Seems not working for vscode insiders (1.98.0), cannot install extensions

[zeyugao]

Disclaim: Stable (1.97.0) works well

vscode version

Version: 1.98.0-insider
Commit: edd39c48ec3c81b5f8c6ddf1893a95acf8662187
Date: 2025-02-06T05:04:30.184Z (23 hrs ago)
Electron: 32.2.7
ElectronBuildId: 10660205
Chromium: 128.0.6613.186
Node.js: 20.18.1
V8: 12.8.374.38-electron.0
OS: Darwin arm64 24.3.0

I tried multiple nixos server, I get error when install extensions

2025-02-07 12:04:57.027 [error] Error while installing the extension eamodio.gitlens Signature verification failed with 'UnknownError' error. file:///home/USER/.vscode-server-insiders/extensions/extensions.json

Some slightly detailed log (log level: trace)

2025-02-07 12:05:00.736 [trace] Verifying extension signature for ms-python.vscode-pylance...
2025-02-07 12:05:01.281 [info] Extension signature verification result for ms-python.vscode-pylance: UnknownError. Executed: false. Duration: 545ms.
2025-02-07 12:05:01.282 [trace] Extension signature verification output for ms-python.vscode-pylance:
Package file size:  24803440
Signature archive file size:  356198
Manifest file size:  1371749
Signature file size:  19228

After digging into the vscode source, it calls a closed source module @vscode/vsce-sign so I cannot investigate deeper.

https://github.com/microsoft/vscode/blob/fe4d6a831a4f87126187ac6ba96e16405d69de0f/src/vs/platform/extensionManagement/node/extensionSignatureVerificationService.ts#L60-L101

[Ten0]

That is worrisome for next stable versions... So you can connect and edit, just not install extensions?

[zeyugao]

I found that, the stable version also failed to check signature... but on the contrary to the insider version, it still shows extension was successfully installed

But I do not have much idea, as the verification process seems have been changed few months ago

