cluster-api: checksum mismatch while building docker provider test artifacts

What steps did you take and what happened:

  1. get a fresh copy of cluster-api repo
  2. follow clusterctl devel instructions to the build artifacts locally step
  3. build infrastructure provider with command make -C test/infrastructure/docker docker-build REGISTRY=gcr.io/k8s-staging-cluster-api

the following error is produced:

 => ERROR [builder  8/15] RUN --mount=type=cache,target=/go/pkg/mod     go mod download                                    0.4s
------
 > [builder  8/15] RUN --mount=type=cache,target=/go/pkg/mod     go mod download:
#17 0.367 verifying github.com/onsi/ginkgo@v1.16.3: checksum mismatch
#17 0.367       downloaded: h1:nbWI/w6DYT9gXDQi59Mht//PLPPFv/Hc3fHms4eVUK0=
#17 0.367       go.sum:     h1:3s86PZkI1ApJh6HFIzC1gXby/mIyZqfE5zxSvtoBSsM=
#17 0.367 
#17 0.367 SECURITY ERROR
#17 0.367 This download does NOT match an earlier download recorded in go.sum.
#17 0.367 The bits may have been replaced on the origin server, or an attacker may
#17 0.367 have intercepted the download attempt.
#17 0.367 
#17 0.367 For more information, see 'go help module-auth'.
------
executor failed running [/bin/sh -c go mod download]: exit code: 1
make: *** [Makefile:163: docker-build] Error 1

What did you expect to happen:

The docker provider images would be built

Anything else you would like to add:

I tried running a go mod tidy and go mod vendor in the cluster-api/test directory, but it also complained about the hashes.

$ go mod tidy                                                                                                                   
go: downloading github.com/onsi/ginkgo v1.16.3                                                                                  
go: downloading github.com/onsi/gomega v1.13.0                                                                                  
go: downloading sigs.k8s.io/kind v0.11.1
go: downloading k8s.io/klog/v2 v2.9.0
go: downloading k8s.io/utils v0.0.0-20210527160623-6fdb442a123b
go: downloading github.com/stretchr/testify v1.6.1
verifying github.com/onsi/ginkgo@v1.16.3: checksum mismatch
        downloaded: h1:nbWI/w6DYT9gXDQi59Mht//PLPPFv/Hc3fHms4eVUK0=
        go.sum:     h1:3s86PZkI1ApJh6HFIzC1gXby/mIyZqfE5zxSvtoBSsM=
$ go mod vendor
go: downloading github.com/onsi/ginkgo v1.16.3
go: downloading sigs.k8s.io/kind v0.11.1
go: downloading google.golang.org/appengine v1.6.7
verifying github.com/onsi/ginkgo@v1.16.3: checksum mismatch
        downloaded: h1:nbWI/w6DYT9gXDQi59Mht//PLPPFv/Hc3fHms4eVUK0=
        go.sum:     h1:3s86PZkI1ApJh6HFIzC1gXby/mIyZqfE5zxSvtoBSsM=

Environment:

  • Cluster-api version: master branch @ 61e63e0dbbe50a276174826aaf1bcc9847ebc3a5
  • Minikube/KIND version: n/a
  • Kubernetes version: (use kubectl version): n/a
  • OS (e.g. from /etc/os-release): Fedora 34

/kind bug /area provider/docker /area provider/testing

About this issue

  • Original URL
  • State: closed
  • Created 3 years ago
  • Comments: 27 (27 by maintainers)

Most upvoted comments

@vincepri I was not able to reproduce this locally. All the commands ran successfully.

I’ve been using Go 1.16.4, and the Dockerfiles should be using that as well, might be worth a try?

It’s a bit strange that it changes the go.sum 🤔