Checksum mismatch for github.com/emicklei/go-restful/[email protected]

[WilliamVenner]

What is the version?

3.3.8-3.6.0

What happened?

bash-5.2# make binary
go generate ./...
go: downloading github.com/NVIDIA/go-nvml v0.12.0-2
go: downloading google.golang.org/grpc v1.64.0
go: downloading golang.org/x/sync v0.7.0
go: downloading github.com/go-kit/log v0.2.1
go: downloading k8s.io/apimachinery v0.30.2
go: downloading github.com/sirupsen/logrus v1.9.3
go: downloading github.com/bits-and-blooms/bitset v1.13.0
go: downloading github.com/gorilla/mux v1.8.1
go: downloading k8s.io/api v0.30.2
go: downloading github.com/stretchr/testify v1.8.4
go: downloading github.com/NVIDIA/go-dcgm v0.0.0-20240118201113-3385e277e49f
go: downloading k8s.io/kubelet v0.30.2
go: downloading go.uber.org/automaxprocs v1.5.3
go: downloading github.com/mittwald/go-helm-client v0.12.9
go: downloading github.com/prometheus/exporter-toolkit v0.11.0
go: downloading k8s.io/client-go v0.30.2
go: downloading github.com/urfave/cli/v2 v2.27.1
go: downloading go.uber.org/mock v0.4.0
go: downloading helm.sh/helm/v3 v3.15.2
go: downloading golang.org/x/exp v0.0.0-20240103183307-be819d1f06fc
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/spf13/pflag v1.0.5
go: downloading k8s.io/apiextensions-apiserver v0.30.0
go: downloading k8s.io/cli-runtime v0.30.0
go: downloading sigs.k8s.io/yaml v1.4.0
go: downloading github.com/go-logfmt/logfmt v0.6.0
go: downloading golang.org/x/sys v0.21.0
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/prometheus/common v0.47.0
go: downloading golang.org/x/crypto v0.24.0
go: downloading github.com/coreos/go-systemd/v22 v22.5.0
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading github.com/Masterminds/semver v1.5.0
go: downloading github.com/cpuguy83/go-md2man/v2 v2.0.3
go: downloading github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673
go: downloading golang.org/x/net v0.26.0
go: downloading github.com/Masterminds/semver/v3 v3.2.1
go: downloading github.com/cyphar/filepath-securejoin v0.2.4
go: downloading github.com/mitchellh/copystructure v1.2.0
go: downloading github.com/xeipuuv/gojsonschema v1.2.0
go: downloading github.com/Masterminds/sprig/v3 v3.2.3
go: downloading github.com/gosuri/uitable v0.0.4
go: downloading golang.org/x/term v0.21.0
go: downloading github.com/containerd/containerd v1.7.12
go: downloading github.com/opencontainers/image-spec v1.1.0-rc6
go: downloading oras.land/oras-go v1.2.5
go: downloading google.golang.org/protobuf v1.33.0
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237
go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
go: downloading github.com/BurntSushi/toml v1.3.2
go: downloading github.com/gobwas/glob v0.2.3
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/evanphx/json-patch v5.7.0+incompatible
go: downloading k8s.io/kubectl v0.30.0
go: downloading github.com/Masterminds/squirrel v1.5.4
go: downloading github.com/jmoiron/sqlx v1.3.5
go: downloading github.com/lib/pq v1.10.9
go: downloading github.com/rubenv/sql-migrate v1.6.0
go: downloading github.com/google/gofuzz v1.2.0
go: downloading k8s.io/klog/v2 v2.120.1
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.4.1
go: downloading github.com/mitchellh/reflectwalk v1.0.2
go: downloading github.com/golang/protobuf v1.5.4
go: downloading github.com/google/gnostic-models v0.6.8
go: downloading github.com/imdario/mergo v0.3.16
go: downloading sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
go: downloading github.com/Masterminds/goutils v1.1.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/huandu/xstrings v1.4.0
go: downloading github.com/spf13/cast v1.6.0
go: downloading github.com/fatih/color v1.16.0
go: downloading github.com/shopspring/decimal v1.3.1
go: downloading github.com/docker/go-connections v0.5.0
go: downloading github.com/docker/cli v26.1.4+incompatible
go: downloading github.com/docker/distribution v2.8.3+incompatible
