microsoft / microsoft/WSL

Error code: Wsl/InstallDistro/VerifyChecksum/TRUST_E_BAD_DIGEST sporadically when running on github actions

Open
#41,279 12 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

external
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

### Windows Version

Microsoft Windows Server 2025 10.0.26100 DataCenter

### WSL Version

2.7.11.0

### Are you using WSL 1 or WSL 2?

- [x] WSL 2
- [ ] WSL 1

### Kernel Version

_No response_

### Distro Version

_No response_

### Other Software

Current runner version: '2.336.0'
Runner Image Provisioner
Hosted Compute Agent
Version: 20260707.563
Commit: 02667638d2b423fbc733a8e32a88b44996a3ba6e
Build Date: 2026-07-07T19:33:50Z
Worker ID: ***cf7f55e3-59f2-44fc-9ade-267a6f1631a9***
Azure Region: northcentralus
Operating System
Microsoft Windows Server 2025
10.0.26100
Datacenter
Runner Image
Image: windows-2025-vs2026
Version: 20260728.188.1
Included Software: https://github.com/actions/runner-images/blob/win25-vs2026/20260728.188/images/windows/Windows2025-VS2026-Readme.md
Image Release: https://github.com/actions/runner-images/releases/tag/win25-vs2026%2F20260728.188

### Repro Steps

https://github.com/Particular/install-sql-server-action/blob/main/setup.ps1#L266-L295

### Expected Behavior

Download should succeed

### Actual Behavior

Installing Debian in WSL
Downloading: Debian GNU/Linux

Installing: Debian GNU/Linux

The distribution hash doesn't match. Expected: 5ec7dc68216e75d1d4d4761474e99d8461a98d316537110314b137122a879e0f, actual hash: 0xc2a695720163a82d32dd14449f521f6e8f80cb5a9df1a792716cf37aea801401

Error code: Wsl/InstallDistro/VerifyChecksum/TRUST_E_BAD_DIGEST

### Diagnostic Logs

_No response_

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with setup.ps1 lines 266-295 and reproduce the Debian installation on the specified GitHub Actions Windows runner. Compare the expected and actual hashes around the Wsl/InstallDistro/VerifyChecksum/TRUST_E_BAD_DIGEST failure, then trace whether the download or verification path is responsible; done means identifying a reliable fix or a confirmed cause with a reproducible validation.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.