[Bug] Modified signature on Grafana v11.4.0, unable to load the plugin and autodelete the gpx executable

[Theoooooo]

Describe the bug

Tried to installer the plugin on Grafana v11.4.0
Impossible to load the plugin due to modified signature error on Grafana inside a container

Steps to reproduce

Install Grafana v11.4.0 inside a docker running server
Tried to installed the plugin via the UI and via CMD
Impossible to make the plugin to load

I also don't have any restriction regarding outbound connectivity, eveyything is opened

Note: bugs will be fixed only if enough information provided to reproduce the issue

Sample Data

logger=plugins.signature t=2025-03-12T16:31:07.922534589+01:00 level=warn msg="Plugin file listed in the manifest was not found" plugin=yesoreyeram-infinity-datasource path=gpx_infinity_linux_amd64
logger=plugins.signature.validation t=2025-03-12T16:31:07.92259879+01:00 level=warn msg="Skipping loading plugin due to problem with signature" pluginId=yesoreyeram-infinity-datasource status=modified
logger=plugins.validation t=2025-03-12T16:31:07.92263969+01:00 level=error msg="Plugin validation failed" pluginId=yesoreyeram-infinity-datasource error="plugin 'yesoreyeram-infinity-datasource' has an modified signature"

Downloaded MANIFEST.txt

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

{
  "manifestVersion": "2.0.0",
  "signatureType": "grafana",
  "signedByOrg": "grafana",
  "signedByOrgName": "Grafana Labs",
  "plugin": "yesoreyeram-infinity-datasource",
  "version": "3.0.0",
  "time": 1741698268501,
  "keyId": "7e4d0c6a708866e7",
  "files": {
    "module.js.LICENSE.txt": "99c2a3e174dd5e46ac78787c5d7965079f788f7edf923e0868a3505826b0e34d",
    "LICENSE": "85fb2c20b586ef9dc00ee5c41140e1cd59fdded9a0b24a9054b04e9f0f6b2977",
    "CHANGELOG.md": "f26ea0e308f883bc62fd548f1565125279a690ff91fbb79cd66431ff3b73ca05",
    "img/slide-variables.png": "8ed0cd7b1ac00bd2c7fa6e72c513b678c39ba7d63030f06e8695cb1d352e3b34",
    "img/slide-rest-api.png": "cf72349768e0ccf19a856d86e97c8e67dcdadfcee49e73ae5acbe781c3ae0c79",
    "img/slide-series.png": "f7d523c39f9d4567974c37432f047e4e8944cb92dc2c9a4424757ce5e54dc3a7",
    "img/aws.jpg": "e682ccc794708fd3eb32a3fb5e2bcccd8ff3b54f30eba2086fd1b28a82020d81",
    "img/slide-features.png": "58aba3b2f2d73ee99945cba9746463f0039d8afb5366ed8d42db62145b914d0f",
    "img/icon.svg": "e498b00e1cc3c9e8b65a2b8320b7d170c6da61d424fe5f3f3fdf9963204449ae",
    "img/oauth-2-sm.png": "9945bb307d5545369d50381acc97d48b4a98433831f14e99eb839f0970a91258",
    "img/homepage-bg.svg": "97ec32b2c542bcb63b7fa7659e42a876a5b9ec00aef7a486f2dc41b83d7d9eb8",
    "README.md": "351dea529ec76dc9b396ef8f29d4ec36cab5ace16040f42142f0c58427ee3a7d",
    "module.js.map": "bbad95c79c2c386588e799d07f4a8d3785db08bed315eb90466a0fdb2ffe860e",
    "gpx_infinity_linux_amd64": "245edf81ae2c9b957610c1d0690e108c639d86887a70c790834117c1e49e55a0",
    "plugin.json": "a746d0b5abbd5676626e5727048eb1e5ca98d05dc6b2aa64d366fb81a8de8a6c",
    "module.js": "510b3282f544d7eab514c770e4e47b08293f5a1d46380bbcaf1fc9eeed1e8f27",
    "go_plugin_build_manifest": "9f1a90c5fdaceb29f5f9a7d242b20d3a5cf65d33ffad3e16ab827f45696e0ad1"
  }
}
-----BEGIN PGP SIGNATURE-----
Version: OpenPGP.js v4.10.11
Comment: https://openpgpjs.org

wrkEARMKAAYFAmfQNNwAIQkQfk0ManCIZucWIQTzOyW2kQdOhGNlcPN+TQxq
cIhm55gZAgkAKF78SxI6H5Wf8xkiiGZS6AbWhw+PLtoORYH0ifFIqdIP8cIz
f9qM+/aXDRt9z/2HiKpbR6TmLYlQsa3NmKSEguMCCQBkigjG/aIk9B7glBjr
WPFRyRqH/Mcap8LCv6VJpWoy5kbfYErBwz69eFiqLhVkN5ZcY0+NVuhMpnJh
56NGCmWU8A==
=jLH7
-----END PGP SIGNATURE-----

Screenshots

Version Details:

• Grafana version : v11.4.0
• Plugin version : v3.0.0

[Theoooooo]

As extra steps, i tried to remove the signature, then force the unsigned plugin to load but when restarting grafana, the plugin auto delete the gpx_infinity_linux_adm64 without any log