adoptium / adoptium/TKG

https://hyc-runtimes-jenkins.swg-devops.com/job/test.getDependency/ is failing SHA256 verification for multiple jtreg tarballs

Closed
#899 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
22
Forks
114
Avg merge
4d 2h
Merged PRs (30d)
8

Description

https://hyc-runtimes-jenkins.swg-devops.com/job/test.getDependency/ is failing for multiple jtreg tarballs.
SHA256 verification for multiple jtreg tarballs pulled from ci.adoptium.net/job/dependency_pipeline/lastSuccessfulBuild. In each case, the downloaded tarball is internally self-consistent (its own .sha256sum.txt from the same build matches the actual bytes), but doesn't match the hash pinned in the script.

**Impact:**
This breaks https://hyc-runtimes-jenkins.swg-devops.com/job/test.getDependency/ and any downstream pipeline that calls getDependencies.pl has a checksum failure, since the artifact at lastSuccessfulBuild isn't or may not be stable for a version-pinned dependency name.

Contributor guide

Open the contributing guide

Research direction

Start with getDependencies.pl and the test.getDependency job, then compare the pinned SHA256 values with the jtreg tarballs and .sha256sum.txt produced by dependency_pipeline/lastSuccessfulBuild. Confirm whether the version-pinned artifact reference is stable and update the dependency handling so the downstream pipeline completes without checksum failures.

Written by the indexing model from the issue text.

Assessment

Tech stack
perl
Domain
build-system, ci-cd
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.