https://www.puppet.com/community logo
Join Slack
Powered by
This message was deleted.
# puppet
s
This message was deleted.
b
o/
on which r10k version are you?
reading through https://github.com/search?q=repo%3Apuppetlabs%2Fr10k%20checksum&type=code I think you can provide your own checksum for a module
and checking through https://forgeapi.puppet.com/#tag/Module-Operations/operation/getModule it looke like the forge provides md5 and sha256 🤔
s
3.15.4
b
where do you see the md5 file?
in 
/opt/puppetlabs/puppet/cache/r10k/$module/tarball
I only see an sha256 file
on r10k 3.15.0
s
yes
inside module tarball
who manages this file
?
b
the tarball itself?
people upload those to forge.puppet.com
s
pdk build will create tar ball and that we upload to repository.
b
yes. so if you care about files within the tar archive, you need to look at pdk or puppet-modulebuilder, not r10k
s
No, I am new to r10k. tar.gz generated by pdk build does not contain checksum file. Mostly it should be done at repository level or r10k level while installating module. Please correct if I am wrong
b
r10k just downloads the archive, it doesn't modify it
s
I can see below files
Copy code
/opt/puppetlabs/puppet/cache/r10k/$module/
/opt/puppetlabs/puppet/cache/r10k/$module/md5sum
/opt/puppetlabs/puppet/cache/r10k/$module/module.tar.gz
from where md5sum is comming.
b
ah so you're not talking about a checksum within the tar archive
s
yes,
b
the md5sum is downloaded by r10k
did you download the module from forge.puppet.com or something else?
forge.puppet.com usually supports md5 and sha256 and r10k should default to sha256
s
how to make it to download sha256
b
it does that by default
s
I download from internal repo, but it support both
b
so I guess you don't download from forge.puppet.com or you download an old module that only has md5 checksum
then check if your internal repo supports sha256
s
yes it support both
any command which I can try and confirm explicitly ?
b
I'm not sure if r10k logs the api calls when you run it with debug2 loglevel
s
oh. ok .thanks
Hi @bastelfreak @vchepkov I am able to download sha256 and md5 checksum if I use
Copy code
curl https://<module_url>.tar.gz.md5 or 
curl https://<module_url>.tar.gz.sha256
But r 10k is failing with error "*Could not verify module, no SHA256 checksum available, and MD5 checksums not allowed in FIPS mode*"
b
fips mode? is that a PE installation?
I cannot reproduce this with the puppet forge. I suggest to set the maximum loglevel and check which http calls are actually executed
where are your md5 filew coming from when r10k says md5 isnt supported
did you switch to fips mode?
is that a fips installation on purpose?
s
Sure
debug2 is max level ?
I am using jfrog repo not puppet forge directly. One query how I can get the module metadata through api?
its seems puppetforge.file_sha256 is not available. Is it related to https://jfrog.atlassian.net//si/jira.issueviews:issue-html/RTFACT-26143/RTFACT-26143.html
Hi @vchepkov @bastelfreak Is there any workaround, I can make r10k to take sha256 from other source like Puppetfile or different url like <repo_url>/<module>.sha256 ?
b
not as as far as I know
Open in Slack
PreviousNext
Powered by