Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
NU3008 The package integrity check failed.
-
Hi,
We are storing some packages on our local install of ProGet. However when we do a nuget package restore on the command line it fails for some packages with errorNU3008 The package integrity check failed.
However when we bypass proget and get packages directly from nuget we do not see this error.
nuget restore -source "https://api.nuget.org/v3/index.json"
The packages are signed. That the only difference I can see as of now. For example this guy:
microsoft.toolkit.uwpProduct: ProGet
Version: 5.1.6
-
Is your feed configured to strip symbols and/or source code from the package?
-
Thanks Tod! I was getting the same errors when I had my feed configured to strip symbols and source code. Once I disabled that feature, I started passing integrity checks again.
-
i suppose, striping symbols and source code shouldn't cause the integrity check to fail otherwise best to remove this feature completely from proget?
[14:41:36]Errors in packages.config projects
[14:41:36] NU3008: Package 'CefSharp.Wpf 65.0.1' from source 'http://proget/nuget/feed': The package integrity check failed.
[14:41:36]
[14:41:36]Process exited with code 1
-
Of course, modifying a package file (i.e. stripping symbols/source) will cause the hash code to change, which is what the integrity check uses. There's no way around that.
The stripping feature is important, because Visual Studio will not use a symbol or source server if the package has embedded symbols in it. You aren't supposed to put these in a nuget.org package, but some people clearly do (as the example above).
So, just pick which is more important to you.