Skip to content

Rebuild node:26.7.0-alpine* fails - CHECKSUM changed #2611

Description

@MikeMcC399

Situation

Node.js 26.7.0 was built and released on Aug 5, 2026 through #2597

The musl CHECKSUM was stored as 0608f9dcffe4daeef082255f5cba6047c7b82eb57a7ab168a0e9bd459823f74b

Attempting to re-use 26/alpine3.24/Dockerfile fails

7.565 sha256sum: WARNING: 1 of 1 computed checksums did NOT match
7.565 node-v26.7.0-linux-x64-musl.tar.xz: FAILED

Assessment

https://unofficial-builds.nodejs.org/logs shows that v26.7.0 has been rebuilt multiple times during the period 18-Aug-2026 to 25-Aug-2026

https://unofficial-builds.nodejs.org/download/release/v26.7.0/SHASUMS256.txt is now showing a completely different SHASUMS256:

b6acfd9133393956ef4dd977678a4a0863314d7cf2f925457069f9541dce8d40  node-v26.7.0-linux-x64-musl.tar.xz

Suggestion

Confer with unofficial builds to ensure that musl checksums passed to https://github.com/docker-library/official-images are immutable and don't get invalidated during the lifetime of the latest release in a Node.js release line.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions