Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ca-certificates issue on buster docker builds #659

Open
mdsketch opened this issue Dec 21, 2022 · 0 comments
Open

Ca-certificates issue on buster docker builds #659

mdsketch opened this issue Dec 21, 2022 · 0 comments

Comments

@mdsketch
Copy link

mdsketch commented Dec 21, 2022 •
edited
Loading

I am having an issue that is fixed by the solution for #424
I'm running a docker build of the Buster branch with a CI job that started failing recently, the fix was to add 40f67ce from the bullseye branch to the buster branch. It now completes fine.
It also works if I manually install ca-certificates in the chroot.

If this is a fix then we should add 40f67ce to the buster branch as well. Let me know and I'll open a PR.

error log:

[00:12:42] Begin /pi-gen/stage1/03-install-packages/00-packages
Reading package lists...

Building dependency tree...

Reading state information...

The following additional packages will be installed:
  alsa-utils busybox crda device-tree-compiler initramfs-tools
  initramfs-tools-core iw klibc-utils libasound2 libasound2-data
  libfftw3-single3 libfribidi0 libgomp1 libklibc libnewt0.52 libnl-3-200
  libnl-genl-3-200 libparted2 libsamplerate0 libslang2 linux-base lua5.1
  parted pigz psmisc triggerhappy whiptail wireless-regdb
Suggested packages:
  bash-completion libasound2-plugins libfftw3-bin libfftw3-dev libparted-dev
  libparted-i18n parted-doc
The following NEW packages will be installed:
  alsa-utils busybox crda device-tree-compiler initramfs-tools
  initramfs-tools-core iw klibc-utils libasound2 libasound2-data
  libfftw3-single3 libfribidi0 libgomp1 libklibc libnewt0.52 libnl-3-200
  libnl-genl-3-200 libparted2 libraspberrypi-bin libraspberrypi0
  libsamplerate0 libslang2 linux-base lua5.1 parted pigz psmisc raspi-config
  triggerhappy whiptail wireless-regdb
0 upgraded, 31 newly installed, 0 to remove and 0 not upgraded.
Need to get 6797 kB of archives.
After this operation, 18.3 MB of additional disk space will be used.
Get:1 http://archive.raspberrypi.org/debian buster/main armhf libasound2-data all 1.1.8-1+rpt2 [60.0 kB]
Get:3 http://archive.raspberrypi.org/debian buster/main armhf libasound2 armhf 1.1.8-1+rpt2 [303 kB]
Get:5 http://archive.raspberrypi.org/debian buster/main armhf alsa-utils armhf 1.1.8-2+rpt1 [1010 kB]
Err:2 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf pigz armhf 2.4-1
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:7 http://archive.raspberrypi.org/debian buster/main armhf wireless-regdb all 2018.05.09-0~rpt1 [11.8 kB]
Get:8 http://archive.raspberrypi.org/debian buster/main armhf libraspberrypi0 armhf 1:1.20220308~buster-1 [847 kB]
Err:4 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libslang2 armhf 2.3.2-2
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:9 http://archive.raspberrypi.org/debian buster/main armhf libraspberrypi-bin armhf 1:1.20220308~buster-1 [342 kB]
Get:10 http://archive.raspberrypi.org/debian buster/main armhf raspi-config all 20210212 [28.0 kB]
Err:6 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libnewt0.52 armhf 0.52.20-8
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:11 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf whiptail armhf 0.52.20-8
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:12 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf libgomp1 armhf 8.3.0-6+rpi1 [64.3 kB]
Err:13 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libfftw3-single3 armhf 3.3.8-2
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:14 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libsamplerate0 armhf 0.1.9-2
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:15 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf busybox armhf 1:1.30.1-4
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:16 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libnl-3-200 armhf 3.4.0-1
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:17 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libnl-genl-3-200 armhf 3.4.0-1
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:18 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf iw armhf 5.0.1-1
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:19 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf crda armhf 3.18-1
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Err:20 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf device-tree-compiler armhf 1.4.7-4
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:21 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf libklibc armhf 2.0.6-1+rpi1+deb10u1 [52.8 kB]
Get:22 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf klibc-utils armhf 2.0.6-1+rpi1+deb10u1 [87.1 kB]
Get:23 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf initramfs-tools-core all 0.133+deb10u1 [99.2 kB]
Err:24 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf linux-base all 4.6
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:25 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf initramfs-tools all 0.133+deb10u1 [69.7 kB]
Get:26 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf libfribidi0 armhf 1.0.5-3.1+deb10u2 [62.5 kB]
Err:27 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf libparted2 armhf 3.2-25
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:28 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf lua5.1 armhf 5.1.5-8.1+b1 [75.5 kB]
Err:29 https://mirrors.switch.ca/raspbian/raspbian buster/main armhf parted armhf 3.2-25
  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
Get:30 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf psmisc armhf 23.2-1+deb10u1 [121 kB]
Get:31 http://mirror.pit.teraswitch.com/raspbian/raspbian buster/main armhf triggerhappy armhf 0.5.0-1 [29.5 kB]
WFetched 3264 kB in 7s (455 kB/s)
: https://mirrors.switch.ca/raspbian/raspbian/pool/main/p/pigz/pigz_2.4-1_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/s/slang2/libslang2_2.3.2-2_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/n/newt/libnewt0.52_0.52.20-8_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/n/newt/whiptail_0.52.20-8_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/f/fftw3/libfftw3-single3_3.3.8-2_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/libs/libsamplerate/libsamplerate0_0.1.9-2_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/b/busybox/busybox_1.30.1-4_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/libn/libnl3/libnl-3-200_3.4.0-1_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/libn/libnl3/libnl-genl-3-200_3.4.0-1_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/i/iw/iw_5.0.1-1_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/c/crda/crda_3.18-1_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/d/device-tree-compiler/device-tree-compiler_1.4.7-4_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/l/linux-base/linux-base_4.6_all.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/p/parted/libparted2_3.2-25_armhf.deb: No system certificates available. Try installing ca-certificates.
W: https://mirrors.switch.ca/raspbian/raspbian/pool/main/p/parted/parted_3.2-25_armhf.deb: No system certificates available. Try installing ca-certificates.
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/p/pigz/pigz_2.4-1_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/s/slang2/libslang2_2.3.2-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/n/newt/libnewt0.52_0.52.20-8_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/n/newt/whiptail_0.52.20-8_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/f/fftw3/libfftw3-single3_3.3.8-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/libs/libsamplerate/libsamplerate0_0.1.9-2_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/b/busybox/busybox_1.30.1-4_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/libn/libnl3/libnl-3-200_3.4.0-1_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/libn/libnl3/libnl-genl-3-200_3.4.0-1_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/i/iw/iw_5.0.1-1_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/c/crda/crda_3.18-1_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/d/device-tree-compiler/device-tree-compiler_1.4.7-4_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/l/linux-base/linux-base_4.6_all.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/p/parted/libparted2_3.2-25_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Failed to fetch https://mirrors.switch.ca/raspbian/raspbian/pool/main/p/parted/parted_3.2-25_armhf.deb  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 209.115.181.106 443]
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
@mdsketch mdsketch changed the title Ca-certificates issue Ca-certificates issue on buster docker builds Dec 21, 2022
@mdsketch mdsketch mentioned this issue Jan 9, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mdsketch