rio / features

A collection of devcontainer features
MIT License
23 stars 2 forks source link

Kustomize feature installation is failing due to checksum mismatch #37

Closed shilpa-0 closed 9 months ago

shilpa-0 commented 10 months ago

Installation of Kustomize feature fails at Verifying checksum step.

#0 0.306 ===========================================================================

#0 0.306 Feature       : Kustomize

#0 0.306 Description   : Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into kubectl as apply -k.

#0 0.306 Id            : ghcr.io/rio/features/kustomize

#0 0.306 Version       : 1.1.0

#0 0.306 Documentation : 

#0 0.306 Options       :

#0 0.306     VERSION="latest"

#0 0.306 ================================

[2023-10-23T16:03:30.110Z] ===========================================

#0 1.078 Installing kustomize latest for amd64 ...

#0 1.078 Downloading checksums https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/v5.1.1/checksums.txt ...

#0 1.614 2023-10-23 16:03:28 URL:https://objects.githubusercontent.com/github-production-release-asset-2e65be/133067498/9eb51688-d0cd-40c2-ab6a-cb5484e53cdb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20231023%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231023T160328Z&X-Amz-Expires=300&X-Amz-Signature=c2d169b4f22c41fa30249100692f6eb56fdcf04d088e9a7bccac0e98da6baa4a&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=133067498&response-content-disposition=attachment%3B%20filename%3Dchecksums.txt&response-content-type=application%2Foctet-stream [617/617] -> "/tmp/checksums.txt" [1]

#0 1.615 Downloading https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/v5.2.1/kustomize_v5.2.1_linux_amd64.tar.gz ...

#0 3.023 Verifying checksum 3b30477a7ff4fb6547fa77d8117e66d995c2bdd526de0dafbf8b7bcb9556c85d ...

#0 3.023 2023-10-23 16:03:30 URL:https://objects.githubusercontent.com/github-production-release-asset-2e65be/133067498/88dbd3c1-b048-4327-a04f-834d97f5acb6?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20231023%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231023T160129Z&X-Amz-Expires=300&X-Amz-Signature=a6e5c8e24bbafd414ccabdf2bf151289cfe165ba3c575bcd16e1618cdd6ecd1f&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=133067498&response-content-disposition=attachment%3B%20filename%3Dkustomize_v5.2.1_linux_amd64.tar.gz&response-content-type=application%2Foctet-stream [5946650/5946650] -> "/tmp/kustomize.tar.gz" [1]

#0 3.053 /tmp/kustomize.tar.gz: FAILED

#0 3.053 sha256sum: WARNING: 1 computed checksum did NOT match

#0 3.053 ERROR: Feature "Kustomize" (ghcr.io/rio/features/kustomize) failed to install!

------
rio commented 10 months ago

Yeah it looks like they changed something in their checksum formatting. CI is failing for all those jobs. I'll have a look later.

rio commented 10 months ago

Just confirmed from 5.2.0 onward they've changed the assets. A workaround is to version lock kustomize to 5.1.1 by just adding "version": "5.1.1" to your feature block.

shilpa-0 commented 10 months ago

Thanks for the workaround

rio commented 10 months ago

I've set the workaround as the default for the feature. This way the happy path still works although you won't get the very latest kustomize. At least until I get time to create a backwards compatible fix.

Contributions are welcome of course ;)

rio commented 9 months ago

Upstream kustomize apparently made a mistake they fixed it. I've reverted the default back to "latest" and added an error message if someone tries to install 5.2.0