https://cloudposse.com logo
Join Slack
Powered by
Anyone else seeing similar issues with the toolcha...
# atmos
j
Anyone else seeing similar issues with the toolchain?
Copy code
$ atmos toolchain install
✗ Install failed aquasecurity/trivy@0.69.1 mailto:aquasecurity/trivy@0.69.1: HTTP request failed: download failed
⡿  ████████████░░░░░░░░░░░░░░░░░░░░░░░  33%✗ Install failed bridgecrewio/checkov@3.2.505 mailto:bridgecrewio/checkov@3.2.505: HTTP request failed: download failed
⡿  ███████████████████████░░░░░░░░░░░░  67%✓ Installed  hashicorp/terraform@1.11.4
⡿  ███████████████████████████████████ 100%
✗ Installed 1 tools, failed 2
Here is my .tool-versions file:
Copy code
aquasecurity/trivy 0.69.1
bridgecrewio/checkov 3.2.505
hashicorp/terraform 1.11.4
e
what version of atmos
j
v1.203.0 and v1.207.0
e
was it working?
j
First try using the toolchain
e
hrm.. 
mailto:bridgecrewio/checkov@3.2.505
looks like an old bug we had fixed in markdown rendering.
Which version was the above taken from
j
1.207.0
e
could you also send me a screenshot as well
could you also try re-running with 
--logs-level=Debug
j
Copy code
/atmos $ atmos toolchain install --logs-level=Debug
 DEBU  Set logs-level=debug logs-file=/dev/stderr
 DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Applied version override version=3.2.506 constraint=true asset=checkov_{{.OS}}_{{.Arch}}.{{.Format}} format=zip
 DEBU  Downloading tool owner=bridgecrewio repo=checkov version=3.2.506 url=<https://github.com/bridgecrewio/checkov/releases/download/v3.2.506/checkov_linux_amd64.zip>
 DEBU  Downloading asset filename=checkov_linux_amd64.zip
✗ Install failed bridgecrewio/checkov@3.2.506 mailto:bridgecrewio/checkov@3.2.506: HTTP request failed:
  download failed
⡿  ████████████░░░░░░░░░░░░░░░░░░░░░░░  33% DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Applied version override version=1.11.4 constraint=true asset="<https://releases.hashicorp.com/terraform/{{trimV> .Version}}/terraform_{{trimV .Version}}_{{.OS}}_{{.Arch}}.zip" format=""
 DEBU  Downloading tool owner=hashicorp repo=terraform version=1.11.4 url=<https://releases.hashicorp.com/terraform/1.11.4/terraform_1.11.4_linux_amd64.zip>
 DEBU  Downloading asset filename=terraform_1.11.4_linux_amd64.zip
 DEBU  Detected file type mime=application/zip extension=.zip
 DEBU  Extracting ZIP archive filename=terraform_1.11.4_linux_amd64.zip
✓ Installed  hashicorp/terraform@1.11.4
⡿  ███████████████████████░░░░░░░░░░░░  67% DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Applied version override version=0.69.1 constraint=true asset="trivy_{{trimV .Version}}_{{.OS}}-{{.Arch}}.{{.Format}}" format=tar.gz
 DEBU  Downloading tool owner=aquasecurity repo=trivy version=0.69.1 url=<https://github.com/aquasecurity/trivy/releases/download/v0.69.1/trivy_0.69.1_linux-amd64.tar.gz>
 DEBU  Downloading asset filename=trivy_0.69.1_linux-amd64.tar.gz
✗ Install failed aquasecurity/trivy@0.69.1 mailto:aquasecurity/trivy@0.69.1: HTTP request failed: download
  failed
⡿  ███████████████████████████████████ 100%
✗ Installed 1 tools, failed 2
 DEBU  Git root base path discovery enabled
 DEBU  Git root base path discovery enabled
 DEBU  Telemetry is disabled, skipping capture
Perhaps because I am working in Alpine?
e
can you confirm this is the right arch? amd64
j
shouldn't it be x86_64?
e
do you have a custom registry configured? or relying on the built-in
j
built-in
e
```bridgecrewio/checkov 3.2.505
hashicorp/terraform 1.11.4```
Show 9 more replies
Jonathan Rose [9:19 AM]
```/atmos $ atmos toolchain install --logs-level=Debug
DEBU Set logs-level=debug logs-file=/dev/stderr
DEBU Trying registry registry=https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs
DEBU Found tool in registry registry=https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs
DEBU Applied version override version=3.2.506 constraint=true asset=checkov_{{.OS}}_{{.Arch}}.{{.Format}} format=zip```
Wierd - you have configured 3.2.205 but it's trying 3.2.506
j
I updated the version between screengrabs - sorry
current config:
Copy code
aquasecurity/trivy 0.69.1
bridgecrewio/checkov 3.2.506
hashicorp/terraform 1.11.4
this is my dockerfile btw:
Copy code
FROM golang:1.25-alpine3.22 AS base_image

