3 ms·

Wish it still worked...on a BRAND new VM. GPG signature is valid. INSTALLATION FAILED The downloaded package seems to be more than a month old. Please v

by slenk 4y ago

Wish it still worked...on a BRAND new VM. GPG signature is valid. ** INSTALLATION FAILED ** The downloaded package seems to be more than a month old. Please verify that your computer's clock is correct and try again. It could also be that an attacker is trying to trick you into installing an old version. Please contact security@sandstorm.io if the problem persists. Hmm, installation failed. Would it be OK to send an anonymous error report to the sandstorm.io team so we know something is wrong? It would only contain this error code: E_PKG_STALE [yes] Sending problem report... Submitting error report failed. Maybe there is a connectivity problem. You can report bugs at: http://github.com/sandstorm-io/sandstorm http://github.com/sandstorm-io/sandstorm

ocdtrekkie 4y ago
Looks like we're a couple days late on a release. (The current release is 32 days old.) If you edit the install script about here: https://github.com/sandstorm-io/sandstorm/blob/master/install.sh#L1385 https://github.com/sandstorm-io/sandstorm/blob/master/instal... to go for say, 45 days instead of 30, it'll work just fine.
kentonv 4y ago
My fault. The install script refuses to install a release more than 30 days old in order to prevent downgrade attacks, but I failed to push a new release in the last 30 days. Yeah, that provision of the install script is absurdly paranoid. No one will ever actually try to perform a downgrade attack on Sandstorm. OTOH the time limit has had the side effect of forcing me to push regular releases over the last 5.5 years (since the company shut down). So, I hesitate to juts remove the check, for fear it will make me lazy. I should have a release up in an hour or two, or you can edit the shell script as ocdtrekkie points out. EDIT: Done. Installer should work now.

3 ms·

Wish it still worked...on a BRAND new VM. GPG signature is valid. INSTALLATION FAILED The downloaded package seems to be more than a month old. Please v

by slenk 4y ago

ocdtrekkie 4y ago
Looks like we're a couple days late on a release. (The current release is 32 days old.) If you edit the install script about here: https://github.com/sandstorm-io/sandstorm/blob/master/install.sh#L1385 https://github.com/sandstorm-io/sandstorm/blob/master/instal... to go for say, 45 days instead of 30, it'll work just fine.
kentonv 4y ago
My fault. The install script refuses to install a release more than 30 days old in order to prevent downgrade attacks, but I failed to push a new release in the last 30 days. Yeah, that provision of the install script is absurdly paranoid. No one will ever actually try to perform a downgrade attack on Sandstorm. OTOH the time limit has had the side effect of forcing me to push regular releases over the last 5.5 years (since the company shut down). So, I hesitate to juts remove the check, for fear it will make me lazy. I should have a release up in an hour or two, or you can edit the shell script as ocdtrekkie points out. EDIT: Done. Installer should work now.