Checksum mismatches

[paralin]

go: tools imports
        github.com/goreleaser/goreleaser/v2 imports
        github.com/goreleaser/goreleaser/v2/cmd imports
        github.com/goreleaser/goreleaser/v2/internal/pipeline imports
        github.com/goreleaser/goreleaser/v2/internal/pipe/notary imports
        github.com/anchore/quill/quill: github.com/anchore/quill@v0.4.3-0.20240729152143-5642fae720ca: ver
ifying module: checksum mismatch
        downloaded: h1:O2SlvuMrdrsEyfKngGMDBICiIMRje07LDca6guQsUBs=
        sum.golang.org: h1:f6VG+ZvbVmnBFQxn452LTC6Y3beF1GUw07jXe+2GM+o=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
go: tools imports
        github.com/goreleaser/goreleaser/v2 imports
        github.com/goreleaser/goreleaser/v2/cmd imports
        github.com/goreleaser/goreleaser/v2/internal/pipeline imports
        github.com/goreleaser/goreleaser/v2/internal/pipe/notary imports
        github.com/anchore/quill/quill/notary: github.com/anchore/quill@v0.4.3-0.20240729152143-5642fae720
ca: verifying module: checksum mismatch
        downloaded: h1:O2SlvuMrdrsEyfKngGMDBICiIMRje07LDca6guQsUBs=
        sum.golang.org: h1:f6VG+ZvbVmnBFQxn452LTC6Y3beF1GUw07jXe+2GM+o=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
go: tools imports
        github.com/goreleaser/goreleaser/v2 imports
        github.com/goreleaser/goreleaser/v2/cmd imports
        github.com/goreleaser/goreleaser/v2/internal/pipeline imports
        github.com/goreleaser/goreleaser/v2/internal/pipe/notary imports
        github.com/anchore/quill/quill/pki/load: github.com/anchore/quill@v0.4.3-0.20240729152143-5642fae7
20ca: verifying module: checksum mismatch
        downloaded: h1:O2SlvuMrdrsEyfKngGMDBICiIMRje07LDca6guQsUBs=
        sum.golang.org: h1:f6VG+ZvbVmnBFQxn452LTC6Y3beF1GUw07jXe+2GM+o=

To reproduce:

go clean -modcache
export GOPROXY=direct
git clone https://github.com/goreleaser/goreleaser
cd goreleaser
go mod tidy

Did you retroactively change which commit v0.4.3 points to? Please make a new release v0.4.4 on the HEAD commit to resolve this.

[kzantow]

Hi @paralin -- a couple things:

First, as far as I can tell, there has not been a v0.4.3 tag created in this repository. If you look at the version you've referenced: v0.4.3-0.20240729152143-5642fae720ca it is a pseduo-version generated by go when you go get something like the main branch.

Secondly, cloning the goreleaser repository shows it is referencing quill v0.4.2 and go mod tidy works fine when I tried this. These are the go.mod entries:

github.com/anchore/quill v0.4.2 h1:0w1tDLI9cj37yqjwZ2QiaKTvUd/eL0WHeKJvDbRvT3s=
github.com/anchore/quill v0.4.2/go.mod h1:XaYHeiHzU2gjlLazFfhk3GEuXxFxro+UCpf3FnRsOZQ=

It sounds like you may need to clean your local cache or go.sum file -- e.g. go clean -modcache, delete a local go.sum and then go mod tidy?

[paralin]

@kzantow Even with go clean -modcache I have the same error.

Also when removing the dirs manually:

chmod -R 755 ~/go/pkg/mod/github.com/anchore
rm -rf ~/go/pkg/mod/github.com/anchore
rm -rf ~/go/pkg/sumdb

Still this happens:

cd goreleaser
export GOPROXY=direct
go mod tidy

then

verifying github.com/anchore/quill@v0.4.2: checksum mismatch
        downloaded: h1:nnmgSOsKWuHrvwKFB8EempJhO1A/n5Zkw90VSbHQU2k=
        go.sum:     h1:0w1tDLI9cj37yqjwZ2QiaKTvUd/eL0WHeKJvDbRvT3s=

This is with go version go1.23rc2 darwin/arm64

If you don't set GOPROXY=direct, it will use the Go proxy for modules, which returns the correct hash.

I agree it's a weird situation but the only two packages I am seeing this problem with are anchore/quill and anchore/go-macholibre

[paralin]

I was able to work around the issue by forking both packages and adding replace directives. I assume next release the problem will go away. Its' vexing because the issue only happens with GOPROXY=direct and on MacOS (not linux).

