#1095071 cloud.debian.org: Box metadata malformed, vagrant box update fails (bookworm)

#1095071#5
Date:
2025-02-03 13:58:45 UTC
From:
To:
Dear Maintainer,

while trying to update the 'debian/bookworm64' Vagrant Box, I get an error stating:
"The metadata for the box was malformed."


The longer command output looks like this:
```
❯ vagrant box list
debian/bookworm64 (virtualbox, 12.20241217.1, (amd64))

❯ vagrant box update --box debian/bookworm64
Checking for updates to 'debian/bookworm64'
Latest installed version: 12.20241217.1
Version constraints: > 12.20241217.1
Provider: virtualbox
Architecture: "amd64"
The metadata for the box was malformed. The exact error
is shown below. Please contact the maintainer of the box so
that this issue can be fixed.

unexpected token at '<!DOCTYPE html><html lang="en-us"><head>
    <meta charset="utf-8">
        <title>HashiCorp Cloud Platform</title>
	    <meta name="description" content="">
(...)
</body></html>
```

The full error output contains an HTML page that I wall paste at the very bottom of this bug report as to keep the actual text readable.

I've encountered this error before for an older version, and I had to remove the box and download a fresh copy of it to upgrade to the version that is currently installed on my system.

The host system is:
- Linux Mint 21.3
- Vagrant 2.4.3
- Virtualbox 7.1.4-165100~Ubuntu~jammy  amd64
Even though the host system is not Debian, I'm reporting this issue here, because it's about a Debian  Vagrant Box. If this is not correct, please tell me and I'll try someplace else.

Thank you for your work and best regards,
Jörg Sachse
----- SNIP ----- 8>< -----
<!DOCTYPE html><html lang="en-us"><head>
    <meta charset="utf-8">
    <title>HashiCorp Cloud Platform</title>
    <meta name="description" content="">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; form-action 'none'; script-src 'self' https://cdn.segment.com https://segment-assets.cloud.hashicorp.com https://js.stripe.com 'sha256-iTXlDOuB0DC/QazcojKCUjRaxlVr5Ti8S+8lqi4GMcA=' 'sha256-Ka2Bj962KtQU78/03MNuKejsZ1wIxQXQZjxfE/3HT0c='; font-src 'self'; frame-ancestors 'self'; frame-src 'self' https://api.cloud.hashicorp.com https://flow.idp.hashicorp.com https://auth.hashicorp.com https://auth.idp.hashicorp.com https://*.ingest.sentry.io https://status.hashicorp.com https://*.j.cloud.hashicorp.com https://commandbar-config.cloud.hashicorp.com https://app.terraform.io https://app.eu.terraform.io https://reporting.hashicorp.services https://js.stripe.com youtube.com www.youtube.com; connect-src 'self' https://*.launchdarkly.com https://api.releases.hashicorp.com https://api.cloud.hashicorp.com https://flow.idp.hashicorp.com https://auth.hashicorp.com https://auth.idp.hashicorp.com https://*.ingest.sentry.io https://status.hashicorp.com https://*.j.cloud.hashicorp.com https://commandbar-config.cloud.hashicorp.com https://app.terraform.io https://app.eu.terraform.io https://reporting.hashicorp.services https://api.segment.io https://cdn.segment.com https://segment-assets.cloud.hashicorp.com https://segment.cloud.hashicorp.com https://eu.i.posthog.com https://api.stripe.com; img-src 'self' https://*.githubusercontent.com https://*.gravatar.com https://cdn.auth0.com https://*.wp.com data:; style-src 'self' 'sha256-VZMHPaYfsWk86srXyAITur/dpulL+UwhDuuJJDj3JXA=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-5Smp6QFVzMjUq/dfMh2PrvCw+2EIuyOumpirghdBZjs=' 'sha256-wxO0PV3+/gNmNBPz8CUcmEYmuMbzhxmLF647adnkoGc=' 'sha256-LqhoPrUy8D2xbX8yYlpOgpZkRCu5EYYFyGImj4e4CyI=' 'sha256-RW8f0+IK40cCCyYLLsHdel4LbWLP5ktPJT+BI/GF2/Y='; media-src 'self';">
    <link rel="dns-prefetch" href="https://app.launchdarkly.com">
    <link rel="dns-prefetch" href="https://clientstream.launchdarkly.com">
    <link rel="dns-prefetch" href="https://events.launchdarkly.com">
    <link rel="dns-prefetch" href="https://api.cloud.hashicorp.com">
    <link rel="preconnect" href="https://api.cloud.hashicorp.com" crossorigin="">
    <link rel="dns-prefetch" href="https://auth.hashicorp.com">
    <link rel="preconnect" href="https://auth.hashicorp.com" crossorigin="">

