radius: Failed to install rad-bicep Failed to install Radius CLI (Error code 403)

Bug information

Steps to reproduce (required)

Run install script for MacOS (Silicon) curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash. This curl is taken from here.

Observed behavior (required)

> curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash
Getting the latest Radius CLI...
Your system is darwin_arm64
Installing Radius CLI...

Installing v0.26.8 Radius CLI...
Downloading https://github.com/radius-project/radius/releases/download/v0.26.8/rad_darwin_arm64...
Password:
rad installed into /usr/local/bin successfully
Installing rad-bicep ("rad bicep download")...
Downloading Bicep for channel 0.26...
Attempt 1 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 2 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 3 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 4 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 5 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 6 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 7 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 8 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Attempt 9 failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied
Retrying...Error: failed to download bicep: failed to resolve 0.26: GET "https://ghcr.io/v2/radius-project/radius/bicep/rad-bicep/macos-arm64/manifests/0.26": GET "https://ghcr.io/token?scope=repository%3Aradius-project%2Fradius%2Fbicep%2Frad-bicep%2Fmacos-arm64%3Apull&service=ghcr.io": response status code 403: denied: denied

TraceId:  5dd55f8debd087179dbf8da34ab3ea85

Failed to install rad-bicep
Failed to install Radius CLI
For support, go to https://github.com/radius-project/radius

Desired behavior (required)

Install rad

System information

rad Version (required)

Operating system (required)

MacOS Ventura 13.6 (M2)

Additional context

It is strange to get a 403.

AB#9965

About this issue

Original URL
State: open
Created 8 months ago
Comments: 18 (9 by maintainers)

Commits related to this issue

Remove bicep download authentication credentials (#6615) # Description This removes authentication to GHCR since anonymous pulls are enabled. ## Type of change <!-- Please select **one**... — committed to radius-project/radius by sk593 8 months ago
Remove bicep download authentication credentials (#6615) # Description This removes authentication to GHCR since anonymous pulls are enabled. ## Type of change <!-- Please select **one** of the f... — committed to radius-project/radius by sk593 8 months ago
Remove bicep download authentication credentials (#6615) # Description This removes authentication to GHCR since anonymous pulls are enabled. ## Type of change <!-- Please select **one** of the f... — committed to radius-project/radius by sk593 8 months ago
Fix issue with rad install (#6618) # Description Fixes issue below in #6597 curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash Getting the... — committed to radius-project/radius by vinayada1 8 months ago
Remove bicep download authentication credentials (#6615) # Description This removes authentication to GHCR since anonymous pulls are enabled. ## Type of change <!-- Please select **one** of the f... — committed to willdavsmith/radius by sk593 8 months ago
Fix issue with rad install (#6618) # Description Fixes issue below in #6597 curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash Getting the latest... — committed to willdavsmith/radius by vinayada1 8 months ago
Remove bicep download authentication credentials (#6615) # Description This removes authentication to GHCR since anonymous pulls are enabled. ## Type of change <!-- Please select **one** of the f... — committed to radius-project/radius by sk593 8 months ago
Fix issue with rad install (#6618) # Description Fixes issue below in #6597 curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash Getting the latest... — committed to radius-project/radius by vinayada1 8 months ago

Most upvoted comments

I did a new test and latest script is working fine now

curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash
Getting the latest Radius CLI...
Your system is darwin_arm64

Radius CLI is detected. Current version: v0.26.9
Reinstalling Radius CLI - /usr/local/bin/rad...

Installing v0.26.9 Radius CLI...
Downloading https://github.com/radius-project/radius/releases/download/v0.26.9/rad_darwin_arm64...
Password:
rad installed into /usr/local/bin successfully
Installing rad-bicep ("rad bicep download")...
Downloading Bicep for channel 0.26...
rad-bicep installed successfully

To get started with Radius, please visit https://docs.radapp.io/getting-started/

rad version
RELEASE   VERSION   BICEP     COMMIT
0.26.9    v0.26.9   0.11.90   421a2aeef9e0a8a5c487a8ad6b17719c4826e350

which rad
/usr/local/bin/rad

cmoulliard on Nov 6, 2023

Let’s keep this open until we fix both issues and roll out the release. I think it was auto-closed by the fix for the 403 issue.

rynowak on Nov 1, 2023

Installation fails on macos ARM OS

curl -fsSL "https://raw.githubusercontent.com/radius-project/radius/main/deploy/install.sh" | /bin/bash
Getting the latest Radius CLI...
Your system is darwin_arm64
/bin/bash: line 91: /usr/local/bin/rad: Permission denied

Radius CLI is detected. Current version:
Reinstalling Radius CLI - /usr/local/bin/rad...

Installing v0.26.8 Radius CLI...
Downloading https://github.com/radius-project/radius/releases/download/v0.26.8/rad_darwin_arm64...
Password:
rad installed into /usr/local/bin successfully
Installing rad-bicep ("rad bicep download")...
/bin/bash: line 179: /usr/local/bin/rad: Permission denied
Failed to install rad-bicep
Failed to install Radius CLI
For support, go to https://github.com/radius-project/radius

@cmoulliard , thanks for reporting the issue. We are trying to repro the issue, could you let us know if you have any special user set up that differs from default macOS configuration - such as non admin account.

@cmoulliard - Thanks for reporting the issue. We were able to repro this particular failure and are trying to understand why it doesn’t repro in all cases and what the root cause is. Looks like you have managed to move forward with a workaround. Another workaround would be to run chmod a+x as root on the /usr/local/bin/rad and run the following manually:- rad version rad bicep download

vinayada1 on Oct 31, 2023

Thanks @Peralysis - sorry I missed that.

@shalabhms @willdavsmith @ytimocin - I think the right fix here is probably to make sure that you’re NOT sending credentials for this download here: https://github.com/radius-project/radius/blob/main/pkg/cli/tools/binary_tools.go#L158

The user might have stored credentials that are expired. However, this is a public package so the credentials are not required.

This also feels patch-worthy given how many users have hit this issue.

rynowak on Oct 31, 2023