From bfa65efc743046118bb6a27c12aa08c4f2efd1f5 Mon Sep 17 00:00:00 2001 From: Scott Little Date: Mon, 24 Jul 2023 15:32:25 -0400 Subject: [PATCH] Update the root certificates of the Debian build containers mirror.starlingx.cengn.ca will only authenticate against the latest certificates. Signed-off-by: Scott Little Change-Id: I9ea940edb529cb8bf44ab1b1433f9c3d62d7b225 --- stx/dockerfiles/stx-aptly.Dockerfile | 3 +++ stx/dockerfiles/stx-builder.Dockerfile | 3 +++ stx/dockerfiles/stx-lat-tool.Dockerfile | 3 +++ stx/dockerfiles/stx-pkgbuilder.Dockerfile | 6 +++++- 4 files changed, 14 insertions(+), 1 deletion(-) diff --git a/stx/dockerfiles/stx-aptly.Dockerfile b/stx/dockerfiles/stx-aptly.Dockerfile index d4e659194..9f7328a1b 100644 --- a/stx/dockerfiles/stx-aptly.Dockerfile +++ b/stx/dockerfiles/stx-aptly.Dockerfile @@ -33,6 +33,9 @@ MAINTAINER mark.asselstine@windriver.com COPY --from=builder /go/nginx_signing.key nginx_signing.key +# Update certificates +RUN apt-get -q -y update && apt-get -y install --no-install-recommends ca-certificates && update-ca-certificates + # Add Nginx repository and install required packages RUN apt-get -q update && apt-get -y install gnupg2 && \ echo "deb http://nginx.org/packages/debian/ bullseye nginx" > /etc/apt/sources.list.d/nginx.list && \ diff --git a/stx/dockerfiles/stx-builder.Dockerfile b/stx/dockerfiles/stx-builder.Dockerfile index 1df34b90e..e6903e0bd 100644 --- a/stx/dockerfiles/stx-builder.Dockerfile +++ b/stx/dockerfiles/stx-builder.Dockerfile @@ -21,6 +21,9 @@ RUN echo "deb-src http://deb.debian.org/debian bullseye main" >> /etc/apt/source echo "deb-src http://deb.debian.org/debian buster main" >> /etc/apt/sources.list && \ echo "deb http://deb.debian.org/debian bullseye contrib" >> /etc/apt/sources.list +# Update certificates +RUN apt-get -y update && apt-get -y install --no-install-recommends ca-certificates && update-ca-certificates + # Download required dependencies by mirror/build processes. RUN apt-get update && apt-get install --no-install-recommends -y \ bzip2 \ diff --git a/stx/dockerfiles/stx-lat-tool.Dockerfile b/stx/dockerfiles/stx-lat-tool.Dockerfile index 4ce98fbda..5bd258480 100644 --- a/stx/dockerfiles/stx-lat-tool.Dockerfile +++ b/stx/dockerfiles/stx-lat-tool.Dockerfile @@ -18,6 +18,9 @@ MAINTAINER Chen Qi ARG LAT_BINARY_RESOURCE_PATH=http://mirror.starlingx.cengn.ca/mirror/lat-sdk/lat-sdk-20230510 +# Update certificates +RUN apt-get -y update && apt-get -y install --no-install-recommends ca-certificates && update-ca-certificates + # Install necessary packages RUN apt-get -y update && apt-get --no-install-recommends -y install \ openssh-client \ diff --git a/stx/dockerfiles/stx-pkgbuilder.Dockerfile b/stx/dockerfiles/stx-pkgbuilder.Dockerfile index 6a43ab77b..0c11c1105 100644 --- a/stx/dockerfiles/stx-pkgbuilder.Dockerfile +++ b/stx/dockerfiles/stx-pkgbuilder.Dockerfile @@ -15,8 +15,12 @@ FROM debian:bullseye RUN echo "deb-src http://deb.debian.org/debian bullseye main" >> /etc/apt/sources.list -# Download required dependencies by mirror/build processes. ARG DEBIAN_FRONTEND=noninteractive + +# Update certificates +RUN apt-get -y update && apt-get -y install --no-install-recommends ca-certificates && update-ca-certificates + +# Download required dependencies by mirror/build processes. RUN apt-get update && apt-get install --no-install-recommends -y \ build-essential \ live-build \