Skip to content

including git attributes in "vendor" makes archive checksum change #6387

@afbjorklund

Description

@afbjorklund

Description

Due to including git attributes, the archive gets different checksums:

vendor/k8s.io/client-go/pkg/version/.gitattributes

This is because the amount of "significant digits" varies, in the git rev.

vendor/k8s.io/client-go/pkg/version/base.go

Steps to reproduce the issue

  1. https://github.com/containerd/containerd/archive/refs/tags/v1.5.8.tar.gz

Describe the results you received and expected

ERROR: v1.5.8.tar.gz has wrong sha256 hash:
ERROR: expected: a41ab8d39393c9456941b477c33bb1b221a29b635f1c9a99523aab2f5e74f790
ERROR: got     : 0890f7b0ee8e20a279a617c60686874b3c7a99e064adb2b38d884499b5284c43
ERROR: Incomplete download, or man-in-the-middle (MITM) attack

What version of containerd are you using?

v1.5.8

Any other relevant information

No response

Show configuration if it is related to CRI plugin.

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions