NU3008 The package integrity check failed.

Guest

Hi,
We are storing some packages on our local install of ProGet. However when we do a nuget package restore on the command line it fails for some packages with error

However when we bypass proget and get packages directly from nuget we do not see this error.

nuget restore -source "https://api.nuget.org/v3/index.json"

The packages are signed. That the only difference I can see as of now. For example this guy:
microsoft.toolkit.uwp

Product: ProGet
Version: 5.1.6

thoven

Is your feed configured to strip symbols and/or source code from the package?

Guest

Thanks Tod! I was getting the same errors when I had my feed configured to strip symbols and source code. Once I disabled that feature, I started passing integrity checks again.

Guest

i suppose, striping symbols and source code shouldn't cause the integrity check to fail otherwise best to remove this feature completely from proget?

[14:41:36]Errors in packages.config projects
[14:41:36] NU3008: Package 'CefSharp.Wpf 65.0.1' from source 'http://proget/nuget/feed': The package integrity check failed.
[14:41:36]
[14:41:36]Process exited with code 1

Guest

Of course, modifying a package file (i.e. stripping symbols/source) will cause the hash code to change, which is what the integrity check uses. There's no way around that.

The stripping feature is important, because Visual Studio will not use a symbol or source server if the package has embedded symbols in it. You aren't supposed to put these in a nuget.org package, but some people clearly do (as the example above).

So, just pick which is more important to you.