go: downloading golang.org/x/time v0.5.0
go: downloading github.com/docker/docker v26.1.4+incompatible
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/spf13/cobra v1.8.0
go: downloading github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de
go: downloading github.com/moby/term v0.5.0
go: downloading golang.org/x/text v0.16.0
go: downloading k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340
go: downloading sigs.k8s.io/kustomize/api v0.16.0
go: downloading sigs.k8s.io/kustomize/kyaml v0.16.0
go: downloading github.com/google/go-cmp v0.6.0
go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
go: downloading k8s.io/apiserver v0.30.2
go: downloading golang.org/x/oauth2 v0.18.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/go-gorp/gorp/v3 v3.1.0
go: downloading github.com/go-logr/logr v1.4.1
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
go: downloading github.com/lann/builder v0.0.0-20180802200727-47ae307949d0
go: downloading github.com/mattn/go-runewidth v0.0.15
go: downloading github.com/russross/blackfriday/v2 v2.1.0
go: downloading github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
go: downloading github.com/moby/locker v1.0.1
go: downloading github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible
go: downloading github.com/containerd/log v0.1.0
go: downloading k8s.io/component-base v0.30.2
go: downloading github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f
go: downloading github.com/klauspost/compress v1.17.4
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.46.1
go: downloading go.opentelemetry.io/otel v1.21.0
go: downloading go.opentelemetry.io/otel/trace v1.21.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading github.com/rivo/uniseg v0.4.4
go: downloading github.com/go-openapi/swag v0.22.7
go: downloading github.com/chai2010/gettext-go v1.0.2
go: downloading github.com/MakeNowJust/heredoc v1.0.0
go: downloading github.com/mitchellh/go-wordwrap v1.0.1
go: downloading github.com/go-openapi/jsonreference v0.20.4
go: downloading github.com/distribution/reference v0.5.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/google/btree v1.1.2
go: downloading github.com/docker/docker-credential-helpers v0.8.0
go: downloading github.com/jpillora/backoff v1.0.0
go: downloading github.com/prometheus/client_golang v1.18.0
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/emicklei/go-restful/v3 v3.11.1
go: downloading github.com/go-openapi/jsonpointer v0.20.2
go: downloading github.com/mailru/easyjson v0.7.7
go: downloading github.com/gorilla/websocket v1.5.1
go: downloading github.com/docker/go-metrics v0.0.1
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.2.0
go: downloading github.com/prometheus/client_model v0.6.0
go: downloading github.com/prometheus/procfs v0.12.0
go: downloading go.opentelemetry.io/otel/metric v1.21.0
go: downloading github.com/moby/spdystream v0.2.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f
verifying github.com/emicklei/go-restful/[email protected]: checksum mismatch
        downloaded: h1:PZ8lyY5omynnq9Y2BHKmNqkC3AnPMES2e2bg7slcfzw=
        go.sum:     h1:S+9bSbua1z3FgCnV0KKOSSZ3mDthb5NyEPL5gEpCvyk=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
make: *** [Makefile:138: generate] Error 1

What did you expect to happen?

make binary to succeed

What is the GPU model?

N/A

What is the environment?

amazonlinux:2023 container

How did you deploy the dcgm-exporter and what is the configuration?

Build from source

How to reproduce the issue?

docker run -it --rm amazonlinux:2023
yum update -y
yum install golang
cd /tmp
git clone https://github.com/NVIDIA/dcgm-exporter.git
cd dcgm-exporter
make binary
make install

Anything else we need to know?

bash-5.2# go version
go version go1.22.7 linux/amd64

[WilliamVenner]

Resolved on my end by just doing

rm go.sum
go mod tidy

Hopefully, I don't get hacked from this 😉