microsoft/vscode@2991008

microsoft/vscode@365d0be

microsoft/vscode#223942 <-- content inside this issue is quite related

[19:33:43.955] [server] [19:33:44] Renamed to /home/USER/.vscode-server/extensions/vscjava.vscode-java-debug-0.58.1
[19:33:44.413] [server] [19:33:44] Extracted extension to file:///home/USER/.vscode-server/extensions/ms-toolsai.jupyter-renderers-1.1.0: ms-toolsai.jupyter-renderers
[19:33:44.428] [server] [19:33:44] Renamed to /home/USER/.vscode-server/extensions/ms-toolsai.jupyter-renderers-1.1.0
[19:33:44.428] [server] [19:33:44] Extension signature verification result for vscjava.vscode-java-test: UnknownError. Executed: false. Duration: 517ms.
[19:33:44.440] [server] [19:33:44] Extracted extension to file:///home/USER/.vscode-server/extensions/vscjava.vscode-java-test-0.43.0: vscjava.vscode-java-test
[19:33:44.454] [server] [19:33:44] Renamed to /home/USER/.vscode-server/extensions/vscjava.vscode-java-test-0.43.0
[19:33:44.471] [server] [19:33:44] Extracted extension to file:///home/USER/.vscode-server/extensions/github.copilot-1.271.0: github.copilot
[19:33:44.484] [server] [19:33:44] Renamed to /home/USER/.vscode-server/extensions/github.copilot-1.271.0
[19:33:45.038] [server] [19:33:45] Extracted extension to file:///home/USER/.vscode-server/extensions/ms-python.python-2025.0.0-linux-x64: ms-python.python
[19:33:45.052] [server] [19:33:45] Renamed to /home/USER/.vscode-server/extensions/ms-python.python-2025.0.0-linux-x64
[19:33:46.903] [server] [19:33:47] Extension signature verification result for vscjava.vscode-maven: UnknownError. Executed: false. Duration: 532ms.
[19:33:47.213] [server] [19:33:47] Extracted extension to file:///home/USER/.vscode-server/extensions/vscjava.vscode-maven-0.44.0: vscjava.vscode-maven
[19:33:47.227] [server] [19:33:47] Renamed to /home/USER/.vscode-server/extensions/vscjava.vscode-maven-0.44.0
[19:33:49.727] [server] [19:33:49] Extension signature verification result for eamodio.gitlens: UnknownError. Executed: false. Duration: 610ms.
[19:33:50.135] [server] [19:33:50] Extracted extension to file:///home/USER/.vscode-server/extensions/eamodio.gitlens-16.3.0: eamodio.gitlens
[19:33:50.151] [server] [19:33:50] Renamed to /home/USER/.vscode-server/extensions/eamodio.gitlens-16.3.0
[19:33:50.547] [server] [19:33:50] Extension signature verification result for ms-toolsai.jupyter: UnknownError. Executed: false. Duration: 581ms.
[19:33:50.949] [server] [19:33:51] Extracted extension to file:///home/USER/.vscode-server/extensions/ms-toolsai.jupyter-2025.1.0-linux-x64: ms-toolsai.jupyter
[19:33:50.973] [server] [19:33:51] Renamed to /home/USER/.vscode-server/extensions/ms-toolsai.jupyter-2025.1.0-linux-x64
[19:33:53.318] [server] [19:33:53] Extension signature verification result for ms-python.vscode-pylance: UnknownError. Executed: false. Duration: 593ms.
[19:33:53.498] [server] [19:33:53] Extension signature verification result for redhat.java: UnknownError. Executed: false. Duration: 499ms.
[19:33:56.262] [server] [19:33:56] Extracted extension to file:///home/USER/.vscode-server/extensions/redhat.java-1.39.0-linux-x64: redhat.java
[19:33:56.294] [server] [19:33:56] Renamed to /home/USER/.vscode-server/extensions/redhat.java-1.39.0-linux-x64
[19:33:56.792] [server] [19:33:56] Extension signature verification result for vscjava.vscode-gradle: UnknownError. Executed: false. Duration: 743ms.
[19:33:57.477] [server] [19:33:57] Extracted extension to file:///home/USER/.vscode-server/extensions/vscjava.vscode-gradle-3.16.4: vscjava.vscode-gradle
[19:33:57.480] [server] [19:33:57] Renamed to /home/USER/.vscode-server/extensions/vscjava.vscode-gradle-3.16.4
[19:33:58.230] [server] [19:33:58] Extracted extension to file:///home/USER/.vscode-server/extensions/ms-python.vscode-pylance-2025.2.1: ms-python.vscode-pylance
[19:33:58.640] [server] [19:33:58] Renamed to /home/USER/.vscode-server/extensions/ms-python.vscode-pylance-2025.2.1
[19:33:59.660] [server] [19:33:59] Extension signature verification result for visualstudioexptteam.vscodeintellicode: UnknownError. Executed: false. Duration: 669ms.
[19:34:00.074] [server] [19:34:00] Extracted extension to file:///home/USER/.vscode-server/extensions/visualstudioexptteam.vscodeintellicode-1.3.2: visualstudioexptteam.vscodeintellicode
[19:34:00.080] [server] [19:34:00] Renamed to /home/USER/.vscode-server/extensions/visualstudioexptteam.vscodeintellicode-1.3.2
[19:34:01.094] [server] [19:34:01] Extension signature verification result for ms-vscode.cpptools: UnknownError. Executed: false. Duration: 619ms.
[19:34:05.160] [server] [19:34:05] Extracted extension to file:///home/USER/.vscode-server/extensions/ms-vscode.cpptools-1.23.6-linux-x64: ms-vscode.cpptools
[19:34:05.169] [server] [19:34:05] Renamed to /home/USER/.vscode-server/extensions/ms-vscode.cpptools-1.23.6-linux-x64
[19:34:05.225] [server] [19:34:05] Extension installed successfully: ms-toolsai.jupyter-keymap file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.226] [server] [19:34:05] Extension installed successfully: vscjava.vscode-java-dependency file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.226] [server] [19:34:05] Extension installed successfully: mkhl.direnv file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.226] [server] [19:34:05] Extension installed successfully: jnoortheen.nix-ide file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.227] [server] [19:34:05] Extension installed successfully: ms-python.autopep8 file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.227] [server] [19:34:05] Extension installed successfully: ms-toolsai.vscode-jupyter-cell-tags file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.228] [server] [19:34:05] Extension installed successfully: ms-toolsai.vscode-jupyter-slideshow file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.229] [server] [19:34:05] Extension installed successfully: yy0931.save-as-root file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.229] [server] [19:34:05] Extension installed successfully: ms-python.isort file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.229] [server] [19:34:05] Extension installed successfully: visualstudioexptteam.intellicode-api-usage-examples file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.229] [server] [19:34:05] Extension installed successfully: ms-python.debugpy file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.234] [server] [19:34:05] Extension installed successfully: github.copilot-chat file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.234] [server] [19:34:05] Extension installed successfully: vscjava.vscode-java-pack file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.234] [server] [19:34:05] Extension installed successfully: vscjava.vscode-java-debug file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.234] [server] [19:34:05] Extension installed successfully: ms-toolsai.jupyter-renderers file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.234] [server] [19:34:05] Extension installed successfully: vscjava.vscode-java-test file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.251] [server] [19:34:05] Extension installed successfully: github.copilot file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: ms-python.python file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: vscjava.vscode-maven file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: eamodio.gitlens file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: ms-toolsai.jupyter file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: redhat.java file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: vscjava.vscode-gradle file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.252] [server] [19:34:05] Extension installed successfully: ms-python.vscode-pylance file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.253] [server] [19:34:05] Extension installed successfully: visualstudioexptteam.vscodeintellicode file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.253] [server] [19:34:05] Extension installed successfully: ms-vscode.cpptools file:///home/USER/.vscode-server/extensions/extensions.json
[19:34:05.253] [server] [19:34:05] Extension 'ms-toolsai.jupyter-keymap' v1.1.2 was successfully installed.
[19:34:05.253] [server] [19:34:05] Extension 'vscjava.vscode-java-dependency' v0.24.1 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'mkhl.direnv' v0.17.0 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'jnoortheen.nix-ide' v0.4.12 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'ms-python.autopep8' v2024.2.0 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'ms-toolsai.vscode-jupyter-cell-tags' v0.1.9 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'ms-toolsai.vscode-jupyter-slideshow' v0.1.6 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'yy0931.save-as-root' v1.10.0 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'ms-python.isort' v2023.10.1 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'visualstudioexptteam.intellicode-api-usage-examples' v0.2.9 was successfully installed.
[19:34:05.254] [server] [19:34:05] Extension 'ms-python.debugpy' v2025.0.1 was successfully installed.
[19:34:05.255] [server] [19:34:05] Extension 'github.copilot-chat' v0.24.1 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'vscjava.vscode-java-pack' v0.29.0 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'vscjava.vscode-java-debug' v0.58.1 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'ms-toolsai.jupyter-renderers' v1.1.0 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'vscjava.vscode-java-test' v0.43.0 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'github.copilot' v1.271.0 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'ms-python.python' v2025.0.0 was successfully installed.
[19:34:05.256] [server] [19:34:05] Extension 'vscjava.vscode-maven' v0.44.0 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'eamodio.gitlens' v16.3.0 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'ms-toolsai.jupyter' v2025.1.0 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'redhat.java' v1.39.0 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'vscjava.vscode-gradle' v3.16.4 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'ms-python.vscode-pylance' v2025.2.1 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'visualstudioexptteam.vscodeintellicode' v1.3.2 was successfully installed.
[19:34:05.257] [server] [19:34:05] Extension 'ms-vscode.cpptools' v1.23.6 was successfully installed.

[clushie]

programs.nix-ld.enable = true; and deactivating this project for the time being "workarounds" the issue. You may have to add additional packages to environment to fully work.

[chrisportela]

This suddenly started happening to me as well.

[chrisportela]

I might be experiencing another problem because it seems signature verification behavior changed recently microsoft/vscode#239579.

I've disabled signature verfication on the remote host for now.

There does seem to be some kind of fix related to this NixOS/nixpkgs#406642

[evilmav]

There does seem to be some kind of fix related to this NixOS/nixpkgs#406642

Judging from it, something like this should do:

services.vscode-server = {
    enable = true;
    postPatch = ''
      bin=$1
      vsce_sign="${config.services.vscode-server.installPath}/cli/servers/$bin/server/node_modules/@vscode/vsce-sign/bin/vsce-sign"

      patchelf \
        --add-needed ${lib.getLib pkgs.openssl}/lib/libssl.so \
        "$vsce_sign"
    '';
  };

However, this gives me

 builder for '/nix/store/7dfsix8yqgzqak0j50ci8f70nhy5qicp-patchelf-vscode-server.drv' failed with exit code 1;
       last 7 log lines:
       >
       > In /nix/store/bnqkxynzdsh9cb8ynaij73y72d7qs8ri-patchelf-vscode-server/bin/patchelf-vscode-server line 51:
       > /nix/store/pjgc3y5kscngsxap2sxfxgr2h4c0sdi7-post-patchelf-vscode-server "$bin"
       >                                                                          ^--^ SC2154 (warning): bin is referenced but not assigned.

which seems like a bug in

nixos-vscode-server/pkgs/auto-fix-vscode-server.nix

Line 118 in 8b6db45

${optionalString (postPatch != "") ''${writeShellScript "post-patchelf-vscode-server" postPatch} "$bin"''}

[Prince213]

As a quick workaround, disable extensions.verifySignature on remote settings.

They did push a change on this in the most recent commit for OpenVSCode-Server:
gitpod-io/openvscode-server@55735d1