# Downloads.mender.io - 403 Forbidden

**URL:** https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129
**Category:** General Discussions
**Created:** [August 21, 2024, 4:51pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129 "2024-08-21T16:51:20Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![duffy](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@duffy](https://hub.mender.io/u/duffy)
#### Post date: [August 21, 2024, 4:51pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/1 "2024-08-21T16:51:20Z")

</div>

I can’t download anything from [https://downloads.mender.io](https://downloads.mender.io): 403 Forbidden.

This happens both when I attempt to install `mender-client` via `apt-get` and when `mender-convert` attempts to retrieve the [Uboot](https://downloads.mender.io/mender-convert/uboot/raspberrypi/raspberrypi_arm64-2024.04.tar.gz) bootloader via `wget`. I followed the [instructions](https://docs.mender.io/downloads#install-using-the-apt-repository) for configuring APT–both for v3 and v4–to no avail. I tried both the `curl` and `wget` commands provided in the Downloads section when logged into [hosted.mender.io](http://hosted.mender.io), which seem to include a cookie, and those don’t work either.

I see there’s another [thread](https://hub.mender.io/t/downloads-mender-io-access-denied-error/5398/11) from two years ago that suggests a GPG problem preventing APT from working, but that doesn’t explain why plain `wget` doesn’t work, even when I provide a header with my session cookie.

The official [Debian repo](https://packages.debian.org/search?searchon=names&keywords=mender) has `mender-client` and `mender-connect` but not `mender-monitor`, which is a feature my enterprise plans on using. Besides, I’d rather get the packages directly from Mender to rule out support issues.

Does anyone know how to get around this?

---

<div class="post-metadata">

### Author: ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)
#### Post date: [August 21, 2024, 8:18pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/2 "2024-08-21T20:18:56Z")

</div>

Hi @duffy,

The APT-based instructions at [Downloads | Mender documentation](https://docs.mender.io/downloads#install-using-the-apt-repository) and repos definitely should work. Possibly @robgio can give it a short cross check?

For `mender-monitor`, there is a `deb` package, but it is not part of the package repository. This is because it’s proprietary licensed and available for download only if you have a plan which has the Add-On enabled. Having said that, the trial period counts technically as Enterprise tier, so you can just follow the documentation at [Downloads | Mender documentation](https://docs.mender.io/downloads#monitor) with your trial credentials.

Greets,  
Josef

---

<div class="post-metadata">

### Author: ![duffy](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@duffy](https://hub.mender.io/u/duffy)
#### Post date: [August 21, 2024, 8:36pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/3 "2024-08-21T20:36:08Z")

</div>

Hi Josef,

Thank you for your reply. APT issues aside, I’m most interested your `mender-convert` [fork](https://github.com/TheYoctoJester/mender-convert/tree/rpi_debian_64bit) since it supports Debian 64-bit, however when it attempts to download the bootloader ([URL](https://downloads.mender.io/mender-convert/uboot/raspberrypi/raspberrypi_arm64-2024.04.tar.gz)), it fails due to 403 Forbidden.

The 403 error seems to be a common pattern between APT and the arbitrary wget download for the bootloader, which makes me wonder if there’s a configuration issue with Mender’s download host rather than APT or `mender-convert` itself.

Thank you again for your help. I love the work you’ve done on `mender-convert`! The 64-bit support is greatly appreciated.

Edit: `apt` works on the live system, that part must be an issue with my build system

---

<div class="post-metadata">

### Author: ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)
#### Post date: [August 21, 2024, 9:21pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/4 "2024-08-21T21:21:13Z")

</div>

@duffy ah, my fork being involved is an important bit of information! Please try the [Commits · TheYoctoJester/mender-convert · GitHub](https://github.com/TheYoctoJester/mender-convert/commits/rpi64_wip_multiarch/) branch, as that one includes the bootloader binaries. Those are not officially released yet: in order for that to happen, first the patches to our `u-boot` fork must be merged, then the build scripts extended, then the binaries are actually up for download and the full pipeline is functional. Hence, the `rpi_debian_64bit` branch is the “sanitized” one for merging upstream, the “rpi64\_wip\_multiarch” is the one which should be working for local testing. Side effect, it also works on arm64 build hosts.

For the full story, feel free to check out [add support for Debian 12 "bookworm", 32bit and 64bit on Raspberry Pi 4 by TheYoctoJester · Pull Request #695 · mendersoftware/mender-convert · GitHub](https://github.com/mendersoftware/mender-convert/pull/695) and get involved eventually.

Maybe also @janaperic can share some news.

Side note: I will be away from the Mender Hub for the next two weeks roughly, for personal reasons. So I won’t be able to follow up timely from now on, sorry.

Greets,  
Josef

---

<div class="post-metadata">

### Author: ![duffy](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@duffy](https://hub.mender.io/u/duffy)
#### Post date: [August 22, 2024, 4:20pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/5 "2024-08-22T16:20:21Z")

</div>

That makes sense! Thank you for explaining. I’m new to the Mender ecosystem so I wasn’t aware of what the state of the art was until now.

Indeed, the WIP branch successfully downloads the 64-bit bootloader. Sadly, Debian 12 64-bit enters an infinite boot loop when run on a CM4 (eMMC). Technically this isn’t about the 403 issue anymore so I’m not sure if I should post this as a separate topic.

Have a safe break!

---

<div class="post-metadata">

### Author: ![duffy](https://avatars.discourse-cdn.com/v4/letter/d/82dd89/32.png) [@duffy](https://hub.mender.io/u/duffy)
#### Post date: [August 28, 2024, 2:08pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/6 "2024-08-28T14:08:16Z")

</div>

In case this is useful, after running the `rpi64_wip_multiarch` branch against the current 64-bit version of Raspberry Pi OS Lite (Debian 12), this is what the console shows each time before it reboots indefinitely:

```auto
Net: eth0: ethernet@7d580000
PCIe BRCM: link down
starting USB...
No working controllers found
Hit any key to stop autoboot: 0
Working FDT set to 2e4e6d00
libfdt fdt_path_offset() return FDT_ERR_BADSTRUCTURE
switch to partitions #0, OK
mmc0(part 0) is current device
25463296 bytes read in 1075ms (22.6 MiB/s)
Moving Image from 0x80000 to 0x200000, end=1b60000

```

---

<div class="post-metadata">

### Author: ![robgio](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/robgio/32/1760_2.png) [@robgio](https://hub.mender.io/u/robgio)
#### Post date: [September 11, 2024, 8:24pm UTC](https://hub.mender.io/t/downloads-mender-io-403-forbidden/7129/7 "2024-09-11T20:24:48Z")

</div>

> [@TheYoctoJester](#):
>
> The APT-based instructions at [Downloads | Mender documentation](https://docs.mender.io/downloads#install-using-the-apt-repository) and repos definitely should work. Possibly @robgio can give it a short cross check?

I’ve checked and all is working fine. Do you have a specific command that is failing, to try to reproduce it?

Thanks
