LYR-CLI0024

a toolchain fetched is not what its index says

error · spec 14-cli

No source serves a channel's index with a signature one of the toolchain's keys made and no older than this machine has seen, or an archive at the size and SHA-256 its index gives, or the archive's toolchain.json differs from what it holds. Nothing is installed; the exit code is 2.

Explanation

An install trusts the signature, not the server: the index is signed with the channel's key, and it gives each archive's size and SHA-256; the archive lists every file it holds in toolchain.json. What one source serves wrongly is said in a warning and the next source asked, because only a signature and a hash make anything acceptable. This error means none served what holds. A difference anywhere stops the install before the toolchain is in place.

An index can also be refused for being older than one this machine has seen from the same signer: a mirror behind the channel, or one serving an old index on purpose.

Try again later; if it persists, read what the message says of each source. With LYRIC_MIRROR set there is only that source to ask.

Example

$ lyric5 toolchain install dev
error[LYR-CLI0024]: lyric-5.0.0-dev.20261028-linux-x64.tar.gz has the SHA-256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08, and its index gives 4e4c294b331f7a2099a379bec34b9f9fc03dc46ab465d998f4d683da53487e6d
  = help: nothing was installed