[GH-ISSUE #4968] Apt repository is currently invalid #10474

Closed
opened 2026-08-05 01:26:03 -04:00 by saavagebueno · 5 comments
Owner

Originally created by @bertptrs on GitHub (Dec 18, 2025).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/4968

Describe the problem

Attempting install updates on Ubuntu with Netbird installed currently fails as the published package for Netbird appears to be invalid:

To Reproduce

  1. Have netbird 0.60.7 installed
  2. Attempt to `sudo apt upgrade
  3. Update errors out on invalid hashes
The following packages will be upgraded:
  netbird netbird-ui
2 to upgrade, 0 to newly install, 0 to remove and 30 not to upgrade.
Need to get 13,1 MB/29,7 MB of archives.
After this operation, 4.096 B disk space will be freed.
Do you want to continue? [Y/n] 
Get:1 https://pkgs.netbird.io/debian stable/main amd64 netbird amd64 0.60.8 [13,1 MB]
Err:1 https://pkgs.netbird.io/debian stable/main amd64 netbird amd64 0.60.8
  Hash Sum mismatch
  Hashes of expected file:
   - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc
   - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak]
   - Filesize:13063900 [weak]
  Hashes of received file:
   - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899
   - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak]
   - Filesize:13063900 [weak]
  Last modification reported: Thu, 18 Dec 2025 09:21:10 +0000
Fetched 13,1 MB in 1s (10,0 MB/s)  
E: Failed to fetch https://pkgs.netbird.io/debian/pool/netbird_0.60.8_linux_amd64.deb  Hash Sum mismatch
   Hashes of expected file:
    - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc
    - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak]
    - Filesize:13063900 [weak]
   Hashes of received file:
    - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899
    - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak]
    - Filesize:13063900 [weak]
   Last modification reported: Thu, 18 Dec 2025 09:21:10 +0000
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?

Performing the suggested trouble-shooting steps do not seem to have any affect.

Expected behavior

Updates should be installed as normal

Are you using NetBird Cloud?

Please specify whether you use NetBird Cloud or self-host NetBird's control plane.

NetBird version

netbird version: 0.60.7

Is any other VPN software installed?

Yes, wireguard.

Debug output

Not applicable, problem is not in the software but in the apckaging.

Screenshots

n/a

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions (cannot install due to the issue at hand
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @bertptrs on GitHub (Dec 18, 2025). Original GitHub issue: https://github.com/netbirdio/netbird/issues/4968 **Describe the problem** Attempting install updates on Ubuntu with Netbird installed currently fails as the published package for Netbird appears to be invalid: **To Reproduce** 1. Have netbird 0.60.7 installed 2. Attempt to `sudo apt upgrade 3. Update errors out on invalid hashes ``` The following packages will be upgraded: netbird netbird-ui 2 to upgrade, 0 to newly install, 0 to remove and 30 not to upgrade. Need to get 13,1 MB/29,7 MB of archives. After this operation, 4.096 B disk space will be freed. Do you want to continue? [Y/n] Get:1 https://pkgs.netbird.io/debian stable/main amd64 netbird amd64 0.60.8 [13,1 MB] Err:1 https://pkgs.netbird.io/debian stable/main amd64 netbird amd64 0.60.8 Hash Sum mismatch Hashes of expected file: - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak] - Filesize:13063900 [weak] Hashes of received file: - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899 - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak] - Filesize:13063900 [weak] Last modification reported: Thu, 18 Dec 2025 09:21:10 +0000 Fetched 13,1 MB in 1s (10,0 MB/s) E: Failed to fetch https://pkgs.netbird.io/debian/pool/netbird_0.60.8_linux_amd64.deb Hash Sum mismatch Hashes of expected file: - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak] - Filesize:13063900 [weak] Hashes of received file: - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899 - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak] - Filesize:13063900 [weak] Last modification reported: Thu, 18 Dec 2025 09:21:10 +0000 E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? ``` Performing the suggested trouble-shooting steps do not seem to have any affect. **Expected behavior** Updates should be installed as normal **Are you using NetBird Cloud?** Please specify whether you use NetBird Cloud or self-host NetBird's control plane. **NetBird version** `netbird version: 0.60.7` **Is any other VPN software installed?** Yes, wireguard. **Debug output** Not applicable, problem is not in the software but in the apckaging. **Screenshots** n/a **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [ ] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions (cannot install due to the issue at hand - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [ ] Disabled other VPN software - [ ] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:26:03 -04:00
Author
Owner

@bertptrs commented on GitHub (Dec 18, 2025):

Did not think to search for non-apt distro, but this appears to affect Fedora as well: #4966

<!-- gh-comment-id:3669676774 --> @bertptrs commented on GitHub (Dec 18, 2025): Did not think to search for non-apt distro, but this appears to affect Fedora as well: #4966
Author
Owner

@LordAnchemis commented on GitHub (Dec 18, 2025):

Getting the same error here too

Mismatch between the downloaded (.deb) file hash and release file hash in the repo

Needs the devs/release managers to fix the repos for this

Error: Failed to fetch https://pkgs.netbird.io/debian/pool/netbird_0.60.8_linux_amd64.deb  Hash Sum mismatch
   Hashes of expected file:
    - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc
    - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak]
    - Filesize:13063900 [weak]
   Hashes of received file:
    - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899
    - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak]
    - Filesize:13063900 [weak]
   Last modification reported: Thu, 18 Dec 2025 09:21:10 +0000
<!-- gh-comment-id:3669680969 --> @LordAnchemis commented on GitHub (Dec 18, 2025): Getting the same error here too Mismatch between the downloaded (.deb) file hash and release file hash in the repo Needs the devs/release managers to fix the repos for this ``` Error: Failed to fetch https://pkgs.netbird.io/debian/pool/netbird_0.60.8_linux_amd64.deb Hash Sum mismatch Hashes of expected file: - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak] - Filesize:13063900 [weak] Hashes of received file: - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899 - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak] - Filesize:13063900 [weak] Last modification reported: Thu, 18 Dec 2025 09:21:10 +0000 ```
Author
Owner

@thiago-juro commented on GitHub (Dec 18, 2025):

We're getting the same:
E: Failed to fetch https://pkgs.netbird.io/debian/pool/netbird_0.60.8_linux_amd64.deb Hash Sum mismatch
Hashes of expected file:
- SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc
- SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak]
- Filesize:13063900 [weak]
Hashes of received file:
- SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899
- SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak]
- Filesize:13063900 [weak]

<!-- gh-comment-id:3669771596 --> @thiago-juro commented on GitHub (Dec 18, 2025): We're getting the same: E: Failed to fetch https://pkgs.netbird.io/debian/pool/netbird_0.60.8_linux_amd64.deb Hash Sum mismatch Hashes of expected file: - SHA256:252dbee7ef39fd2bf6c333ac01e7dab83ede2ab867ee3da68ca22996c1e5ecbc - SHA1:4547f0c0d079306ea88ef87cde6581d9cf7f58af [weak] - Filesize:13063900 [weak] Hashes of received file: - SHA256:d6662cc942d10307f3942e85aab0be46900b9dca32ffd1578bc8a15c16123899 - SHA1:81a5069634c317fca621b94f23dd12f94f0f3e05 [weak] - Filesize:13063900 [weak]
Author
Owner

@bertptrs commented on GitHub (Dec 18, 2025):

We are now observing a valid repo again, but I'd love some insights from the maintainers if possible as to what happened.

<!-- gh-comment-id:3669972846 --> @bertptrs commented on GitHub (Dec 18, 2025): We are now observing a valid repo again, but I'd love some insights from the maintainers if possible as to what happened.
Author
Owner

@shuuri-labs commented on GitHub (Dec 19, 2025):

Hi. We released v0.60.8, but the signing aciton on GitHub failed, so it wasn't tagged as "latest". The tag was bumped in the apt repo, but since the "latest" tagged version on GitHub was still v0.60.7, the expected file hashes were mismatched and downloads failed. We re-ran the failing action and now v0.60.8 is tagged as "latest", resolving the issue.

<!-- gh-comment-id:3675037814 --> @shuuri-labs commented on GitHub (Dec 19, 2025): Hi. We released v0.60.8, but the signing aciton on GitHub failed, so it wasn't tagged as "latest". The tag was bumped in the apt repo, but since the "latest" tagged version on GitHub was still v0.60.7, the expected file hashes were mismatched and downloads failed. We re-ran the failing action and now v0.60.8 is tagged as "latest", resolving the issue.
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#10474