We use Docker’s Go library to manage docker.
I got a really weird message today when building our project inside TravisCI:
go: verifying github.com/docker/docker@v0.7.3-0.20180827131323-0c5f8d2b9b23: checksum mismatch
downloaded: h1:mJtkfC9RUrUWHMk0cFDNhVoc9U3k2FRAzEZ+5pqSIHo=
go.sum: h1:Zl/9mUfPbYbnv895OXx9WfxPjwqSZHohuZzVcjJ5QPQ=
This is coming from go mod
, which downloads the library and checksums it against a value recorded in go.sum.
While I could just nuke it and move on, these things aren’t supposed to happen and I think the docker team should at least be aware of it.