Repository navigation
ci: use archive.debian.org for the debian:11 jobs - #1964
Open
Martini991 wants to merge 1 commit into
Open
Martini991 wants to merge 1 commit into
Martini991 wants to merge 1 commit into
Conversation
Debian 11 is past end of support: deb.debian.org still lists the bullseye-security packages, but downloading them returns 404, so the debian:11 jobs fail. Write the image's sources.list with archive.debian.org entries, as deprecated.yaml already does for debian:10.
|
Note Reviewing the latest changes on this PR — this may take a few minutes. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The
debian:11jobs inci.yamlfail onmaster(e.g. this run). Debian 11 is past end of support and its security archive has moved to archive.debian.org: deb.debian.org still serves thebullseye-securityindex, but the package files it lists return 404 (e.g.libnghttp2-14_1.43.0-1+deb11u3_amd64.deb). apt then fails to install the prerequisites, falls back to Debian's ownnodejs12, and cannot findnsolid.Change
On
debian:11, before running the setup script, overwrite/etc/apt/sources.listwith thebullseye,bullseye-updatesandbullseye-securityentries on archive.debian.org, asdeprecated.yamlalready does fordebian:10. The archive's Release files are still signed and have noValid-Until, so no extra apt options are needed.Why the entries are written out instead of a
sedfrom deb.debian.org to archive.debian.org:sources.listform documented in archive.debian.org/debian/README and the existingdebian:10step.debian:11image changes its sources (another mirror host, or deb822debian.sources), asedwould silently match nothing and the job would fail again with 404s.The entries use
http://because the image has noca-certificatesuntil the setup script installs them; apt still verifies every download against the signed Release files.This also fixes the
debian:11failures on #1962 and #1963.Testing
Ran the deb job steps in a
debian:11container, with this step (taken fromci.yaml) and the scripts frommaster:nodejsnsolidNo 404s and no apt errors. Without the change the same run fails with 404s from bullseye-security.
Prepared with the help of Claude Code; I reviewed the change and ran the tests above.