goproxyio/goproxy

checksum检查不通过

orestonce opened this issue · 2 comments

orestonce commented

以下Dockerfile运行通过:

FROM golang:alpine

RUN go install fyne.io/fyne/v2/cmd/fyne@latest

==========分割线============

以下Dockerfile运行错误:

FROM golang:alpine

ENV GOPROXY=https://goproxy.io
RUN go install fyne.io/fyne/v2/cmd/fyne@latest

报错信息:

 > [2/2] RUN go install fyne.io/fyne/v2/cmd/fyne@latest:                                                                                                                                                    
#4 4.304 go: downloading fyne.io/fyne/v2 v2.1.4
#4 4.309 go: downloading fyne.io/fyne v1.4.3
#4 6.487 go: fyne.io/fyne/v2/cmd/fyne@latest: fyne.io/fyne/v2@v2.1.4: verifying module: checksum mismatch
#4 6.487 	downloaded: h1:j6k49shqPT+TeYn11pmLix0uYjbXaA4U7g3D/5MIZR8=
#4 6.487 	sum.golang.org: h1:bt1+28++kAzRzPB0GM2EuSV4cnl8rXNX4cjfd8G06Rc=
#4 6.487 
#4 6.487 SECURITY ERROR
#4 6.487 This download does NOT match the one reported by the checksum server.
#4 6.487 The bits may have been replaced on the origin server, or an attacker may
#4 6.487 have intercepted the download attempt.
#4 6.487 
#4 6.487 For more information, see 'go help module-auth'.
------
executor failed running [/bin/sh -c go install fyne.io/fyne/v2/cmd/fyne@latest]: exit code: 1
oiooj commented

fyne.io/fyne/v2@v2.1.4 很有可能是作者在 v2.1.4 这个版本上重新打了版本，google 记录的 sum 值是老的，而 goproxy.io 下载的是作者修改过之后的包，建议换一个 tag （如果有的话） 进行测试，或者将这个问题反馈给作者，让作者发布一个 新的 tag 就能解决这个问题。

  • 👍1
orestonce commented

好，我去fyne那边交谈一下