cri-containerd.tar.gz computed checksum did NOT match in magnum ussuri

[TCSECP]

Hello Team,

I am trying to enable containerd run time in magnum. And I have updated the Magnum cluster template with containerd version, While launching cluster I am getting the below error saying ('ERROR cri-containerd.tar.gz computed checksum did NOT match, exiting.') .

Magnum Template,

openstack coe cluster template create k8s--calico-cinder-auto-health-largef_autohealing_v1_23_3lbautotag_lb-new3_may1_cd_v1_1 --image fedora-coreos-32 --keypair k8s --external-network Magnum-Test --dns-nameserver 8.8.8.8 --master-flavor g1t1.large --flavor g1t1.large --network-driver calico --coe kubernetes --label container_infra_prefix="tcsmagnum.tcsecp.com/tcsmagnum/" --label 'docker_volume_type=az1-stable2' --label 'boot_volume_size=40' --label boot_volume_type=az1-stable2 --docker-volume-size 20 --docker-storage-driver overlay2 --label kube_tag=v1.23.3 --label calico_ipv4pool=10.100.0.0/24 --label flannel_network_subnetlen=28 --label flannel_backend=host-gw --fixed-network 532ebede-e9d0-4ec4-8bf1-abab1e8d786f --fixed-subnet eebe853c-70bb-48f6-8edc-6bb8f92b181e --label metrics_server_enabled=true --label monitoring_enabled=true --label prometheus_adapter_enabled=true --label cinder_csi_enabled=true --label grafana_admin_passwd=linux --volume-driver cinder --label 'auto_healing_enabled=True' --label 'autoscaler_tag="v1.19.1"' --label 'min_node_count=1' --label 'max_node_count=7' --label 'auto_healing_controller=magnum-auto-healer' --label 'auto_scaling_enabled=True' --label 'health_status=True' --label 'health_status_reason=True' --labels availability_zone=zone1 --labels container_runtime=containerd --labels containerd_version="1.2.10"

Issue:

[root@test-v1-23-new-dxwb2rfxtqh2-master-0 heat-config-script]# cat e5c5a74b-404e-457b-a34c-39e0bec0f105-test-v1-23-new-dxwb2rfxtqh2-kube_masters-osidx33lb7ga-0-zzcq3zh3cjp6-master_config-jdlunu3buv67.log
START: write-heat-params
Writing File: /etc/sysconfig/heat-params
END: write-heat-params
START: install cri
+ ssh_cmd='ssh -F /srv/magnum/.ssh/config root@localhost'
+ '[' containerd = containerd ']'
+ ssh -F /srv/magnum/.ssh/config root@localhost systemctl disable docker
+ '[' -z '' ']'
+ CONTAINERD_TARBALL_URL=https://github.com/containerd/containerd/releases/download/v1.2.10/containerd-1.2.10-linux-amd64.tar.gz
+ i=0
+ curl -o /srv/magnum/cri-containerd.tar.gz -L https://github.com/containerd/containerd/releases/download/v1.2.10/containerd-1.2.10-linux-amd64.tar.gz
  % Total % Received % Xferd Average Speed Time Time Time Current
                                 Dload Upload Total Spent Left Speed
100 9 100 9 0 0 76 0 --:--:-- --:--:-- --:--:-- 76
+ echo '1f2f0fb928179df90492a83c326a194b8e9d992538498efb44cbb6ef15465627 /srv/magnum/cri-containerd.tar.gz'
+ sha256sum -c -
/srv/magnum/cri-containerd.tar.gz: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
+ echo 'ERROR cri-containerd.tar.gz computed checksum did NOT match, exiting.'
+ exit 1
ERROR cri-containerd.tar.gz computed checksum did NOT match, exiting.
[root@test-v1-23-new-dxwb2rfxtqh2-master-0 heat-config-script]#

Regards,
Sriramu Desingh.

[Alex Kavanagh (ajkavanagh)]

Well,

$ sha256sum containerd-1.2.10.linux-amd64.tar.gz
3c84a627336262706ecce77dd1e5bae8be4e61647032f1df24e29facf9722e27 containerd-1.2.10.linux-amd64.tar.gz

and

$ sha256sum cri-containerd-1.2.8.linux-amd64.tar.gz
1f2f0fb928179df90492a83c326a194b8e9d992538498efb44cbb6ef15465627 cri-containerd-1.2.8.linux-amd64.tar.gz

So, my guess is that the checksum that is being used is for containerd 1.2.8 (in magnum) rather than 1.2.10 that is being downloaded from github.com/containerd/releases.

Perhaps you could retry the command with `--containerd_version="1.2.8"` in the openstack coe command?

[Felipe Reyes (freyes)]

>
> openstack coe cluster template create k8s--calico-cinder-auto-health-
> largef_autohealing_v1_23_3lbautotag_lb-new3_may1_cd_v1_1 --image fedora-
> coreos-32 --keypair k8s --external-network Magnum-Test  --dns-nameserver
> 8.8.8.8 --master-flavor g1t1.large --flavor g1t1.large --network-driver
> calico --coe kubernetes --label
> container_infra_prefix="tcsmagnum.tcsecp.com/tcsmagnum/"  --label
> 'docker_volume_type=az1-stable2' --label 'boot_volume_size=40' --label
> boot_volume_type=az1-stable2 --docker-volume-size 20 --docker-storage-
> driver overlay2 --label kube_tag=v1.23.3 --label
> calico_ipv4pool=10.100.0.0/24 --label flannel_network_subnetlen=28
> --label flannel_backend=host-gw --fixed-network
> 532ebede-e9d0-4ec4-8bf1-abab1e8d786f --fixed-subnet
> eebe853c-70bb-48f6-8edc-6bb8f92b181e --label metrics_server_enabled=true
> --label monitoring_enabled=true --label prometheus_adapter_enabled=true
> --label cinder_csi_enabled=true --label grafana_admin_passwd=linux
> --volume-driver cinder --label 'auto_healing_enabled=True' --label
> 'autoscaler_tag="v1.19.1"' --label 'min_node_count=1'  --label
> 'max_node_count=7' --label 'auto_healing_controller=magnum-auto-healer'
> --label 'auto_scaling_enabled=True'  --label 'health_status=True'
> --label 'health_status_reason=True' --labels availability_zone=zone1
> --labels container_runtime=containerd --labels
> containerd_version="1.2.10"

you need to override the label containerd_tarball_sha256[0] so the checksum matches with the
containerd downloaded.

[0] https://docs.openstack.org/magnum/ussuri/user/index.html#containerd-tarball-url

[TCSECP (tcsecp)]

Hi Felipe and Alex,

Thanks for your support, after parsing the sha256 value containerd started downloaded whiteout any issue. Kindly close the Bug

Regards,
Sriramu Desingh.

[Felipe Reyes (freyes)]

On Sun, 2023-08-06 at 17:23 +0000, TCSECP wrote:
> Hi Felipe and Alex,
>
> Thanks for your support, after parsing the sha256 value containerd
> started downloaded whiteout any issue. Kindly close the Bug

great to hear things are working now, thanks for closing the loop.

Best,