3o6%2B06OSbHXM9--YZBKL318dAZbKTWXQCPlng%3D%3D
cdm: 1

Stored cookie github.com -1 (ANY) / <permanent> <secure> [expiry 2021-06-16 14:20:34] _octo GH1.1.886475565.1592317234
cdm: 1

Stored cookie github.com -1 (ANY) / <permanent> <secure> [expiry 2021-06-16 14:20:34] logged_in no
Registered socket 5 for persistent reuse.
Parsed Strict-Transport-Security max-age = 31536000, includeSubDomains = true
Updated HSTS host: github.com:443 (max-age: 31536000, includeSubdomains: true)
URI content encoding = ‘utf-8’
Location: https://github-production-release-asset-2e65be.s3.amazonaws.com/135516270/1568fc80-a3ed-11ea-8acc-10bc78fc268c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200616%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200616T142034Z&X-Amz-Expires=300&X-Amz-Signature=87baa15c3ee7a6c94d44ce1105276f24610cee0019bafe7a7eb8bc0184371590&X-Amz-SignedHeaders=host&actor_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dk3s&response-content-type=application%2Foctet-stream [following]
Skipping 616 bytes of body: [<html><body>You are being <a href="https://github-production-release-asset-2e65be.s3.amazonaws.com/135516270/1568fc80-a3ed-11ea-8acc-10bc78fc268c?X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200616%2Fus-east-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20200616T142034Z&amp;X-Amz-Expires=300&amp;X-Amz-Signature=87baa15c3ee7a6c94d44ce1105276f24610cee0019bafe7a7eb8bc0184371590&amp;X-Amz-SignedHeaders=host&amp;actor_id=0&amp;repo_id=135516270&amp;response-content-disposition=attachmentSkipping 104 bytes of body: [%3B%20filename%3Dk3s&amp;response-content-type=application%2Foctet-stream">redirected</a>.</body></html>] done.
URI content encoding = None
Converted file name 'k3s' (UTF-8) -> 'k3s' (UTF-8)
--2020-06-16 14:20:34--  https://github-production-release-asset-2e65be.s3.amazonaws.com/135516270/1568fc80-a3ed-11ea-8acc-10bc78fc268c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200616%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200616T142034Z&X-Amz-Expires=300&X-Amz-Signature=87baa15c3ee7a6c94d44ce1105276f24610cee0019bafe7a7eb8bc0184371590&X-Amz-SignedHeaders=host&actor_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dk3s&response-content-type=application%2Foctet-stream
Resolving github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)... 52.217.16.60
Caching github-production-release-asset-2e65be.s3.amazonaws.com => 52.217.16.60
Connecting to github-production-release-asset-2e65be.s3.amazonaws.com (github-production-release-asset-2e65be.s3.amazonaws.com)|52.217.16.60|:443... connected.
Created socket 6.
Releasing 0x000055ee8d6c70d0 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 6 to SSL handle 0x000055ee8d6b0b90
certificate:
  subject: CN=*.s3.amazonaws.com,O=Amazon.com\\, Inc.,L=Seattle,ST=Washington,C=US
  issuer:  CN=DigiCert Baltimore CA-2 G2,OU=www.digicert.com,O=DigiCert Inc,C=US
X509 certificate successfully verified and matches host github-production-release-asset-2e65be.s3.amazonaws.com

---request begin---
GET /135516270/1568fc80-a3ed-11ea-8acc-10bc78fc268c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20200616%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20200616T142034Z&X-Amz-Expires=300&X-Amz-Signature=87baa15c3ee7a6c94d44ce1105276f24610cee0019bafe7a7eb8bc0184371590&X-Amz-SignedHeaders=host&actor_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dk3s&response-content-type=application%2Foctet-stream HTTP/1.1
User-Agent: Wget/1.19.4 (linux-gnu)
Accept: */*
Accept-Encoding: identity
Host: github-production-release-asset-2e65be.s3.amazonaws.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response... 
---response begin---
HTTP/1.1 200 OK
x-amz-id-2: 9HNrJzAtrQsggpEoy/+/xnqgeKmUQWaKwfzf3GHCiyLWVjOuws/3A0UAMRN8tUhu3DKqzofRJRM=
x-amz-request-id: 2894FA8A63168AEF
Date: Tue, 16 Jun 2020 14:20:36 GMT
Last-Modified: Mon, 01 Jun 2020 16:48:46 GMT
ETag: "4d859bce3ea103974cea45c107407ccb"
Content-Disposition: attachment; filename=k3s
Accept-Ranges: bytes
Content-Type: application/octet-stream
Content-Length: 53604352
Server: AmazonS3

---response end---
200 OK
Disabling further reuse of socket 5.
Closed 5/SSL 0x000055ee8d6ae8e0
Registered socket 6 for persistent reuse.
Length: 53604352 (51M) [application/octet-stream]
Saving to: ‘k3s’

k3s                                             100%[======================================================================================================>]  51.12M  4.56MB/s    in 13s     

2020-06-16 14:20:47 (4.01 MB/s) - ‘k3s’ saved [53604352/53604352]

Saving HSTS entries to /root/.wget-hsts

I runs it in Virtualbox 6.1 (same problem on ubuntu 18.04 and debian 10).

ergoz commented 4 years ago

this problem only if i download in virtual box as root user, under usual user - sum is the same. I think this problem not in k3s. Closing.

ghost commented 3 years ago

Anyone else encountering this issue should upgrade VirtualBox to the latest version.

See, https://www.virtualbox.org/ticket/19695?cversion=0&cnum_hist=6