If anyone else runs into the same issue feel free to comment and I will reopen.

[kzantow]

Hey @paralin -- I missed a couple details: the GOPROXY=direct bit and the arm64 bit. I would point out that go-macholibre has no tags at all, and isn't currently creating releases so this isn't going to be fixed by anything we plan on doing. By using GOPROXY=direct, go should be cloning the git repo and calculating the checksum from source. Presumably that's not matching what is in the go.sum you have for some reason. I'd be pretty interested to figure out what that reason is, though. I wonder if there's some oddity with filename capitalization or ordering for whatever reason being different on the arm-based systems. If you happen to figure it out, please do let us know -- especially if it's something we could correct in the repos.

[paralin]

I got the same checksum failure here even on my fork (which I didn't change anything on) (with a commit as the version in go.mod): https://github.com/aperturerobotics/bifrost/actions/runs/10212208324/job/28255061955#step:4:178

I think there is something about this repo which is causing it to hash differently on MacOS and Linux when the Go tool downloads it. It might be the symlinks to the test fixtures or something else.

[paralin]

To test this, on macos:

export GOPROXY=direct
export GOSUMDB=off
rm -rf ~/go/pkg/mod/github.com/anchore
go mod tidy

Then on linux (with the same gomod): https://github.com/aperturerobotics/common/blob/58ef20f/tools/go.mod

export GOPROXY=direct
export GOSUMDB=off
rm -rf ~/go/pkg/mod/github.com/anchore
go mod tidy

Then I cd ~/go/pkg/mod/github.com/anchore/quill
tar -cvf ~/quill-v0.4.2.tar.gz ./

The two versions of the mod are uploaded:

• MacOS: https://drive.google.com/file/d/18_ukHNcOLB4xcXlikV-LEGBmjsWl2w8x/view
• Linux: https://drive.google.com/file/d/1EdKQBWZSIZxiRgEtQeBB1eO2puYRSWut/view

I then went and diffed the two on a linux machine:

mkdir ./quill-linux && cd quill-linux
tar -xf ../../quill-v0.4.2-linux.tar.gz
cd ..
mkdir ./quill-macos && cd quill-macos
tar -xf ../../quill-v0.4.2-macos.tar.gz
cd ..

# Compare with rsync
rsync -rvnc --delete ./quill-macos/ ./quill-linux/

The differences:

internal/test/test-fixtures/assets/chain-ca-cert.pem
internal/test/test-fixtures/assets/chain-ca-csr.pem
internal/test/test-fixtures/assets/chain-ca-int-cert.pem
internal/test/test-fixtures/assets/chain-ca-int-csr.pem
internal/test/test-fixtures/assets/chain-ca-int-key.pem
internal/test/test-fixtures/assets/chain-ca-key.pem
internal/test/test-fixtures/assets/chain-leaf-cert.pem
internal/test/test-fixtures/assets/chain-leaf-csr.pem
internal/test/test-fixtures/assets/chain-leaf-key.pem
internal/test/test-fixtures/assets/chain.p12
internal/test/test-fixtures/assets/chain.pem
internal/test/test-fixtures/assets/hello
internal/test/test-fixtures/assets/hello-cert.pem
internal/test/test-fixtures/assets/hello-config.ext
internal/test/test-fixtures/assets/hello-key.pem
internal/test/test-fixtures/assets/hello.p12
internal/test/test-fixtures/assets/hello_adhoc_signed
internal/test/test-fixtures/assets/hello_signed
internal/test/test-fixtures/assets/ls_universal_signed
internal/test/test-fixtures/assets/ls_x86_64_signed
internal/test/test-fixtures/assets/syft_signed
internal/test/test-fixtures/assets/syft_unsigned
internal/test/test-fixtures/assets/syft_unsigned_arm64
internal/test/test-fixtures/assets/x509-ca-cert.pem
internal/test/test-fixtures/assets/x509-ca-key.pem
internal/test/test-fixtures/assets/x509-cert.pem
internal/test/test-fixtures/assets/x509-domain.ext
internal/test/test-fixtures/assets/x509-key.pem

When I compared the two, they seem to be substantially larger in the macos version:

