Checksum mismatch on operator-framework when build

[ppatierno]

Hi,
I am trying to make Keda locally but running make build I am getting the following error.

GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=amd64 operator-sdk generate k8s
INFO[0000] Running deepcopy code-generation for Custom Resource group versions: [keda:[v1alpha1], ] 
INFO[0005] Code-generation complete.                    
GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=amd64 operator-sdk generate openapi
INFO[0000] Running OpenAPI code-generation for Custom Resource group versions: [keda:[v1alpha1], ] 
INFO[0005] Created deploy/crds/keda.k8s.io_scaledobjects_crd.yaml 
INFO[0006] Created deploy/crds/keda.k8s.io_triggerauthentications_crd.yaml 
INFO[0006] Code-generation complete.                    
GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build \
        -ldflags "-X=main.GitCommit=c6f27d17d0cb683d893d794870f2219a080e86a7" \
        -o build/_output/bin/keda-adapter \
        cmd/adapter/main.go
go: downloading github.com/operator-framework/operator-sdk v0.11.0
go: downloading github.com/kubernetes-incubator/custom-metrics-apiserver v0.0.0-20190703094830-abe433176c52
go: downloading github.com/go-sql-driver/mysql v1.4.1
go: extracting github.com/go-sql-driver/mysql v1.4.1
verifying github.com/operator-framework/[email protected]: checksum mismatch
        downloaded: h1:If0MefBJjPGYAW6Os6azpTMoaFtsSlXRlQctF23/ORs=
        go.sum:     h1:tQumPT2UjD6uhggfAerRbPt+rWOPKC80DmgKUEqeGYo=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
make: *** [Makefile:68: build-adapter] Error 1

I am on Fedora 31, with go 1.13.6 and operator-sdk 0.12.0 (as the RELEASE_VERSION suggested).

[ppatierno]

Maybe I have got the problem and the solution.
The Go installation on Fedora via dnf package manager sets:

go env GOPROXY GOSUMDB
direct
off

while setting them:

go env -w GOPROXY=https://proxy.golang.org,direct GOSUMDB=sum.golang.org

fixed the issue.
Is something just on Fedora? Is it worth mentioning in the build guide?

[zroubalik]

@ppatierno thanks, I haven't seen this issue (on Mac), it is definitely worth mentioning, thanks!

[ppatierno]

@zroubalik maybe I can provide a PR for that if you want?

[zroubalik]

@ppatierno that would be great if you have a time to do so, otherwise I'll add it later this week :)

[ppatierno]

@zroubalik I will do!

[ppatierno]

@zroubalik I opened #605 for this. Please provide feedback and proposals for changes!

[ppatierno]

Going to close this because #605 was merged.