Skip to content

Commit be5e50c

Browse files
committed
The base ubuntu:20.04 image does not have the necessary CA certificates to verify the SSL certificate of the internal mirror mirror.bazel.build via HTTPS. Even though the sed
command replaced http://archive.ubuntu.com with http://mirror.bazel.build, the apt configuration or the mirror itself was likely redirecting to HTTPS, which then failed. I have updated buildscripts/grpc-java-artifacts/Dockerfile.multiarch.base to ensure it uses HTTP for the mirror.
1 parent d629d99 commit be5e50c

1 file changed

Lines changed: 7 additions & 3 deletions

File tree

buildscripts/grpc-java-artifacts/Dockerfile.multiarch.base

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,8 @@
1-
FROM ubuntu:18.04
1+
FROM ubuntu:20.04
2+
3+
# Redirect to the internal mirror to bypass the Kokoro network block
4+
# We use http instead of https because the base image lacks certificates to verify mirror.bazel.build
5+
RUN sed -i 's|http://archive.ubuntu.com/ubuntu/|http://mirror.bazel.build/archive.ubuntu.com/ubuntu/|g' /etc/apt/sources.list
26

37
RUN export DEBIAN_FRONTEND=noninteractive && \
48
apt-get update && \
@@ -9,12 +13,12 @@ RUN export DEBIAN_FRONTEND=noninteractive && \
913
curl \
1014
g++-aarch64-linux-gnu \
1115
g++-powerpc64le-linux-gnu \
12-
openjdk-8-jdk \
16+
g++-s390x-linux-gnu \
17+
openjdk-11-jdk \
1318
pkg-config \
1419
&& \
1520
rm -rf /var/lib/apt/lists/*
1621

1722
RUN curl -Ls https://github.com/Kitware/CMake/releases/download/v3.26.3/cmake-3.26.3-linux-x86_64.tar.gz | \
1823
tar xz -C /var/local
1924
ENV PATH /var/local/cmake-3.26.3-linux-x86_64/bin:$PATH
20-

0 commit comments

Comments
 (0)