~/cmp# ls quill-linux/internal/test/test-fixtures/assets/ -lah
total 120K
dr-xr-xr-x 2 root root 4.0K Aug  2 08:23 .
dr-xr-xr-x 8 root root 4.0K Aug  2 08:23 ..
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-ca-cert.pem
-r--r--r-- 1 root root  128 Aug  2 08:23 chain-ca-csr.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-ca-int-cert.pem
-r--r--r-- 1 root root  128 Aug  2 08:23 chain-ca-int-csr.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-ca-int-key.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-ca-key.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-leaf-cert.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-leaf-csr.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain-leaf-key.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 chain.p12
-r--r--r-- 1 root root  130 Aug  2 08:23 chain.pem
-r--r--r-- 1 root root  130 Aug  2 08:23 hello
-r--r--r-- 1 root root  129 Aug  2 08:23 hello-cert.pem
-r--r--r-- 1 root root  128 Aug  2 08:23 hello-config.ext
-r--r--r-- 1 root root  129 Aug  2 08:23 hello-key.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 hello.p12
-r--r--r-- 1 root root  130 Aug  2 08:23 hello_adhoc_signed
-r--r--r-- 1 root root  130 Aug  2 08:23 hello_signed
-r--r--r-- 1 root root  131 Aug  2 08:23 ls_universal_signed
-r--r--r-- 1 root root  130 Aug  2 08:23 ls_x86_64_signed
-r--r--r-- 1 root root  133 Aug  2 08:23 syft_signed
-r--r--r-- 1 root root  133 Aug  2 08:23 syft_unsigned
-r--r--r-- 1 root root  133 Aug  2 08:23 syft_unsigned_arm64
-r--r--r-- 1 root root  129 Aug  2 08:23 x509-ca-cert.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 x509-ca-key.pem
-r--r--r-- 1 root root  129 Aug  2 08:23 x509-cert.pem
-r--r--r-- 1 root root  128 Aug  2 08:23 x509-domain.ext
-r--r--r-- 1 root root  129 Aug  2 08:23 x509-key.pem
~/cmp# ls quill-macos/internal/test/test-fixtures/assets/ -lah
total 127M
dr-xr-xr-x 2 501 staff 4.0K Aug  2 08:25 .
dr-xr-xr-x 8 501 staff 4.0K Aug  2 08:25 ..
-r--r--r-- 1 501 staff 3.8K Aug  2 08:25 chain-ca-cert.pem
-r--r--r-- 1 501 staff  920 Aug  2 08:25 chain-ca-csr.pem
-r--r--r-- 1 501 staff 3.9K Aug  2 08:25 chain-ca-int-cert.pem
-r--r--r-- 1 501 staff  932 Aug  2 08:25 chain-ca-int-csr.pem
-r--r--r-- 1 501 staff 1.7K Aug  2 08:25 chain-ca-int-key.pem
-r--r--r-- 1 501 staff 1.7K Aug  2 08:25 chain-ca-key.pem
-r--r--r-- 1 501 staff 4.0K Aug  2 08:25 chain-leaf-cert.pem
-r--r--r-- 1 501 staff 1017 Aug  2 08:25 chain-leaf-csr.pem
-r--r--r-- 1 501 staff 1.7K Aug  2 08:25 chain-leaf-key.pem
-r--r--r-- 1 501 staff 4.0K Aug  2 08:25 chain.p12
-r--r--r-- 1 501 staff  12K Aug  2 08:25 chain.pem
-r--r--r-- 1 501 staff  49K Aug  2 08:25 hello
-r--r--r-- 1 501 staff 1.3K Aug  2 08:25 hello-cert.pem
-r--r--r-- 1 501 staff  814 Aug  2 08:25 hello-config.ext
-r--r--r-- 1 501 staff 1.7K Aug  2 08:25 hello-key.pem
-r--r--r-- 1 501 staff 2.5K Aug  2 08:25 hello.p12
-r--r--r-- 1 501 staff  67K Aug  2 08:25 hello_adhoc_signed
-r--r--r-- 1 501 staff  67K Aug  2 08:25 hello_signed
-r--r--r-- 1 501 staff 154K Aug  2 08:25 ls_universal_signed
-r--r--r-- 1 501 staff  59K Aug  2 08:25 ls_x86_64_signed
-r--r--r-- 1 501 staff  22M Aug  2 08:25 syft_signed
-r--r--r-- 1 501 staff  26M Aug  2 08:25 syft_unsigned
-r--r--r-- 1 501 staff  80M Aug  2 08:25 syft_unsigned_arm64
-r--r--r-- 1 501 staff 1.5K Aug  2 08:25 x509-ca-cert.pem
-r--r--r-- 1 501 staff 1.7K Aug  2 08:25 x509-ca-key.pem
-r--r--r-- 1 501 staff 1.7K Aug  2 08:25 x509-cert.pem
-r--r--r-- 1 501 staff  126 Aug  2 08:25 x509-domain.ext
-r--r--r-- 1 501 staff 1.8K Aug  2 08:25 x509-key.pem

Indeed you can see even the file sizes of the .tar.gz are different:

-rw-r--r-- 1 cjs staff 760K Aug 2 01:33 quill-v0.4.2-linux.tar.gz
-rw-r--r-- 1 cjs staff 128M Aug 2 01:32 quill-v0.4.2-macos.tar.gz

[paralin]

When I dropped the test fixtures for both quill and go-macholibre it fixed the issue (different checksum on mac and linux).

