web-arm: Authelia 4.39.20 from 26.05 fails the storage encryption check; pin unstable 4.39.28 with a reproducible pnpm hash #458

New issue

Open

opened 2026-10-10 13:55:59 +02:00 by dominik.polakovics · 1 comment

dominik.polakovics commented

2026-10-10 13:55:59 +02:00

Owner

After #457 moved Authelia to the channel's 4.39.20, authelia-main fails startup: "the configured encryption key does not appear to be valid for this database". The SQLite database has been run by 4.39.28, so the older build cannot pass the check. Go back to unstable's 4.39.28, but pinned to commit e7439b6b, and override authelia-web's pnpm deps hash with the aarch64 value web-arm produces (sha256-YUInqRclRdnMzxfJKuVdXwKaRzJd9sFu16dxCAgVJI8=), since nixpkgs' hash reproduces on neither x86 nor aarch64.

After #457 moved Authelia to the channel's 4.39.20, `authelia-main` fails startup: "the configured encryption key does not appear to be valid for this database". The SQLite database has been run by 4.39.28, so the older build cannot pass the check. Go back to unstable's 4.39.28, but pinned to commit e7439b6b, and override `authelia-web`'s pnpm deps hash with the aarch64 value web-arm produces (`sha256-YUInqRclRdnMzxfJKuVdXwKaRzJd9sFu16dxCAgVJI8=`), since nixpkgs' hash reproduces on neither x86 nor aarch64.

dominik.polakovics commented

2026-10-10 13:56:13 +02:00

Author

Owner

Fix on branch fix/web-arm-authelia-pinned-unstable (d5b75101); web-arm dry-build passed. Open the PR from https://git.cloonar.com/Cloonar/nixos/compare/main...fix/web-arm-authelia-pinned-unstable with Closes #458. Note: the web frontend and Go binary build on web-arm itself since nothing caches this override.

Fix on branch `fix/web-arm-authelia-pinned-unstable` (d5b75101); web-arm dry-build passed. Open the PR from https://git.cloonar.com/Cloonar/nixos/compare/main...fix/web-arm-authelia-pinned-unstable with `Closes #458`. Note: the web frontend and Go binary build on web-arm itself since nothing caches this override.