FROM base_image AS atmos
RUN go install <http://github.com/cloudposse/atmos@v1.203.0|github.com/cloudposse/atmos@v1.203.0>

FROM base_image AS terraform-switcher
RUN go install <http://github.com/warrensbox/terraform-switcher@v1.10.0|github.com/warrensbox/terraform-switcher@v1.10.0>

FROM base_image AS test-runner
COPY ["src", "/go/src"]
WORKDIR /go/src
RUN go build -o /go/bin/test-runner test-runner.go


FROM base_image AS final
COPY --from=atmos /go/bin/atmos /usr/local/bin/atmos
COPY --from=terraform-switcher /go/bin/terraform-switcher /usr/local/bin/tfswitch
COPY --from=test-runner /go/bin/test-runner /usr/local/bin/test-runner
COPY --chown=1000:1000 rootfs /
WORKDIR /usr/local
#<https://github.com/hadolint/hadolint/wiki/DL3008>
#<https://github.com/hadolint/hadolint/wiki/DL4006>
#hadolint ignore=DL3008,DL4006
RUN apk update \
&& apk upgrade \
&& apk add --no-cache \
aws-cli \
ca-certificates \
curl \
git \
groff \
jq \
openssl \
xz-libs \
&& addgroup -g 1000 cfsb \
&& adduser -u 1000 -G cfsb -D cfsb
HEALTHCHECK NONE
WORKDIR /atmos
USER cfsb
CMD [ "/bin/sh" ]
I have plans to upgrade to v1.207.0 (hence why 203 is seen above)
Reproduced the bug when using Debian Bookworm
Copy code
cfsb@3b882afc141c:/atmos$ atmos toolchain install
✗ Install failed mikefarah/yq@4.52.4 mailto:mikefarah/yq@4.52.4: HTTP request failed: download failed
⡿  ███████░░░░░░░░░░░░░░░░░░░░░░░░░░░░  20%✗ Install failed aquasecurity/trivy@0.69.1 mailto:aquasecurity/trivy@0.69.1: HTTP request failed: download failed
⡿  ██████████████░░░░░░░░░░░░░░░░░░░░░  40%✗ Install failed bridgecrewio/checkov@3.2.506 mailto:bridgecrewio/checkov@3.2.506: HTTP request failed: download failed
⡿  █████████████████████░░░░░░░░░░░░░░  60%✓ Installed  hashicorp/terraform@1.11.4
⡿  ████████████████████████████░░░░░░░  80%✗ Install failed jqlang/jq@jq-1.8.1 mailto:jqlang/jq@jq-1.8.1: HTTP request failed: download failed
⡿  ███████████████████████████████████ 100%
✗ Installed 1 tools, failed 4
cfsb@3b882afc141c:/atmos$ atmos toolchain install --logs-level=Debug
 DEBU  Set logs-level=debug logs-file=/dev/stderr
 DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Applied version override version=3.2.506 constraint=true asset=checkov_{{.OS}}_{{.Arch}}.{{.Format}} format=zip
 DEBU  Downloading tool owner=bridgecrewio repo=checkov version=3.2.506 url=<https://github.com/bridgecrewio/checkov/releases/download/v3.2.506/checkov_linux_amd64.zip>
 DEBU  Downloading asset filename=checkov_linux_amd64.zip
✗ Install failed bridgecrewio/checkov@3.2.506 mailto:bridgecrewio/checkov@3.2.506: HTTP request failed: download failed
⡿  ███████░░░░░░░░░░░░░░░░░░░░░░░░░░░░  20%✓ Skipped  hashicorp/terraform@1.11.4 (already installed)
⡿  ██████████████░░░░░░░░░░░░░░░░░░░░░  40% DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Failed to evaluate version constraint constraint="semver(\"<= 1.2\")" version=jq-1.8.1 error="invalid version \"jq-1.8.1\": invalid semantic version"
 DEBU  Failed to evaluate version constraint constraint="semver(\"<= 1.4\")" version=jq-1.8.1 error="invalid version \"jq-1.8.1\": invalid semantic version"
 DEBU  Failed to evaluate version constraint constraint="semver(\"<= 1.6\")" version=jq-1.8.1 error="invalid version \"jq-1.8.1\": invalid semantic version"
 DEBU  Failed to evaluate version constraint constraint="semver(\"< 1.8.0\")" version=jq-1.8.1 error="invalid version \"jq-1.8.1\": invalid semantic version"
 DEBU  Applied version override version=jq-1.8.1 constraint=true asset=jq-{{.OS}}-{{.Arch}} format=raw
 DEBU  Downloading tool owner=jqlang repo=jq version=jq-1.8.1 url=<https://github.com/jqlang/jq/releases/download/vjq-1.8.1/jq-linux-amd64>
 DEBU  Downloading asset filename=jq-linux-amd64
✗ Install failed jqlang/jq@jq-1.8.1 mailto:jqlang/jq@jq-1.8.1: HTTP request failed: download failed
⡿  █████████████████████░░░░░░░░░░░░░░  60% DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Applied version override version=4.52.4 constraint=true asset="" format=""
 DEBU  Downloading tool owner=mikefarah repo=yq version=4.52.4 url=<https://github.com/mikefarah/yq/releases/download/v4.52.4/yq_v4.52.4_linux_amd64.tar.gz>
 DEBU  Downloading asset filename=yq_v4.52.4_linux_amd64.tar.gz
✗ Install failed mikefarah/yq@4.52.4 mailto:mikefarah/yq@4.52.4: HTTP request failed: download failed
⡿  ████████████████████████████░░░░░░░  80% DEBU  Trying registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Found tool in registry registry=<https://raw.githubusercontent.com/aquaproj/aqua-registry/refs/heads/main/pkgs>
 DEBU  Applied version override version=0.69.1 constraint=true asset="trivy_{{trimV .Version}}_{{.OS}}-{{.Arch}}.{{.Format}}" format=tar.gz
 DEBU  Downloading tool owner=aquasecurity repo=trivy version=0.69.1 url=<https://github.com/aquasecurity/trivy/releases/download/v0.69.1/trivy_0.69.1_linux-amd64.tar.gz>
 DEBU  Downloading asset filename=trivy_0.69.1_linux-amd64.tar.gz
✗ Install failed aquasecurity/trivy@0.69.1 mailto:aquasecurity/trivy@0.69.1: HTTP request failed: download failed
⡿  ███████████████████████████████████ 100%
✗ Installed 0 tools, failed 4, skipped 1
 DEBU  Git root base path discovery enabled
 DEBU  Git root base path discovery enabled
 DEBU  Telemetry is disabled, skipping capture
e
I've kicked off an investigation that seems to have found the problem
I'll open a PR and have you test it with 
--use-version
in atmos
j
oh?
e
Can you try this:
Copy code
atmos toolchain install --use-version 2107
This should automatically download and install the build artifact for 2107
(note this has the same problem with relative paths, you reported elsewhere , so if possible run this from the root of the repo just to confirm it fixes the installation issues)
j
Copy code
$ atmos toolchain install --use-version 2107
✗   [38;5;231;48;5;134;1m[0m[38;5;231;48;5;134;1m[0m  [38;5;231;48;5;134;1m
    [0m[38;5;231;48;5;134;1mError[0m[38;5;231;48;5;134;1m [0m[38;5;231m[0m
    [0m
    [38;5;134;1m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;134;1mError:[0m[38;5;231m tool installation failed:
  authentication[0m[38;5;231m failed[0m
    [38;5;231m[0m  [38;5;231m[0m
    [0m[38;5;134;1m[0m[38;5;134;1m[0m  [38;5;134;1m## [0m[38;5;231;1mExplanation[0m[38;5;231m[0m
    [0m
    [38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231mFailed to install Atmos from PR[0m[38;5;231m #2107[0m
    [38;5;231m[0m  [38;5;231m[0m
    [0m[38;5;134;1m[0m[38;5;134;1m[0m  [38;5;134;1m## [0m[38;5;231;1mHints[0m[38;5;231m[0m
    [0m
    [38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231m💡 Option 1: Use GitHub CLI [0m[38;5;231m(recommended)[0m
    [0m[38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231mbrew install gh && gh auth[0m[38;5;231m login[0m