• https://github.com/paralin/anchore-go-macholibre/tree/drop-test-fixtures
• https://github.com/paralin/anchore-quill/tree/drop-test-fixtures
• https://github.com/aperturerobotics/common/blob/5b1bbc1c8c8bf0f299a575f613aa6df15b041c75/tools/go.mod#L31

[kzantow]

Does your fork of go-macholibre have the same issue? I don't see any symlinks in that one, it's a pretty small repo.

[paralin]

Yes, and I think the issue is not symlinks but rather the actual file contents inside text-fixtures, as shown above.

[kzantow]

Oh, I see these are both using LFS, this is bound to be the culprit. I don't know offhand what the solution is aside from "don't use LFS", but I think by removing the test-fixtures, you are removing the files that are fetched via LFS, and it's fixing your problem. I'll ask the team what they'd like to do.

[paralin]

@kzantow Thanks!

[caarlos0]

fwiw i tried this on both mac and linux:

# in goreleaser's src folder
go clean -modcache
sudo rm -rf $GOPATH/pkg/mod/github.com/anchore $GOPATH/pkg/sumdb
GOPROXY=direct go mod tidy

and both worked fine... it seems there's another variable we're missing?

fwiw go version 1.22.5, git version 2.45.2, git-lfs version 3.5.1, in my case, everything installed with nix on both OSs.

[kzantow]

I wonder if there's some git configuration that causes the LFS to have some different behavior.

[caarlos0]

fwiw it seems I have the correct fixtures in my gopath:

