Page MenuHomeVyOS Platform

checksum file fails to download from AWS S3 in rolling-release
Closed, InvalidPublicBUG

Description

It seems that either the checksum file isn't getting uploaded as part of the build process, has the wrong name or has no public access, as can be seen during a routine 'add system image' here.

vyos@vyos:~$ add system image https://s3.amazonaws.com/s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202112300317-amd64.iso
Trying to fetch ISO file from https://s3.amazonaws.com/s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202112300317-amd64.iso
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  437M  100  437M    0     0  9762k      0  0:00:45  0:00:45 --:--:-- 10.4M
ISO download succeeded.
Checking SHA256 (256-bit) checksum...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
curl: (22) The requested URL returned error: 403 Forbidden
Unable to fetch SHA256 checksum file.
Do you want to continue without checksum verification? (yes/no) [yes]
Checking for digital signature file...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
curl: (22) The requested URL returned error: 403 Forbidden
Unable to fetch digital signature file.
Do you want to continue without signature check? (yes/no) [yes]
Checking MD5 checksums of files on the ISO image...OK.
Done!
What would you like to name this image? [1.4-rolling-202112300317]:
OK.  This image will be named: 1.4-rolling-202112300317
Installing "1.4-rolling-202112300317" image.
Copying new release files...
Would you like to save the current configuration
directory and config file? (Yes/No) [Yes]:
Copying current configuration...
Would you like to save the SSH host keys from your
current configuration? (Yes/No) [Yes]:
Copying SSH keys...
Running post-install script...
Setting up grub configuration...
Done.
vyos@vyos:~$

Details

Difficulty level
Easy (less than an hour)
Version
1.4 Rolling
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Event Timeline

I confirm this is still an issue in 1.4-rolling-202207250217 trying to download 1.4-rolling-202210150526:

vyos@vyos-lab:~$ add system image https://s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202210150526-amd64.iso
Trying to fetch ISO file from https://s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202210150526-amd64.iso...
Downloading...
The file is 448.000 MiB.
[##################################################################################################################################] 100%
Download complete.
Done.
Checking for digital signature file...
Downloading...
Failed to download https://s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202210150526-amd64.iso.minisig.
requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202210150526-amd64.iso.minisig
Downloading...
Failed to download https://s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202210150526-amd64.iso.asc.
requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://s3-us.vyos.io/rolling/current/vyos-1.4-rolling-202210150526-amd64.iso.asc
Do you want to continue without signature check? (yes/no) [yes]

@c-po is this an S3 bucket policy issue, or do the files not exist?