Skip to content

Rebuild node:26.7.0-alpine* fails - CHECKSUM changed #2611

Description

@MikeMcC399

Situation

Node.js 26.7.0 was built and released on Aug 5, 2026 through #2597

The musl CHECKSUM was stored as 0608f9dcffe4daeef082255f5cba6047c7b82eb57a7ab168a0e9bd459823f74b

Attempting to re-use 26/alpine3.24/Dockerfile fails

7.565 sha256sum: WARNING: 1 of 1 computed checksums did NOT match
7.565 node-v26.7.0-linux-x64-musl.tar.xz: FAILED

Assessment

https://unofficial-builds.nodejs.org/logs shows that v26.7.0 has been rebuilt multiple times during the period 18-Aug-2026 to 25-Aug-2026

https://unofficial-builds.nodejs.org/download/release/v26.7.0/SHASUMS256.txt is now showing a completely different SHASUMS256:

b6acfd9133393956ef4dd977678a4a0863314d7cf2f925457069f9541dce8d40  node-v26.7.0-linux-x64-musl.tar.xz

Suggestion

Confer with unofficial builds to ensure that musl checksums passed to https://github.com/docker-library/official-images are immutable and don't get invalidated during the lifetime of the latest release in a Node.js release line.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions