mamba micromamba gets 403 when trying to download conda-forge noarch repodata with ssl

Troubleshooting docs

[X] My problem is not solved in the Troubleshooting docs

How did you install Mamba?

Micromamba

Search tried in issue tracker

403 micromamba

Latest version of Mamba

[X] My problem is not solved with the latest version

Tried in Conda?

Not applicable

Describe your issue

Whenever I try to create a new environment with micromamba (where micromamba is installed as a package inside an environment created with mamba), downloading the repodata for conda-forge's noarch channel fails with a 403. This is very similar to the previously closed issue #2663, but I was able to reproduce it as far back as 1.4.2.

mamba info / micromamba info

libmamba version : 1.4.9
     micromamba version : 1.4.9
           curl version : libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0
     libarchive version : libarchive 3.6.2 zlib/1.2.13 bz2lib/1.0.8 libzstd/1.5.2
       envs directories : /Users/danblanchard/micromamba/envs
          package cache : /Users/danblanchard/micromamba/pkgs
                          /Users/danblanchard/.mamba/pkgs
            environment : /opt/homebrew/Caskroom/mambaforge/base/envs/coiled (active)
           env location : /opt/homebrew/Caskroom/mambaforge/base/envs/coiled
      user config files : /Users/danblanchard/.mambarc
 populated config files : /Users/danblanchard/.condarc
       virtual packages : __unix=0=0
                          __osx=13.5=0
                          __archspec=1=arm64
               channels : https://conda.anaconda.org/conda-forge/osx-arm64
                          https://conda.anaconda.org/conda-forge/noarch
                          https://repo.anaconda.com/pkgs/main/osx-arm64
                          https://repo.anaconda.com/pkgs/main/noarch
                          https://repo.anaconda.com/pkgs/r/osx-arm64
                          https://repo.anaconda.com/pkgs/r/noarch
                          https://conda.anaconda.org/anaconda-cluster/osx-arm64
                          https://conda.anaconda.org/anaconda-cluster/noarch
                          https://conda.anaconda.org/blaze/osx-arm64
                          https://conda.anaconda.org/blaze/noarch
       base environment : /Users/danblanchard/micromamba
               platform : osx-arm64

Logs

$ micromamba env create -n tests --file environment.yml -vvv
debug    libmamba Loading configuration
trace    libmamba Compute configurable 'create_base'
trace    libmamba Compute configurable 'no_env'
trace    libmamba Compute configurable 'no_rc'
trace    libmamba Compute configurable 'rc_files'
trace    libmamba Compute configurable 'root_prefix'
warning  libmamba 'root_prefix' set with default value: /Users/danblanchard/micromamba
info     libmamba You have not set the 'root_prefix' environment variable.
    To permanently modify the root prefix location, either:
    - set the 'MAMBA_ROOT_PREFIX' environment variable
    - use the '-r,--root-prefix' CLI option
    - use 'micromamba shell init ...' to initialize your shell
        (then restart or source the contents of the shell init script)
trace    libmamba Get RC files configuration from locations up to HomeDir
trace    libmamba Configuration not found at '/Users/danblanchard/.mambarc'
trace    libmamba Configuration found at '/Users/danblanchard/.condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/.conda/condarc.d'
trace    libmamba Configuration not found at '/Users/danblanchard/.conda/condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/.conda/.condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/.mambarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/condarc.d'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/.condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.mambarc'
trace    libmamba Configuration not found at '/var/lib/conda/condarc.d/'
trace    libmamba Configuration not found at '/var/lib/conda/condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.condarc'
trace    libmamba Configuration not found at '/etc/conda/.mambarc'
trace    libmamba Configuration not found at '/etc/conda/condarc.d/'
trace    libmamba Configuration not found at '/etc/conda/condarc'
trace    libmamba Configuration not found at '/etc/conda/.condarc'
trace    libmamba Update configurable 'no_env'
trace    libmamba Compute configurable 'envs_dirs'
trace    libmamba Compute configurable 'file_specs'
debug    libmamba No env 'name' specified in YAML spec file '/Users/danblanchard/repos/coiled/cloud/environment.yml'
trace    libmamba Compute configurable 'spec_file_env_name'
trace    libmamba Compute configurable 'env_name'
trace    libmamba Compute configurable 'use_target_prefix_fallback'
trace    libmamba Compute configurable 'target_prefix'
trace    libmamba Get RC files configuration from locations up to TargetPrefix
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/envs/tests/.mambarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/envs/tests/condarc.d'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/envs/tests/condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/envs/tests/.condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/.mambarc'
trace    libmamba Configuration found at '/Users/danblanchard/.condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/.conda/condarc.d'
trace    libmamba Configuration not found at '/Users/danblanchard/.conda/condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/.conda/.condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/.mambarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/condarc.d'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/condarc'
trace    libmamba Configuration not found at '/Users/danblanchard/micromamba/.condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.mambarc'
trace    libmamba Configuration not found at '/var/lib/conda/condarc.d/'
trace    libmamba Configuration not found at '/var/lib/conda/condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.condarc'
trace    libmamba Configuration not found at '/etc/conda/.mambarc'
trace    libmamba Configuration not found at '/etc/conda/condarc.d/'
trace    libmamba Configuration not found at '/etc/conda/condarc'
trace    libmamba Configuration not found at '/etc/conda/.condarc'
trace    libmamba Update configurable 'no_env'
trace    libmamba Compute configurable 'relocate_prefix'
trace    libmamba Compute configurable 'target_prefix_checks'
trace    libmamba Compute configurable 'pkgs_dirs'
trace    libmamba Compute configurable 'platform'
trace    libmamba Compute configurable 'specs'
trace    libmamba Compute configurable 'others_pkg_mgrs_specs'
trace    libmamba Compute configurable 'experimental'
trace    libmamba Compute configurable 'debug'
trace    libmamba Compute configurable 'override_channels_enabled'
trace    libmamba Compute configurable 'override_channels'
trace    libmamba Compute configurable 'channels'
trace    libmamba Compute configurable 'channel_alias'
trace    libmamba Compute configurable 'default_channels'
trace    libmamba Compute configurable 'custom_channels'
trace    libmamba Compute configurable 'custom_multichannels'
trace    libmamba Compute configurable 'repodata_has_zst'
trace    libmamba Compute configurable 'cacert_path'
trace    libmamba Compute configurable 'local_repodata_ttl'
trace    libmamba Compute configurable 'offline'
trace    libmamba Compute configurable 'ssl_no_revoke'
trace    libmamba Compute configurable 'ssl_verify'
trace    libmamba Compute configurable 'proxy_servers'
trace    libmamba Compute configurable 'remote_connect_timeout_secs'
trace    libmamba Compute configurable 'remote_backoff_factor'
trace    libmamba Compute configurable 'remote_max_retries'
trace    libmamba Compute configurable 'no_channel_priority'
trace    libmamba Compute configurable 'strict_channel_priority'
trace    libmamba Compute configurable 'channel_priority'
trace    libmamba Compute configurable 'explicit_install'
trace    libmamba Compute configurable 'no_pin'
trace    libmamba Compute configurable 'no_py_pin'
trace    libmamba Compute configurable 'add_pip_as_python_dependency'
trace    libmamba Compute configurable 'pinned_packages'
trace    libmamba Compute configurable 'freeze_installed'
trace    libmamba Compute configurable 'force_reinstall'
trace    libmamba Compute configurable 'no_deps'
trace    libmamba Compute configurable 'only_deps'
trace    libmamba Compute configurable 'categories'
trace    libmamba Compute configurable 'retry_clean_cache'
trace    libmamba Compute configurable 'allow_uninstall'
trace    libmamba Compute configurable 'allow_downgrade'
trace    libmamba Compute configurable 'download_threads'
trace    libmamba Compute configurable 'extract_threads'
trace    libmamba Compute configurable 'allow_softlinks'
trace    libmamba Compute configurable 'always_copy'
trace    libmamba Compute configurable 'always_softlink'
trace    libmamba Compute configurable 'shortcuts'
trace    libmamba Compute configurable 'safety_checks'
trace    libmamba Compute configurable 'extra_safety_checks'
trace    libmamba Compute configurable 'verify_artifacts'
trace    libmamba Compute configurable 'lock_timeout'
trace    libmamba Compute configurable 'use_lockfiles'
trace    libmamba Compute configurable 'compile_pyc'
trace    libmamba Compute configurable 'always_yes'
trace    libmamba Compute configurable 'auto_activate_base'
trace    libmamba Compute configurable 'dry_run'
trace    libmamba Compute configurable 'download_only'
trace    libmamba Compute configurable 'print_config_only'
trace    libmamba Compute configurable 'print_context_only'
trace    libmamba Compute configurable 'json'
trace    libmamba Compute configurable 'verbose'
trace    libmamba Compute configurable 'log_level'
trace    libmamba Compute configurable 'log_backtrace'
trace    libmamba Compute configurable 'log_pattern'
trace    libmamba Compute configurable 'changeps1'
trace    libmamba Compute configurable 'shell_completion'
trace    libmamba Compute configurable 'env_prompt'
trace    libmamba Compute configurable 'show_all_configs'
trace    libmamba Compute configurable 'show_all_rc_configs'
trace    libmamba Compute configurable 'show_config_descriptions'
trace    libmamba Compute configurable 'show_config_groups'
trace    libmamba Compute configurable 'show_config_long_descriptions'
trace    libmamba Compute configurable 'show_config_sources'
trace    libmamba Compute configurable 'show_config_values'
trace    libmamba Compute configurable 'quiet'
trace    libmamba Compute configurable 'override_rc_files'
trace    libmamba Compute configurable 'shell_type'
trace    libmamba Compute configurable 'prefix_or_name'
trace    libmamba Compute configurable 'shell_stack'
trace    libmamba Compute configurable 'list_regex'
trace    libmamba Compute configurable 'clean_all'
trace    libmamba Compute configurable 'clean_index_cache'
trace    libmamba Compute configurable 'clean_packages'
trace    libmamba Compute configurable 'clean_tarballs'
trace    libmamba Compute configurable 'clean_locks'
trace    libmamba Compute configurable 'clean_trash'
trace    libmamba Compute configurable 'clean_force_pkgs_dirs'
trace    libmamba Compute configurable 'config_set_system_path'
trace    libmamba Compute configurable 'config_set_env_path'
trace    libmamba Compute configurable 'config_set_file_path'
trace    libmamba Compute configurable 'config_set_sequence_spec'
trace    libmamba Compute configurable 'remove_key'
trace    libmamba Compute configurable 'remove'
trace    libmamba Compute configurable 'set_value'
trace    libmamba Compute configurable 'get_value'
trace    libmamba Compute configurable 'constructor_prefix'
trace    libmamba Compute configurable 'constructor_extract_conda_pkgs'
trace    libmamba Compute configurable 'constructor_extract_tarball'
debug    libmamba 109 configurables computed
info     libmamba Parsing MatchSpec python>=3.11.1,<3.12
info     libmamba Parsing MatchSpec pip>=23.0
info     libmamba Parsing MatchSpec yarn>=1.20,<2
info     libmamba Parsing MatchSpec micromamba==1.4.2
info     libmamba Parsing MatchSpec lz4-c==1.9.3
info     libmamba Parsing MatchSpec openssl>=3.1.0
debug    libmamba Checking if '/Users/danblanchard/micromamba/pkgs' is writable
trace    libmamba '/Users/danblanchard/micromamba/pkgs/urls.txt' exists, checking if writable
debug    libmamba '/Users/danblanchard/micromamba/pkgs' writable
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/conda-forge/osx-arm64/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba 'ssl_verify' not activated, skipping cURL SSL init
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/conda-forge/noarch/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba Searching index cache file for repo 'https://repo.anaconda.com/pkgs/main/osx-arm64/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Using JSON cache
trace    libmamba Cache age: 19/30s
debug    libmamba Using SOLV cache
trace    libmamba Cache age: 19s
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
pkgs/main/osx-arm64                                         Using cache
info     libmamba Searching index cache file for repo 'https://repo.anaconda.com/pkgs/main/noarch/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Using JSON cache
trace    libmamba Cache age: 19/30s
debug    libmamba Using SOLV cache
trace    libmamba Cache age: 19s
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
pkgs/main/noarch                                            Using cache
info     libmamba Searching index cache file for repo 'https://repo.anaconda.com/pkgs/r/osx-arm64/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Using JSON cache
trace    libmamba Cache age: 20/30s
debug    libmamba Using SOLV cache
trace    libmamba Cache age: 19s
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
pkgs/r/osx-arm64                                            Using cache
info     libmamba Searching index cache file for repo 'https://repo.anaconda.com/pkgs/r/noarch/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/anaconda-cluster/osx-arm64/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/anaconda-cluster/noarch/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/blaze/osx-arm64/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/blaze/noarch/repodata.json'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Expired cache or invalid mod/etag headers
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba No valid cache found
info     libmamba Expired cache (or invalid mod/etag headers) found at '/Users/danblanchard/micromamba/pkgs'
info     libmamba Starting to download targets
[+] 0.0s
info     libcurl  * Couldn't find host repo.anaconda.com in the (nil) file; using defaults
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  *   Trying [2606:4700::6810:8303]:443...
info     libcurl  *   Trying [2606:4700::6811:5d18]:443...
info     libcurl  * Hostname 'conda.anaconda.org' was found in DNS cache
info     libcurl  *   Trying [2606:4700::6811:5d18]:443...
info     libcurl  * Hostname 'conda.anaconda.org' was found in DNS cache
info     libcurl  *   Trying [2606:4700::6811:5d18]:443...
info     libcurl  * Hostname 'conda.anaconda.org' was found in DNS cache
info     libcurl  *   Trying [2606:4700::6811:5d18]:443...
info     libcurl  * Connected to repo.anaconda.com (2606:4700::6810:8303) port 443 (#0)
info     libcurl  * ALPN: offers http/1.1
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * Connected to conda.anaconda.org (2606:4700::6811:5d18) port 443 (#4)
info     libcurl  * ALPN: offers http/1.1
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * Connected to conda.anaconda.org (2606:4700::6811:5d18) port 443 (#3)
info     libcurl  * ALPN: offers http/1.1
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * Connected to conda.anaconda.org (2606:4700::6811:5d18) port 443 (#2)
info     libcurl  * ALPN: offers http/1.1
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * Connected to conda.anaconda.org (2606:4700::6811:5d18) port 443 (#1)
info     libcurl  * ALPN: offers http/1.1
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
info     libcurl  * Server certificate: anaconda.org
info     libcurl  * Server certificate: E1
info     libcurl  * Server certificate: ISRG Root X2
info     libcurl  * using HTTP/1.1
info     libcurl  > HEAD /blaze/noarch/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0

[+] 0.1s
pkgs/r/noarch (check zst)              ━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━   0.0 B /  ??.?MB @  ??.?MB/s Checking  0.1s
anaconda-cluster/osx-arm64 (check zst) ━╸━━━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━   0.0 B /  ??.?MB @  ??.?MB/s Checking  0.1s
anaconda-cluster/noarch (check zst)    ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━   0.0 B /  ??.?MB @  ??.?MB/s Checking  0.1s
blaze/osx-arm64 (check zst)            ━━━━━━━╸━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━   0.0 B /  ??.?MB @  ??.?MB/s Checking  0.1s
blaze/noarch (check zst)               ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━╸━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━   0.0 B /  ??.?MB @  ??.?MB/s Checking  0.1sinfo     libcurl  * Server certificate: sni.cloudflaressl.com
info     libcurl  * Server certificate: Cloudflare Inc ECC CA-3
info     libcurl  * Server certificate: Baltimore CyberTrust Root
info     libcurl  * using HTTP/1.1
info     libcurl  > HEAD /pkgs/r/noarch/repodata.json.zst HTTP/1.1
Host: repo.anaconda.com
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0

info     libcurl  * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
info     libcurl  * Server certificate: anaconda.org
info     libcurl  * Server certificate: E1
info     libcurl  * Server certificate: ISRG Root X2
info     libcurl  * using HTTP/1.1
info     libcurl  > HEAD /anaconda-cluster/osx-arm64/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0

info     libcurl  * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
info     libcurl  * Server certificate: anaconda.org
info     libcurl  * Server certificate: E1
info     libcurl  * Server certificate: ISRG Root X2
info     libcurl  * using HTTP/1.1
info     libcurl  > HEAD /anaconda-cluster/noarch/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0

info     libcurl  * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
info     libcurl  * Server certificate: anaconda.org
info     libcurl  * Server certificate: E1
info     libcurl  * Server certificate: ISRG Root X2
info     libcurl  * using HTTP/1.1
info     libcurl  > HEAD /blaze/osx-arm64/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0

info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 7ec669f65c6cef5f-PDX
info     libcurl  <
info     libcurl  * Connection #4 to host conda.anaconda.org left intact
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 7ec669f67c018e6c-PDX
info     libcurl  <
info     libcurl  * Connection #1 to host conda.anaconda.org left intact
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 7ec669f66cb9efbe-PDX
info     libcurl  <
info     libcurl  * Connection #2 to host conda.anaconda.org left intact
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 7ec669f67e5cef90-PDX
info     libcurl  <
info     libcurl  * Connection #3 to host conda.anaconda.org left intact
info     libcurl  < HTTP/1.1 404 Not Found
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html; charset=utf-8
info     libcurl  < Content-Length: 366
info     libcurl  < Connection: keep-alive
info     libcurl  < x-amz-request-id: 7941KJZ3QJEV5VJE
info     libcurl  < x-amz-id-2: 6hrNL/DdlCEVK0cRe2d55x3yhpm5PCBsu7VbyNAYhr6Uc6zBJmRTnSugbfytoQhMvGlsZFsTGag=
info     libcurl  < CF-Cache-Status: HIT
info     libcurl  < Age: 21
info     libcurl  < Expires: Tue, 25 Jul 2023 18:20:25 GMT
info     libcurl  < Cache-Control: public, max-age=30
info     libcurl  < Set-Cookie: __cf_bm=lWszPWqIskMsm6pFmo0BEgLsuPnRA4h73v_ySzF44C0-1690309195-0-AbKeAKhGp67Ba3pxUEpQ/eEocdX7BnlEUXDpgoCBrLCV1M8r12EnDx8YEoS8I0fk9U5nRKtiZtKJppjUHSnaH9M=; path=/; expires=Tue, 25-Jul-23 18:49:55 GMT; domain=.anaconda.com; HttpOnly; Secure; SameSite=None
info     libcurl  < Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self' https://content.anaconda.com/
info     libcurl  < Server: cloudflare
info     libcurl  < CF-RAY: 7ec669f66ba8fdad-PDX
info     libcurl  <
info     libcurl  * Connection cache is full, closing the oldest one
info     libcurl  * Closing connection 4
info     libcurl  * Connection #0 to host repo.anaconda.com left intact
info     libmamba Transfer done for 'blaze/noarch (check zst)'
info     libmamba Transfer finalized, status: 403 [https://conda.anaconda.org/blaze/noarch/repodata.json.zst] 0 bytes
info     libmamba Checked: https://conda.anaconda.org/blaze/noarch/repodata.json.zst [403]
info     libmamba Transfer done for 'anaconda-cluster/osx-arm64 (check zst)'
info     libmamba Transfer finalized, status: 403 [https://conda.anaconda.org/anaconda-cluster/osx-arm64/repodata.json.zst] 0 bytes
info     libmamba Checked: https://conda.anaconda.org/anaconda-cluster/osx-arm64/repodata.json.zst [403]
info     libmamba Transfer done for 'anaconda-cluster/noarch (check zst)'
info     libmamba Transfer finalized, status: 403 [https://conda.anaconda.org/anaconda-cluster/noarch/repodata.json.zst] 0 bytes
info     libmamba Checked: https://conda.anaconda.org/anaconda-cluster/noarch/repodata.json.zst [403]
info     libmamba Transfer done for 'blaze/osx-arm64 (check zst)'
blaze/noarch (check zst)                            Checked  0.1s
anaconda-cluster/osx-arm64 (check zst)              Checked  0.1s
anaconda-cluster/noarch (check zst)                 Checked  0.1s
blaze/osx-arm64 (check zst)                         Checked  0.1s
pkgs/r/noarch (check zst)                           Checked  0.2s
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Locking directory '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/cache.lock'
info     libmamba Starting to download targets
[+] 0.0s
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Re-using existing connection #1 with host conda.anaconda.org
info     libcurl  > GET /conda-forge/osx-arm64/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0
If-None-Match: W/"c72087f8a0a061c6d734faf51de49dd7"
If-Modified-Since: Tue, 28 Mar 2023 16:58:53 GMT

info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Re-using existing connection #2 with host conda.anaconda.org
info     libcurl  > GET /conda-forge/noarch/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0
If-None-Match: W/"65dad54709563229a6660b29259bbca6"
If-Modified-Since: Tue, 28 Mar 2023 18:59:41 GMT

info     libcurl  * Couldn't find host repo.anaconda.com in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a749f0 [serially]
info     libcurl  * Re-using existing connection #0 with host repo.anaconda.com
info     libcurl  > GET /pkgs/r/noarch/repodata.json HTTP/1.1
Host: repo.anaconda.com
Accept: */*
Accept-Encoding: deflate, gzip, zstd
Content-Type: application/json
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0
If-None-Match: W/"93476d5e7aa8d3f8bc0c04afafc94d26"
If-Modified-Since: Fri, 28 Oct 2022 15:33:23 GMT

info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Re-using existing connection #3 with host conda.anaconda.org
info     libcurl  > GET /anaconda-cluster/osx-arm64/repodata.json HTTP/1.1
Host: conda.anaconda.org
Accept: */*
Accept-Encoding: deflate, gzip, zstd
Content-Type: application/json
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0
If-Modified-Since: Tue, 18 Oct 2016 12:17:52 GMT

info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Hostname conda.anaconda.org was found in DNS cache
info     libcurl  *   Trying [2606:4700::6811:5d18]:443...
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * No connections available in cache
info     libcurl  * No connections available.
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * No connections available in cache
info     libcurl  * No connections available.
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 7ec669f70eecef90-PDX
info     libcurl  <
info     libcurl  * Connection #3 to host conda.anaconda.org left intact
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Re-using existing connection #3 with host conda.anaconda.org
info     libcurl  * Transfer was pending, now try another
info     libcurl  > GET /blaze/osx-arm64/repodata.json HTTP/1.1
Host: conda.anaconda.org
Accept: */*
Accept-Encoding: deflate, gzip, zstd
Content-Type: application/json
User-Agent: mamba/1.4.9 libcurl/7.88.1 SecureTransport (OpenSSL/3.1.1) zlib/1.2.13 zstd/1.5.2 libssh2/1.11.0 nghttp2/1.52.0
If-Modified-Since: Sun, 14 Jan 2018 21:11:30 GMT

info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * No connections available in cache
info     libcurl  * No connections available.
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Tue, 25 Jul 2023 18:19:55 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 7ec669f70d30efbe-PDX
info     libcurl  <
error    libmamba ZSTD decompression error: Unknown frame descriptor
info     libcurl  * Failure writing output to destination
info     libcurl  * Closing connection 2
info     libcurl  * Connected to conda.anaconda.org (2606:4700::6811:5d18) port 443 (#5)
info     libcurl  * ALPN: offers http/1.1
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * Couldn't find host conda.anaconda.org in the (nil) file; using defaults
info     libcurl  * Found bundle for host: 0x600001a7b210 [serially]
info     libcurl  * Hostname conda.anaconda.org was found in DNS cache
info     libcurl  * Transfer was pending, now try another
info     libcurl  *   Trying [2606:4700::6811:5d18]:443...
info     libmamba Transfer done for 'anaconda-cluster/osx-arm64'
info     libmamba Transfer finalized, status: 403 [https://conda.anaconda.org/anaconda-cluster/osx-arm64/repodata.json] 151 bytes
info     libmamba Unable to retrieve repodata (response: 403) for 'https://conda.anaconda.org/anaconda-cluster/osx-arm64/repodata.json'
info     libmamba Download error (23) Failed writing received data to disk/application [https://conda.anaconda.org/conda-forge/noarch/repodata.json.zst]
anaconda-cluster/osx-arm64                         151.0 B @   6.4kB/s 403 failed  0.0s
info     libmamba Reading cache files '/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv.*' for repo index 'pkgs/main/osx-arm64'
debug    libmamba Locking file '/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv.lock'
debug    libmamba Successfully locked
info     libmamba Attempting to read libsolv solv file "/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv" for repo pkgs/main/osx-arm64
debug    libmamba Path already locked by the same process: '/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv'
info     libsolv  repo_add_solv took 9 ms
info     libsolv  repo size: 9260 solvables
info     libsolv  repo memory used: 654 K incore, 355 K idarray
info     libmamba Expecting solv metadata : {"etag":"\"918f358ec3d194d7245e49b8eb21b5ef\"","mod":"Tue, 25 Jul 2023 15:34:35 GMT","pip_added":true,"tool_version":"1.3_0.7.24","url":"https://repo.anaconda.com/pkgs/main/osx-arm64"}
info     libmamba Loaded solv metadata : {"etag":"\"918f358ec3d194d7245e49b8eb21b5ef\"","mod":"Tue, 25 Jul 2023 15:34:35 GMT","pip_added":true,"tool_version":"1.3_0.7.24","url":"https://repo.anaconda.com/pkgs/main/osx-arm64"}
info     libmamba Metadata from solv are valid, loading successful
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/9e99ffaf.solv.lock'
info     libmamba Reading cache files '/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv.*' for repo index 'pkgs/main/noarch'
debug    libmamba Locking file '/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv.lock'
debug    libmamba Successfully locked
info     libmamba Attempting to read libsolv solv file "/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv" for repo pkgs/main/noarch
debug    libmamba Path already locked by the same process: '/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv'
info     libsolv  repo_add_solv took 4 ms
info     libsolv  repo size: 4915 solvables
info     libsolv  repo memory used: 313 K incore, 121 K idarray
info     libmamba Expecting solv metadata : {"etag":"\"5b84dc5036f65fa357adaff13c5198e4\"","mod":"Fri, 14 Jul 2023 18:36:03 GMT","pip_added":true,"tool_version":"1.3_0.7.24","url":"https://repo.anaconda.com/pkgs/main/noarch"}
info     libmamba Loaded solv metadata : {"etag":"\"5b84dc5036f65fa357adaff13c5198e4\"","mod":"Fri, 14 Jul 2023 18:36:03 GMT","pip_added":true,"tool_version":"1.3_0.7.24","url":"https://repo.anaconda.com/pkgs/main/noarch"}
info     libmamba Metadata from solv are valid, loading successful
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/3e39a7aa.solv.lock'
info     libmamba Reading cache files '/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv.*' for repo index 'pkgs/r/osx-arm64'
debug    libmamba Locking file '/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv'
trace    libmamba Lockfile created at '/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv.lock'
debug    libmamba Successfully locked
info     libmamba Attempting to read libsolv solv file "/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv" for repo pkgs/r/osx-arm64
debug    libmamba Path already locked by the same process: '/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv'
info     libsolv  repo_add_solv took 0 ms
info     libsolv  repo size: 0 solvables
info     libsolv  repo memory used: 0 K incore, 0 K idarray
info     libmamba Expecting solv metadata : {"etag":"W/\"bd18071599942dd824e1ec40e9d10873\"","mod":"Fri, 19 Aug 2022 21:27:22 GMT","pip_added":true,"tool_version":"1.3_0.7.24","url":"https://repo.anaconda.com/pkgs/r/osx-arm64"}
info     libmamba Loaded solv metadata : {"etag":"W/\"bd18071599942dd824e1ec40e9d10873\"","mod":"Fri, 19 Aug 2022 21:27:22 GMT","pip_added":true,"tool_version":"1.3_0.7.24","url":"https://repo.anaconda.com/pkgs/r/osx-arm64"}
info     libmamba Metadata from solv are valid, loading successful
debug    libmamba Unlocking '/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv'
trace    libmamba Removing file '/Users/danblanchard/micromamba/pkgs/cache/8bd55712.solv.lock'
info     libcurl  * Closing connection 1
info     libcurl  * Closing connection 0
info     libcurl  * Closing connection 5
info     libcurl  * Closing connection 3
info     libcurl  * Closing connection 6
critical libmamba Multiple errors occured:
    Download error (23) Failed writing received data to disk/application [https://conda.anaconda.org/conda-forge/noarch/repodata.json.zst]
    Failure writing output to destination
    Subdir conda-forge/noarch not loaded!
    Subdir pkgs/r/noarch not loaded!
    Subdir anaconda-cluster/noarch not loaded!
    Subdir blaze/noarch not loaded!

environment.yml

name: coiled
channels:
  - conda-forge
dependencies:
  - python>=3.11.1,<3.12
  - pip>=23.0
  - yarn>=1.20,<2
  - micromamba==1.4.2
  - lz4-c==1.9.3
  - openssl>=3.1.0

~/.condarc

channels:
  - conda-forge
  - defaults
  - anaconda-cluster
  - blaze
binstar_upload: yes
ssl_verify: false

Jul 25 '23 18:07 dan-blanchard

The 403 is from downloading a „anaconda-cluster“

Jul 25 '23 19:07 jonashaag

are you behind some corporate proxy?

Jul 25 '23 19:07 jonashaag

Nope. I have seen this on my home internet and at a relatives house using two different computers.

Also mamba works fine. It’s just micromamba hitting this.

Jul 25 '23 19:07 dan-blanchard

Hmm it seems like ALL of the downloads fail with 403, not sure what's going on here. Can you try to reproduce with only one channel?

Jul 25 '23 19:07 jonashaag

Can you successfully download any of the repodata URL with curl directly?

Jul 25 '23 19:07 jonashaag

I can load the repo data URLs directly with curl and chrome

Jul 25 '23 20:07 dan-blanchard

I just confirmed that it still happens even if conda-forge is the only channel.

Jul 25 '23 21:07 dan-blanchard

Can you try to reproduce this in an isolated environment eg S Docker?

Jul 26 '23 06:07 jonashaag

I have not been able to reproduce this in Docker, but I have reproduced it on two similarly-configured Macs.

Jul 27 '23 16:07 dan-blanchard

I had the same issue. Cleaning up the packages directory solved it for me.

Jul 28 '23 08:07 sfinkens

Cleaning up the packages directory solved it for me.

Can you elaborate on that? I've tried deleting both /Users/danblanchard/.mamba/pkgs and /Users/danblanchard/micromamba/pkgs and still the same 403 persists.

Aug 15 '23 16:08 dan-blanchard

@dan-blanchard I'm on Linux and specified a custom package directory in ~/.condarc

pkgs_dirs:
  - /path/to/my/pkgs

This is the directory I cleaned up.

Aug 28 '23 09:08 sfinkens

@dan-blanchard did you figure a way around this? I'm hitting similar issues on macOS.

Sep 27 '23 18:09 jdumas

I did eventually figure out a way around this, and it was to delete my .condarc file. You can see the difference in micromamba info now vs before:

       libmamba version : 1.5.1
     micromamba version : 1.5.1
           curl version : libcurl/7.88.1 SecureTransport (OpenSSL/3.1.2) zlib/1.2.13 zstd/1.5.5 libssh2/1.11.0 nghttp2/1.52.0
     libarchive version : libarchive 3.6.2 zlib/1.2.13 bz2lib/1.0.8 libzstd/1.5.2
       envs directories : /Users/danielblanchard/micromamba/envs
          package cache : /Users/danielblanchard/micromamba/pkgs
                          /Users/danielblanchard/.mamba/pkgs
            environment : /opt/homebrew/Caskroom/mambaforge/base/envs/coiled (active)
           env location : /opt/homebrew/Caskroom/mambaforge/base/envs/coiled
      user config files : /Users/danielblanchard/.mambarc
 populated config files :
       virtual packages : __unix=0=0
                          __osx=14.0=0
                          __archspec=1=arm64
               channels :
       base environment : /Users/danielblanchard/micromamba
               platform : osx-arm64

Now populated config files is blank and so is channels.

Sep 27 '23 20:09 dan-blanchard

What the heck. I'll be damned. This also solved it for me. I only had the following in my .condarc:

env_prompt: '({name}) '
ssl_verify: false

Sep 27 '23 20:09 jdumas

ssl_verify: false

Hmm, I wonder if it's ssl_verify: false, since I had that in my settings as well.

Nov 16 '23 21:11 dan-blanchard

I have created a reproducer running with GitHub Actions here https://github.com/0xbe7a/micromamba-no-ssl-verify-bug

I was only able to reproduce this on macos. When running this script:

#!/usr/bin/env bash

eval "$(micromamba shell hook --shell bash)"

set -eux

# This works
tmp_prefix=$(mktemp -d)/env
root_prefix=$(mktemp -d)/root
export MAMBA_ROOT_PREFIX=$root_prefix


echo "SSL Verify true"

micromamba create -y -p $tmp_prefix
micromamba install --ssl-verify true -y --dry-run -p $tmp_prefix xtensor -c conda-forge

# This fails
tmp_prefix=$(mktemp -d)/env
root_prefix=$(mktemp -d)/root
export MAMBA_ROOT_PREFIX=$root_prefix

echo "SSL Verify false"

micromamba create -y -p $tmp_prefix
micromamba install --ssl-verify false -y --dry-run -p $tmp_prefix xtensor -c conda-forge

The second install fails on MacOS with:

+ /usr/local/bin/micromamba install --ssl-verify false -y --dry-run -p /var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.zKFB3d8R/env xtensor -c conda-forge
error    libmamba ZSTD decompression error: Unknown frame descriptor
error    libmamba ZSTD decompression error: Unknown frame descriptor
critical libmamba Multiple errors occured:
    Download error (23) Failed writing received data to disk/application [https://conda.anaconda.org/conda-forge/noarch/repodata.json.zst]
    Failure writing output to destination
    Subdir conda-forge/noarch not loaded!

Log:

+ /usr/local/bin/micromamba install -vvv --ssl-verify false -y --dry-run -p /var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.1hNZmNtd/env xtensor -c conda-forge
debug    libmamba Loading configuration
trace    libmamba Compute configurable 'create_base'
trace    libmamba Compute configurable 'no_env'
trace    libmamba Compute configurable 'no_rc'
trace    libmamba Compute configurable 'rc_files'
trace    libmamba Compute configurable 'root_prefix'
trace    libmamba Get RC files configuration from locations up to HomeDir
trace    libmamba Configuration not found at '/Users/runner/.mambarc'
trace    libmamba Configuration not found at '/Users/runner/.mamba/mambarc.d'
trace    libmamba Configuration not found at '/Users/runner/.mamba/mambarc'
trace    libmamba Configuration not found at '/Users/runner/.mamba/.mambarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/mambarc.d'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/mambarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/.mambarc'
trace    libmamba Configuration not found at '/Users/runner/.condarc'
trace    libmamba Configuration not found at '/Users/runner/.conda/condarc.d'
trace    libmamba Configuration not found at '/Users/runner/.conda/condarc'
trace    libmamba Configuration not found at '/Users/runner/.conda/.condarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/../conda/condarc.d'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/../conda/condarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/../conda/.condarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/.mambarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/condarc.d'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/condarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/.condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.mambarc'
trace    libmamba Configuration not found at '/var/lib/conda/condarc.d/'
trace    libmamba Configuration not found at '/var/lib/conda/condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.condarc'
trace    libmamba Configuration not found at '/etc/conda/.mambarc'
trace    libmamba Configuration not found at '/etc/conda/condarc.d/'
trace    libmamba Configuration not found at '/etc/conda/condarc'
trace    libmamba Configuration not found at '/etc/conda/.condarc'
trace    libmamba Update configurable 'no_env'
trace    libmamba Compute configurable 'envs_dirs'
trace    libmamba Compute configurable 'file_specs'
trace    libmamba Compute configurable 'spec_file_env_name'
trace    libmamba Compute configurable 'env_name'
trace    libmamba Compute configurable 'use_target_prefix_fallback'
trace    libmamba Compute configurable 'target_prefix'
trace    libmamba Get RC files configuration from locations up to TargetPrefix
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.1hNZmNtd/env/.mambarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.1hNZmNtd/env/condarc.d'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.1hNZmNtd/env/condarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.1hNZmNtd/env/.condarc'
trace    libmamba Configuration not found at '/Users/runner/.mambarc'
trace    libmamba Configuration not found at '/Users/runner/.mamba/mambarc.d'
trace    libmamba Configuration not found at '/Users/runner/.mamba/mambarc'
trace    libmamba Configuration not found at '/Users/runner/.mamba/.mambarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/mambarc.d'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/mambarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/.mambarc'
trace    libmamba Configuration not found at '/Users/runner/.condarc'
trace    libmamba Configuration not found at '/Users/runner/.conda/condarc.d'
trace    libmamba Configuration not found at '/Users/runner/.conda/condarc'
trace    libmamba Configuration not found at '/Users/runner/.conda/.condarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/../conda/condarc.d'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/../conda/condarc'
trace    libmamba Configuration not found at '/Users/runner/.config/mamba/../conda/.condarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/.mambarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/condarc.d'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/condarc'
trace    libmamba Configuration not found at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/.condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.mambarc'
trace    libmamba Configuration not found at '/var/lib/conda/condarc.d/'
trace    libmamba Configuration not found at '/var/lib/conda/condarc'
trace    libmamba Configuration not found at '/var/lib/conda/.condarc'
trace    libmamba Configuration not found at '/etc/conda/.mambarc'
trace    libmamba Configuration not found at '/etc/conda/condarc.d/'
trace    libmamba Configuration not found at '/etc/conda/condarc'
trace    libmamba Configuration not found at '/etc/conda/.condarc'
trace    libmamba Update configurable 'no_env'
trace    libmamba Compute configurable 'relocate_prefix'
trace    libmamba Compute configurable 'target_prefix_checks'
trace    libmamba Compute configurable 'pkgs_dirs'
trace    libmamba Compute configurable 'platform'
trace    libmamba Compute configurable 'specs'
trace    libmamba Compute configurable 'others_pkg_mgrs_specs'
trace    libmamba Compute configurable 'experimental'
trace    libmamba Compute configurable 'debug'
trace    libmamba Compute configurable 'override_channels_enabled'
trace    libmamba Compute configurable 'override_channels'
trace    libmamba Compute configurable 'channels'
trace    libmamba Compute configurable 'channel_alias'
trace    libmamba Compute configurable 'default_channels'
trace    libmamba Compute configurable 'custom_channels'
trace    libmamba Compute configurable 'custom_multichannels'
trace    libmamba Compute configurable 'repodata_use_zst'
trace    libmamba Compute configurable 'repodata_has_zst'
trace    libmamba Compute configurable 'cacert_path'
trace    libmamba Compute configurable 'local_repodata_ttl'
trace    libmamba Compute configurable 'offline'
trace    libmamba Compute configurable 'ssl_no_revoke'
trace    libmamba Compute configurable 'ssl_verify'
trace    libmamba Compute configurable 'proxy_servers'
trace    libmamba Compute configurable 'remote_connect_timeout_secs'
trace    libmamba Compute configurable 'remote_backoff_factor'
trace    libmamba Compute configurable 'remote_max_retries'
trace    libmamba Compute configurable 'no_channel_priority'
trace    libmamba Compute configurable 'strict_channel_priority'
trace    libmamba Compute configurable 'channel_priority'
trace    libmamba Compute configurable 'explicit_install'
trace    libmamba Compute configurable 'no_pin'
trace    libmamba Compute configurable 'no_py_pin'
trace    libmamba Compute configurable 'add_pip_as_python_dependency'
trace    libmamba Compute configurable 'pinned_packages'
trace    libmamba Compute configurable 'freeze_installed'
trace    libmamba Compute configurable 'force_reinstall'
trace    libmamba Compute configurable 'no_deps'
trace    libmamba Compute configurable 'only_deps'
trace    libmamba Compute configurable 'categories'
trace    libmamba Compute configurable 'retry_clean_cache'
trace    libmamba Compute configurable 'allow_uninstall'
trace    libmamba Compute configurable 'allow_downgrade'
trace    libmamba Compute configurable 'download_threads'
trace    libmamba Compute configurable 'extract_threads'
trace    libmamba Compute configurable 'allow_softlinks'
trace    libmamba Compute configurable 'always_copy'
trace    libmamba Compute configurable 'always_softlink'
trace    libmamba Compute configurable 'shortcuts'
trace    libmamba Compute configurable 'safety_checks'
trace    libmamba Compute configurable 'extra_safety_checks'
trace    libmamba Compute configurable 'verify_artifacts'
trace    libmamba Compute configurable 'lock_timeout'
trace    libmamba Compute configurable 'use_lockfiles'
trace    libmamba Compute configurable 'compile_pyc'
trace    libmamba Compute configurable 'always_yes'
trace    libmamba Compute configurable 'auto_activate_base'
trace    libmamba Compute configurable 'dry_run'
trace    libmamba Compute configurable 'download_only'
trace    libmamba Compute configurable 'print_config_only'
trace    libmamba Compute configurable 'print_context_only'
trace    libmamba Compute configurable 'json'
trace    libmamba Compute configurable 'verbose'
trace    libmamba Compute configurable 'log_level'
trace    libmamba Compute configurable 'log_backtrace'
trace    libmamba Compute configurable 'log_pattern'
trace    libmamba Compute configurable 'changeps1'
trace    libmamba Compute configurable 'shell_completion'
trace    libmamba Compute configurable 'env_prompt'
trace    libmamba Compute configurable 'show_all_configs'
trace    libmamba Compute configurable 'show_all_rc_configs'
trace    libmamba Compute configurable 'show_config_descriptions'
trace    libmamba Compute configurable 'show_config_groups'
trace    libmamba Compute configurable 'show_config_long_descriptions'
trace    libmamba Compute configurable 'show_config_sources'
trace    libmamba Compute configurable 'show_config_values'
trace    libmamba Compute configurable 'quiet'
trace    libmamba Compute configurable 'override_rc_files'
trace    libmamba Compute configurable 'shell_type'
trace    libmamba Compute configurable 'prefix_or_name'
trace    libmamba Compute configurable 'shell_stack'
trace    libmamba Compute configurable 'list_regex'
trace    libmamba Compute configurable 'clean_all'
trace    libmamba Compute configurable 'clean_index_cache'
trace    libmamba Compute configurable 'clean_packages'
trace    libmamba Compute configurable 'clean_tarballs'
trace    libmamba Compute configurable 'clean_locks'
trace    libmamba Compute configurable 'clean_trash'
trace    libmamba Compute configurable 'clean_force_pkgs_dirs'
trace    libmamba Compute configurable 'config_set_system_path'
trace    libmamba Compute configurable 'config_set_env_path'
trace    libmamba Compute configurable 'config_set_file_path'
trace    libmamba Compute configurable 'config_set_sequence_spec'
trace    libmamba Compute configurable 'remove_key'
trace    libmamba Compute configurable 'remove'
trace    libmamba Compute configurable 'set_value'
trace    libmamba Compute configurable 'get_value'
trace    libmamba Compute configurable 'constructor_prefix'
trace    libmamba Compute configurable 'constructor_extract_conda_pkgs'
trace    libmamba Compute configurable 'constructor_extract_tarball'
debug    libmamba 110 configurables computed
info     libmamba Parsing MatchSpec xtensor
debug    libmamba Checking if '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs' is writable
trace    libmamba Cache path does not exists or is not writable
debug    libmamba '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs' writable
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/conda-forge/osx-64/repodata.json'
info     libmamba No valid cache found
debug    libmamba Locking directory '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache'
trace    libmamba Lockfile created at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba 'ssl_verify' not activated, skipping cURL SSL init
debug    libmamba Unlocking '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache'
trace    libmamba Removing file '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache/cache.lock'
info     libmamba Searching index cache file for repo 'https://conda.anaconda.org/conda-forge/noarch/repodata.json'
info     libmamba No valid cache found
debug    libmamba Locking directory '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache'
trace    libmamba Lockfile created at '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache/cache.lock'
debug    libmamba Successfully locked
debug    libmamba Unlocking '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache'
trace    libmamba Removing file '/private/var/folders/h1/8hndypj13nsbj5pn4xsnv1tm0000gn/T/tmp.NAHyoJug/root/pkgs/cache/cache.lock'
info     libmamba All targets to download are cached
info     libmamba Starting to download targets
info     libcurl  * Couldn't find host conda.anaconda.org in the .netrc file; using defaults
info     libcurl  * Couldn't find host conda.anaconda.org in the .netrc file; using defaults
info     libcurl  * Found bundle for host: 0x600000bfc210 [serially]
info     libcurl  * Host conda.anaconda.org:443 was resolved.
info     libcurl  * IPv4: 104.17.16.67, 104.17.15.67
info     libcurl  *   Trying 104.17.16.67:443...
info     libcurl  * Hostname 'conda.anaconda.org' was found in DNS cache
info     libcurl  *   Trying 104.17.16.67:443...
info     libcurl  * Connected to conda.anaconda.org (104.17.16.67) port 443
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * Connected to conda.anaconda.org (104.17.16.67) port 443
info     libcurl  * WARNING: disabling hostname validation also disables SNI.
info     libcurl  * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
info     libcurl  * Server certificate: anaconda.org
info     libcurl  * Server certificate: E1
info     libcurl  * Server certificate: ISRG Root X2
info     libcurl  * using HTTP/1.x
info     libcurl  > GET /conda-forge/osx-64/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.5.6 libcurl/8.5.0 SecureTransport (OpenSSL/3.2.0) zlib/1.2.13 zstd/1.5.5 libssh2/1.11.0 nghttp2/1.58.0
info     libcurl  * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
info     libcurl  * Server certificate: anaconda.org
info     libcurl  * Server certificate: E1
info     libcurl  * Server certificate: ISRG Root X2
info     libcurl  * using HTTP/1.x
info     libcurl  > GET /conda-forge/noarch/repodata.json.zst HTTP/1.1
Host: conda.anaconda.org
Accept: */*
User-Agent: mamba/1.5.6 libcurl/8.5.0 SecureTransport (OpenSSL/3.2.0) zlib/1.2.13 zstd/1.5.5 libssh2/1.11.0 nghttp2/1.58.0
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Mon, 26 Feb 2024 21:12:25 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 85bb2fa54a0e2566-SJC
info     libcurl  < 
error    libmamba ZSTD decompression error: Unknown frame descriptor
info     libcurl  * Failure writing output to destination
info     libcurl  * Closing connection
info     libmamba Download error (23) Failed writing received data to disk/application [https://conda.anaconda.org/conda-forge/osx-64/repodata.json.zst]
    Failure writing output to destination
info     libmamba Transfer done for 'conda-forge/osx-64'
info     libmamba Transfer finalized, status: 403 [https://conda.anaconda.org/conda-forge/osx-64/repodata.json.zst] 0 bytes
info     libmamba Unable to retrieve repodata (response: 403) for 'https://conda.anaconda.org/conda-forge/osx-64/repodata.json.zst'
info     libcurl  < HTTP/1.1 403 Forbidden
info     libcurl  < Server: cloudflare
info     libcurl  < Date: Mon, 26 Feb 2024 21:12:25 GMT
info     libcurl  < Content-Type: text/html
info     libcurl  < Content-Length: 151
info     libcurl  < Connection: keep-alive
info     libcurl  < CF-RAY: 85bb2fa55e721701-SJC
info     libcurl  < 
error    libmamba ZSTD decompression error: Unknown frame descriptor
info     libcurl  * Failure writing output to destination
info     libcurl  * Closing connection
info     libmamba Download error (23) Failed writing received data to disk/application [https://conda.anaconda.org/conda-forge/noarch/repodata.json.zst]
    Failure writing output to destination
critical libmamba Multiple errors occured:
    Download error (23) Failed writing received data to disk/application [https://conda.anaconda.org/conda-forge/noarch/repodata.json.zst]
    Failure writing output to destination
    Subdir conda-forge/noarch not loaded!

Feb 26 '24 21:02 0xbe7a

Nice! I think the problem is that something is not correct with the TLS setup. I can reproduce the 403 with:

curl -v https://104.17.16.67/conda-forge/osx-64/repodata.json.zst -H 'Host: conda.anaconda.org' -k

Could be completely unrelated invocation of curl but it gives the same error.

I wonder if -k changes something about some hostname or whatever.

Feb 26 '24 22:02 jonashaag

info libcurl * WARNING: disabling hostname validation also disables SNI. I think this is the culprit

Server Name Indication is a TLS extension that allows the client to signal the requested hostname before a server certificate (or HTTP host header) has been sent, allowing the server to select appropriate server certificates based on the request.

The curl command that @jonashaag posted also disables SNI during Client hello. Interestingly, anaconda.org appears to be the only user on that IP address, so Cloudflare sends the correct certificate even without SNI.

However, Cloudflare requires its customers to explicitly enable legacy client support to allow clients without SNI support (https://developers.cloudflare.com/ssl/reference/browser-compatibility/#non-sni-support), and this appears to be disabled here.

Feb 27 '24 08:02 0xbe7a

mamba sets CURLOPT_SSL_VERIFYHOST to 0 when using --ssl-verify false, which is passed to Secure Transport / coreTLS on macos. coreTLS has the quirk that you either disable SNI and hostname verification or enable both: https://github.com/curl/curl/issues/998#issuecomment-245210625.

Funnily enough, the default curl on macos now uses LibreSSL instead of its own system, which does not have this quirk. We could just switch the macos to LibreSSL or OpenSSL and be done.

Feb 27 '24 09:02 0xbe7a

mamba
mamba copied to clipboard

micromamba gets 403 when trying to download conda-forge noarch repodata with ssl_verify disabled

Troubleshooting docs

How did you install Mamba?

Search tried in issue tracker

Latest version of Mamba

Tried in Conda?

Describe your issue

mamba info / micromamba info

Logs

environment.yml

~/.condarc

mamba mamba copied to clipboard

micromamba gets 403 when trying to download conda-forge noarch repodata with ssl_verify disabled

Troubleshooting docs

How did you install Mamba?

Search tried in issue tracker

Latest version of Mamba

Tried in Conda?

Describe your issue

mamba info / micromamba info

Logs

environment.yml

~/.condarc

mamba
mamba copied to clipboard