❯ ls -lha --tree $GOPATH/pkg/mod/github.com/anchore/quill@v0.4.2/internal/test/test-fixtures/
dr-xr-xr-x carlos staff 288 B  Tue Aug 13 09:40:04 2024 test-fixtures
.r--r--r-- carlos staff   0 B  Tue Aug 13 09:40:04 2024 ├── .gitignore
dr-xr-xr-x carlos staff 960 B  Tue Aug 13 09:40:04 2024 ├── assets
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-ca-cert.pem
.r--r--r-- carlos staff 128 B  Tue Aug 13 09:40:04 2024 │   ├── chain-ca-csr.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-ca-int-cert.pem
.r--r--r-- carlos staff 128 B  Tue Aug 13 09:40:04 2024 │   ├── chain-ca-int-csr.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-ca-int-key.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-ca-key.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-leaf-cert.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-leaf-csr.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain-leaf-key.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── chain.p12
.r--r--r-- carlos staff 130 B  Tue Aug 13 09:40:04 2024 │   ├── chain.pem
.r--r--r-- carlos staff 130 B  Tue Aug 13 09:40:04 2024 │   ├── hello
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── hello-cert.pem
.r--r--r-- carlos staff 128 B  Tue Aug 13 09:40:04 2024 │   ├── hello-config.ext
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── hello-key.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── hello.p12
.r--r--r-- carlos staff 130 B  Tue Aug 13 09:40:04 2024 │   ├── hello_adhoc_signed
.r--r--r-- carlos staff 130 B  Tue Aug 13 09:40:04 2024 │   ├── hello_signed
.r--r--r-- carlos staff 131 B  Tue Aug 13 09:40:04 2024 │   ├── ls_universal_signed
.r--r--r-- carlos staff 130 B  Tue Aug 13 09:40:04 2024 │   ├── ls_x86_64_signed
.r--r--r-- carlos staff 133 B  Tue Aug 13 09:40:04 2024 │   ├── syft_signed
.r--r--r-- carlos staff 133 B  Tue Aug 13 09:40:04 2024 │   ├── syft_unsigned
.r--r--r-- carlos staff 133 B  Tue Aug 13 09:40:04 2024 │   ├── syft_unsigned_arm64
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── x509-ca-cert.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── x509-ca-key.pem
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   ├── x509-cert.pem
.r--r--r-- carlos staff 128 B  Tue Aug 13 09:40:04 2024 │   ├── x509-domain.ext
.r--r--r-- carlos staff 129 B  Tue Aug 13 09:40:04 2024 │   └── x509-key.pem
dr-xr-xr-x carlos staff 416 B  Tue Aug 13 09:40:04 2024 ├── fixture-chain
.r--r--r-- carlos staff 814 B  Tue Aug 13 09:40:04 2024 │   ├── add-keychain.sh
.r--r--r-- carlos staff 533 B  Tue Aug 13 09:40:04 2024 │   ├── ca.ext
.r--r--r-- carlos staff 896 B  Tue Aug 13 09:40:04 2024 │   ├── intermediate.config
dr-xr-xr-x carlos staff 224 B  Tue Aug 13 09:40:04 2024 │   ├── intermediate_ca
.r--r--r-- carlos staff  48 B  Tue Aug 13 09:40:04 2024 │   │   ├── index
.r--r--r-- carlos staff  20 B  Tue Aug 13 09:40:04 2024 │   │   ├── index.attr
.r--r--r-- carlos staff   0 B  Tue Aug 13 09:40:04 2024 │   │   ├── index.old
.r--r--r-- carlos staff   3 B  Tue Aug 13 09:40:04 2024 │   │   ├── serial
.r--r--r-- carlos staff   3 B  Tue Aug 13 09:40:04 2024 │   │   └── serial.old
.r--r--r-- carlos staff 162 B  Tue Aug 13 09:40:04 2024 │   ├── intermediate_req.config
.r--r--r-- carlos staff 501 B  Tue Aug 13 09:40:04 2024 │   ├── leaf_req.config
.r--r--r-- carlos staff 6.0 KB Tue Aug 13 09:40:04 2024 │   ├── Makefile
.r--r--r-- carlos staff 849 B  Tue Aug 13 09:40:04 2024 │   ├── root.config
dr-xr-xr-x carlos staff 256 B  Tue Aug 13 09:40:04 2024 │   ├── root_ca
.r--r--r-- carlos staff 120 B  Tue Aug 13 09:40:04 2024 │   │   ├── index
.r--r--r-- carlos staff  20 B  Tue Aug 13 09:40:04 2024 │   │   ├── index.attr
.r--r--r-- carlos staff  20 B  Tue Aug 13 09:40:04 2024 │   │   ├── index.attr.old
.r--r--r-- carlos staff  56 B  Tue Aug 13 09:40:04 2024 │   │   ├── index.old
.r--r--r-- carlos staff   3 B  Tue Aug 13 09:40:04 2024 │   │   ├── serial
.r--r--r-- carlos staff   3 B  Tue Aug 13 09:40:04 2024 │   │   └── serial.old
.r--r--r-- carlos staff 154 B  Tue Aug 13 09:40:04 2024 │   ├── root_req.config
dr-xr-xr-x carlos staff 128 B  Tue Aug 13 09:40:04 2024 │   └── store
.r--r--r-- carlos staff 3.9 KB Tue Aug 13 09:40:04 2024 │       ├── 00.pem
.r--r--r-- carlos staff 3.8 KB Tue Aug 13 09:40:04 2024 │       └── 01.pem
dr-xr-xr-x carlos staff 192 B  Tue Aug 13 09:40:04 2024 ├── fixture-hello
.r--r--r-- carlos staff 814 B  Tue Aug 13 09:40:04 2024 │   ├── add-keychain.sh
.r--r--r-- carlos staff 869 B  Tue Aug 13 09:40:04 2024 │   ├── create-extension.sh
.r--r--r-- carlos staff  74 B  Tue Aug 13 09:40:04 2024 │   ├── hello.c
.r--r--r-- carlos staff 5.5 KB Tue Aug 13 09:40:04 2024 │   └── Makefile
dr-xr-xr-x carlos staff  96 B  Tue Aug 13 09:40:04 2024 ├── fixture-ls
.r--r--r-- carlos staff 617 B  Tue Aug 13 09:40:04 2024 │   └── Makefile
dr-xr-xr-x carlos staff  96 B  Tue Aug 13 09:40:04 2024 ├── fixture-syft
.r--r--r-- carlos staff 707 B  Tue Aug 13 09:40:04 2024 │   └── Makefile
dr-xr-xr-x carlos staff 160 B  Tue Aug 13 09:40:04 2024 └── fixture-x509
.r--r--r-- carlos staff   5 B  Tue Aug 13 09:40:04 2024     ├── .gitignore
.r--r--r-- carlos staff 193 B  Tue Aug 13 09:40:04 2024     ├── create-domain.sh
.r--r--r-- carlos staff 2.5 KB Tue Aug 13 09:40:04 2024     └── Makefile

or at least the same in both mac and linux

[popey]

Thanks! Let us know if this strangeness is reproduced again! <3