    <meta name="hcp/config/environment" content="%7B%22modulePrefix%22%3A%22hcp%22%2C%22environment%22%3A%22production%22%2C%22isRunningAgainstRemoteDev%22%3Afalse%2C%22flashMessageDefaults%22%3A%7B%22destroyOnClick%22%3Afalse%2C%22preventDuplicates%22%3Atrue%2C%22timeout%22%3A5000%2C%22extendedTimeout%22%3A700%2C%22type%22%3A%22info%22%2C%22types%22%3A%5B%22error%22%2C%22success%22%2C%22info%22%2C%22warning%22%2C%22system%22%5D%7D%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22history%22%2C%22EmberENV%22%3A%7B%22EXTEND_PROTOTYPES%22%3Afalse%2C%22FEATURES%22%3A%7B%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Afalse%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22emberFlightIcons%22%3A%7B%22lazyEmbed%22%3Atrue%7D%2C%22ember-simple-auth%22%3A%7B%22routeAfterAuthentication%22%3A%22cloud%22%7D%2C%22APP%22%3A%7B%22loginRoute%22%3A%22sign-in%22%2C%22homeRoute%22%3A%22cloud%22%2C%22pollingInterval%22%3A6000%2C%22name%22%3A%22hcp%22%2C%22version%22%3A%220.0.0%2B5d7d5ac1%22%7D%2C%22DEPLOY_TARGETS%22%3A%7B%22DEV%22%3A%22development%22%2C%22PROD%22%3A%22production%22%2C%22INT%22%3A%22integration%22%2C%22CI%22%3A%22ci%22%7D%2C%22ember-cli-content-security-policy%22%3A%7B%22policy%22%3A%22default-src%20'none'%3B%20form-action%20'none'%3B%20script-src%20'self'%20https%3A%2F%2Fcdn.segment.com%20https%3A%2F%2Fsegment-assets.cloud.hashicorp.com%20https%3A%2F%2Fjs.stripe.com%20'sha256-iTXlDOuB0DC%2FQazcojKCUjRaxlVr5Ti8S%2B8lqi4GMcA%3D'%20'sha256-Ka2Bj962KtQU78%2F03MNuKejsZ1wIxQXQZjxfE%2F3HT0c%3D'%3B%20font-src%20'self'%3B%20frame-ancestors%20'self'%3B%20frame-src%20'self'%20https%3A%2F%2Fapi.cloud.hashicorp.com%20https%3A%2F%2Fflow.idp.hashicorp.com%20https%3A%2F%2Fauth.hashicorp.com%20https%3A%2F%2Fauth.idp.hashicorp.com%20https%3A%2F%2F*.ingest.sentry.io%20https%3A%2F%2Fstatus.hashicorp.com%20https%3A%2F%2F*.j.cloud.hashicorp.com%20https%3A%2F%2Fcommandbar-config.cloud.hashicorp.com%20https%3A%2F%2Fapp.terraform.io%20https%3A%2F%2Fapp.eu.terraform.io%20https%3A%2F%2Freporting.hashicorp.services%20https%3A%2F%2Fjs.stripe.com%20youtube.com%20www.youtube.com%3B%20connect-src%20'self'%20https%3A%2F%2F*.launchdarkly.com%20https%3A%2F%2Fapi.releases.hashicorp.com%20https%3A%2F%2Fapi.cloud.hashicorp.com%20https%3A%2F%2Fflow.idp.hashicorp.com%20https%3A%2F%2Fauth.hashicorp.com%20https%3A%2F%2Fauth.idp.hashicorp.com%20https%3A%2F%2F*.ingest.sentry.io%20https%3A%2F%2Fstatus.hashicorp.com%20https%3A%2F%2F*.j.cloud.hashicorp.com%20https%3A%2F%2Fcommandbar-config.cloud.hashicorp.com%20https%3A%2F%2Fapp.terraform.io%20https%3A%2F%2Fapp.eu.terraform.io%20https%3A%2F%2Freporting.hashicorp.services%20https%3A%2F%2Fapi.segment.io%20https%3A%2F%2Fcdn.segment.com%20https%3A%2F%2Fsegment-assets.cloud.hashicorp.com%20https%3A%2F%2Fsegment.cloud.hashicorp.com%20https%3A%2F%2Feu.i.posthog.com%20https%3A%2F%2Fapi.stripe.com%3B%20img-src%20'self'%20https%3A%2F%2F*.githubusercontent.com%20https%3A%2F%2F*.gravatar.com%20https%3A%2F%2Fcdn.auth0.com%20https%3A%2F%2F*.wp.com%20data%3A%3B%20style-src%20'self'%20'sha256-VZMHPaYfsWk86srXyAITur%2FdpulL%2BUwhDuuJJDj3JXA%3D'%20'sha256-47DEQpj8HBSa%2B%2FTImW%2B5JCeuQeRkm5NMpJWZG3hSuFU%3D'%20'sha256-5Smp6QFVzMjUq%2FdfMh2PrvCw%2B2EIuyOumpirghdBZjs%3D'%20'sha256-wxO0PV3%2B%2FgNmNBPz8CUcmEYmuMbzhxmLF647adnkoGc%3D'%20'sha256-LqhoPrUy8D2xbX8yYlpOgpZkRCu5EYYFyGImj4e4CyI%3D'%20'sha256-RW8f0%2BIK40cCCyYLLsHdel4LbWLP5ktPJT%2BBI%2FGF2%2FY%3D'%3B%20media-src%20'self'%3B%22%2C%22reportOnly%22%3Afalse%7D%7D">
<script type="text/javascript">if (window.performance && window.performance.mark) {
  window.performance.mark('@sentry/ember:initial-load-start');
}
</script>
<meta name="billing/config/environment" content="%7B%22modulePrefix%22%3A%22billing%22%2C%22environment%22%3A%22production%22%2C%22stripe%22%3A%7B%22lazyLoad%22%3Atrue%7D%7D">
<meta name="boundary/config/environment" content="%7B%22modulePrefix%22%3A%22boundary%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">
<meta name="consul/config/environment" content="%7B%22modulePrefix%22%3A%22consul%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">
<meta name="monitoring/config/environment" content="%7B%22modulePrefix%22%3A%22monitoring%22%2C%22environment%22%3A%22production%22%7D">
<meta name="packer/config/environment" content="%7B%22modulePrefix%22%3A%22packer%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">
<meta name="role-assignments/config/environment" content="%7B%22modulePrefix%22%3A%22role-assignments%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">
<meta name="secrets/config/environment" content="%7B%22modulePrefix%22%3A%22secrets%22%2C%22environment%22%3A%22production%22%7D">
<meta name="snapshots/config/environment" content="%7B%22modulePrefix%22%3A%22snapshots%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">
<meta name="vagrant/config/environment" content="%7B%22modulePrefix%22%3A%22vagrant%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">
<meta name="vault/config/environment" content="%7B%22modulePrefix%22%3A%22vault%22%2C%22environment%22%3A%22production%22%7D">
<meta name="waypoint/config/environment" content="%7B%22modulePrefix%22%3A%22waypoint%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%2C%22github%22%3A%7B%22skipAuth%22%3Afalse%7D%7D">
<meta name="webhooks/config/environment" content="%7B%22modulePrefix%22%3A%22webhooks%22%2C%22environment%22%3A%22production%22%2C%22APP%22%3A%7B%22pollingInterval%22%3A6000%7D%7D">



<link rel="stylesheet" href="/assets/vendor.8eb51c8ddb7713c6b7ac97bb06f95303.css">


<link rel="stylesheet" href="/assets/hcp.027623253096d0cb50a90432140bf354.css" id="inert-style">

	<link rel="shortcut icon" href="/favicon.svg">
	<link rel="apple-touch-icon" href="/apple-touch-icon.png">

	<meta name="application-name" content="HCP">
	<meta name="apple-mobile-web-app-capable" content="yes">
	<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
	<meta name="apple-mobile-web-app-title" content="HCP">
	<meta name="theme-color" content="#000000">

	<meta name="hcp/config/asset-manifest" content="%GENERATED_ASSET_MANIFEST%">

<link href="/assets/chunk.9f7c1c9bb0e8c89280a6.css" rel="stylesheet"></head>
	<body>

		<script type="application/json" id="config">
			{
				"baseServiceHost": "https://api.cloud.hashicorp.com",
				"baseIDPHost": "https://flow.idp.hashicorp.com",
				"authCookieDomain": "cloud.hashicorp.com",
				"deployTarget": "production",
				"auth0": {
					"domain": "auth.hashicorp.com",
					"mfa_aud": "hashicorp.auth0.com",
					"clientId": "FdZDrkFj8z7LNQBq5sk3K377sgoSKslV",
					"authorizationParams": {
						"audience": "https://api.hashicorp.cloud"
					}
				},
				"cloudIDP": {
					"domain": "https://auth.idp.hashicorp.com",
					"client_id": "21d86262-6f14-4a30-a90f-07e3fde8b23d"
				},
				"stripe": {
					"publishableKey": "pk_live_51HStiUGsC9LSOJDcChKtkcopM6yXu0kG1Kb5dJ7nef41zZQizq8onBWApygz89mb4tORDiuFFavn3zpEytNqo0Fm00ey46ItQK"
				},
				"sentry": {
					"enabled": true,
					"dsn": "https://abfa7106cfc64cd5a0fd84fc94e13448@o10801.ingest.sentry.io/5280681"
				},
				"analytics": {"enabled":true,"API_KEY":"phc_2lh9buu4HNLnGbmjMERskW4xJN3EEuOie0eXS5NgARJ","api_host":"https://eu.i.posthog.com","LOG_EVENT_TRACKING":false},
				"launchDarkly": {"clientSideId":"5e46ee9df7563007fcd9f4ca","mode":"remote","streamingFlags":{"hcp-ui-global-message":true},"localFlags":{}},
				"segment": {"enabled":true,"WRITE_KEY":"R0hkDCpumP918cThFYiyQ6eBnEDBCL27","proxyDomain":"segment.cloud.hashicorp.com","LOG_EVENT_TRACKING":false},
				"vaultRadarDomain": "http://vault-radar-portal.cloud.hashicorp.com"
			}
		</script>


<script src="/assets/vendor.95f19b023a51f8973ad766490800b904.js"></script>
<script src="/assets/chunk.b64f8c1cbb5353971051.js"></script>
<script src="/assets/chunk.9f7c1c9bb0e8c89280a6.js"></script>


		<script type="text/javascript">if (window.performance && window.performance.mark) {
	window.performance.mark('@sentry/ember:initial-load-end');
}
</script>
<div id="ember-basic-dropdown-wormhole"></div>

</body></html>
----- SNAP ----- ><8 -----

#1095071#10
Date:
2025-02-03 16:24:42 UTC
From:
To:
Hi Sachse,

This is not a problem with the Debian box.

This is a problem with the Hashicorp Cloud Platform (HCP), formerly
"Vagrant Cloud", that hosts Vagrant boxes. HCP changed its API without
prior notice. They won't fix it.

In your case, you are already using the non-free version of Vagrant
(2.4+). So you just need to remove the box (vagrant box remove
debian/bookworm64) and re-add it. It will download a version that no
longer points to the old URL.

Alternatively, the problem was also fixed in version
2.3.4+dfsg-1+deb12u1 (Debian 12, available in proposed-updates).

Best,

Lucas