Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wrong checksums for provider with re-created release #1766

Closed
andrei-zededa opened this issue Feb 20, 2025 · 4 comments
Closed

Wrong checksums for provider with re-created release #1766

andrei-zededa opened this issue Feb 20, 2025 · 4 comments

Comments

@andrei-zededa
Copy link

Hello,

The latest release of zededa/zedcloud version 2.3.1-rc2 was re-created a few hours later. Therefore the checksums currently recorded in the metadata file are wrong. We know that in general this is not currently supported by the OpenTofu registry, as previously discussed in #633 and #642 .

Can you please remove the metadata about the 2.3.1-rc2 release so it gets regenerated ?

Thank you !

@cam72cam
Copy link
Member

Thanks for the heads up, I'll take care of that now!

@cam72cam
Copy link
Member

Should be released in 15-20 minutes.

@andrei-zededa
Copy link
Author

Thank you for the quick response !

@andrei-zededa
Copy link
Author

Working fine now, thank you for your support ! (For reference #1767).

❯ TF_LOG=debug tofu init
2025-02-21T09:19:20.815+0100 [INFO]  OpenTofu version: 1.10.0 dev
......................................................
Initializing provider plugins...
- Finding zededa/zedcloud versions matching "2.3.1-rc2"...
2025-02-21T09:19:20.822+0100 [DEBUG] Service discovery for registry.opentofu.org at https://registry.opentofu.org/.well-known/terraform.json
2025-02-21T09:19:20.919+0100 [DEBUG] GET https://registry.opentofu.org/v1/providers/zededa/zedcloud/versions
- Finding hashicorp/null versions matching "3.2.3"...
2025-02-21T09:19:21.013+0100 [DEBUG] GET https://registry.opentofu.org/v1/providers/hashicorp/null/versions
2025-02-21T09:19:21.090+0100 [DEBUG] GET https://registry.opentofu.org/v1/providers/zededa/zedcloud/2.3.1-rc2/download/linux/amd64
2025-02-21T09:19:21.161+0100 [DEBUG] GET https://github.com/zededa/terraform-provider-zedcloud/releases/download/v2.3.1-rc2/terraform-provider-zedcloud_2.3.1-rc2_SHA256SUMS
2025-02-21T09:19:21.725+0100 [DEBUG] GET https://github.com/zededa/terraform-provider-zedcloud/releases/download/v2.3.1-rc2/terraform-provider-zedcloud_2.3.1-rc2_SHA256SUMS.sig
- Installing zededa/zedcloud v2.3.1-rc2...
2025-02-21T09:19:22.082+0100 [DEBUG] GET https://github.com/zededa/terraform-provider-zedcloud/releases/download/v2.3.1-rc2/terraform-provider-zedcloud_2.3.1-rc2_linux_amd64.zip
2025-02-21T09:19:22.810+0100 [DEBUG] Validating GPG signature of provider package /tmp/nix-shell-3200737-0/nix-shell-3204358-0/terraform-provider2422316731
2025-02-21T09:19:22.810+0100 [DEBUG] Provider signed by 9D2E8AD6F713F398 ZEDEDA Inc. Open Source Terraform signing key <[email protected]>
- Installed zededa/zedcloud v2.3.1-rc2 (signed, key ID 9D2E8AD6F713F398)
2025-02-21T09:19:22.964+0100 [DEBUG] GET https://registry.opentofu.org/v1/providers/hashicorp/null/3.2.3/download/linux/amd64
2025-02-21T09:19:23.039+0100 [DEBUG] GET https://github.com/opentofu/terraform-provider-null/releases/download/v3.2.3/terraform-provider-null_3.2.3_SHA256SUMS
2025-02-21T09:19:23.503+0100 [DEBUG] GET https://github.com/opentofu/terraform-provider-null/releases/download/v3.2.3/terraform-provider-null_3.2.3_SHA256SUMS.sig
- Installing hashicorp/null v3.2.3...
2025-02-21T09:19:23.854+0100 [DEBUG] GET https://github.com/opentofu/terraform-provider-null/releases/download/v3.2.3/terraform-provider-null_3.2.3_linux_amd64.zip
2025-02-21T09:19:24.531+0100 [DEBUG] Validating GPG signature of provider package /tmp/nix-shell-3200737-0/nix-shell-3204358-0/terraform-provider1236092149
2025-02-21T09:19:24.532+0100 [DEBUG] Provider signed by 0C0AF313E5FD9F80 OpenTofu (This key is used to sign opentofu providers) <[email protected]>
- Installed hashicorp/null v3.2.3 (signed, key ID 0C0AF313E5FD9F80)

Providers are signed by their developers.
If you'd like to know more about provider signing, you can read about it here:
https://opentofu.org/docs/cli/plugins/signing/

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

OpenTofu has been successfully initialized!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants