Bug#878759: (pas d'objet)
Indeed checksum verifycation does not work when vagrant box add refers
to a cloud based box.
it seems the checksum should be embedded in the box metadata.
We probably need to improve the build process here.
In the meantime, you can donwload the box the boxes via wget, and add
them locally as a workaround, ie:
$ vagrant box add --name debian/stretch64 --provider virtualbox
--checksum-type sha256 virtualbox.box
==> box: Box file was not detected as metadata. Adding it directly...
==> box: Adding box 'debian/stretch64' (v0) for provider: virtualbox
box: Unpacking necessary files from:
box: Calculating and comparing box checksum...
The checksum of the downloaded box did not match the expected
value. Please verify that you have the proper URL setup and that
you're downloading the proper file.
here the box is compared against the expected checksum and fails in case