    [38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231m💡 Option 2: Set environment[0m[38;5;231m variable[0m
    [0m[38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231mexport GITHUB_[0m[38;5;231mTOKEN=ghp_[0m[38;5;231mxxx[0m

    [38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231m💡 Generate a token at:
    [0m[38;5;38;4m<https://github.com/settings/tokens[0m>

    [38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231m💡 Required scope: public_[0m[38;5;231mrepo (for
  public[0m[38;5;231m repositories)[0m

    [38;5;231m[0m[38;5;231m[0m  [38;5;231m [0m[38;5;231m💡 Check GitHub Actions artifacts availability and[0m[38;5;231m
I'm thinking a workaround might be to set configs for those specific binaries. I think I saw something in the docs about that
e.g. hard code 
x86_64
instead of dynamically getting 
amd64
e
Wierd, the color downgrade is not working
I cannot reproduce that, but you're not the only one I've seen that happen with
Here's what it should look like 😃
CleanShot 2026-02-25 at 09.53.11@2x.png
Can you tell me what your 
TERM
is set to?
are you using any env like 
CLICOLOR_FORCE
j
Copy code
$ echo $TERM
xterm-256color
e
Are you running this in a container?
j
I'm running Ubuntu-24.04 via WSL2 currently
I can switch to a container
e
Wonder if the WSL2 is the compatability issue
Nono, I want to figure out why you see horrible ansi sequences
Are you seeing this:
Copy code
[38;5;231;48;5;134;1m[0m[38;5;231;48;5;134;1m[0m  [38;5;231;48;5;134;1m
    [0m[38;5;231;48;5;134;1mError[0m[38;5;231;48;5;134;1m [0m[38;5;231m[0m
or that's how you're copy/pasting it to me based on some piping or something
j
Seeing it
e
ALways or sometimes
j
first time seeing that
e
if you re-run with 
--no-color
does it go away
j
Copy code
$ atmos toolchain install --use-version 2107 --no-color
✗ Error

  Error: tool installation failed: authentication failed

  Explanation
  Failed to install Atmos from PR #2107

  Hints
  💡 Option 1: Use GitHub CLI (recommended)
  brew install gh && gh auth login

  💡 Option 2: Set environment variable
  export GITHUB_TOKEN=ghp_xxx

  💡 Generate a token at: <https://github.com/settings/tokens>

  💡 Required scope: public_repo (for public repositories)

  💡 Check GitHub Actions artifacts availability and authentication
👍 1
e
Ohhhh interesting!
Authentication failed. I couldn't see that in the mess of ansi
😃
have you tried option 1 or 2
What is your terminal? (less familiar with WSL)
j
opted for 
gh auth login
😛
need to add those tools back into my .tools
standby
doesn't error out now
Copy code
$ atmos toolchain install --use-version 2107 --no-color
✓ Switching to Atmos version 2107
🧪 toolchain is an experimental feature. Learn more <https://atmos.tools/experimental>
✓ Installed hashicorp/terraform@1.11.4

✓ Installed 1 tools
💡 Export the PATH environment variable for your toolchain tools using eval "$(atmos --chdir /path/to/project toolchain
  env)"
standby while i check for the other binaries
Copy code
$ atmos toolchain install --use-version 2107 --no-color
✓ PR #2107 is up to date (sha: d324da9)
✓ Switching to Atmos version 2107
🧪 toolchain is an experimental feature. Learn more <https://atmos.tools/experimental>
✓ Installed hashicorp/terraform@1.11.4
✓ Installed bridgecrewio/checkov@3.2.506
✓ Installed jqlang/jq@jq-1.8.1
✓ Installed mikefarah/yq@4.52.4

✓ Installed 4 tools
💡 Export the PATH environment variable for your toolchain tools using eval "$(atmos --chdir /path/to/project toolchain
  env)"
looks good
e
sweet!
I'm pushing a fix for the ansi issue as well; we were re-encoding an error that was already ansi
j
totally
--use-version
is very handy btw 🙂
@Esteban Angee @John Dutchover ^^
e
(and this works in CI)
and you can set 
ATMOS_USE_VERSION
j
Fancy :)
2 Views
Open in Slack
PreviousNext
Powered by