search

adoptium / installer

Installer scripts for Eclipse Temurin binaries
Apache License 2.0
149 stars 75 forks source link

Adoptium Temurin deb repos appear to be broken due to Javascript requirement. #729

Closed ppanon2022 closed 1 year ago

ppanon2022 commented 1 year ago

I'm trying to use the Adoptium Temurin deb repo with the SUSE Uyuni patch management and creating a custom channel + repo. More information at https://github.com/uyuni-project/uyuni/issues/7458

To summarize: 1) trying to get a file in the repo like https://packages.adoptium.net/ui/native/deb/dists/jammy/InRelease with wget or curl should return the file, not an html page complaining that Javascript isn't working. It's a deb repo and the tools using it shouldn't need to have Javascript to display a logo that an automated job doesn't care about. That requirement makes absolutely no sense for that content. If there's a default CSS which is causing that, it should be disabled for that whole repo tree.

# wget -qO - https://packages.adoptium.net/ui/native/deb/dists/jammy/Release
<!doctype html><html lang=en><head><meta charset=utf-8><meta http-equiv=X-UA-Compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1"><meta name=importmap-type content=systemjs-importmap><link rel=apple-touch-icon sizes=180x180 href=./apple-touch-icon.png><link rel=icon type=image/png sizes=32x32 href=./favicon-32x32.png><link rel=icon type=image/png sizes=16x16 href=./favicon-16x16.png><link rel=mask-icon href=./safari-pinned-tab.svg color=#f5f5f2><link rel="shortcut icon" href=./favicon.ico><link rel=stylesheet type=text/css href=/ui/webapp/css/vendorStyles.css><link rel=stylesheet type=text/css href=/ui/webapp/css/application.css><script type=systemjs-importmap src=/ui/imports-map/imports.json></script><script src=/ui/externals/import-map-overrides/dist/import-map-overrides.js></script><script src=/ui/externals/systemjs/dist/system.min.js></script><script src=/ui/externals/systemjs/dist/extras/amd.min.js></script><script src=/ui/externals/systemjs/dist/extras/named-exports.min.js></script><link rel=preload href=/ui/externals/vue/dist/vue.min.js as=script><link rel=preload href=/ui/externals/vue-router/dist/vue-router.min.js as=script><link rel=preload href=/ui/externals/jfrog-ui-essentials/dist/jfrog-ui-essentials.umd.min.js as=script><link rel=preload href=/ui/externals/single-spa/lib/umd/single-spa.min.js as=script><base href=/ui/ ><title>JFrog</title><style>@keyframes heartbeatOut{from{opacity:1}50%{opacity:0;transform:scale(.8)}to{opacity:0;transform:scale(.8)}}@keyframes heartbeat{from{transform:scale3d(1,1,1)}50%{transform:scale3d(1.15,1.15,1.15)}to{transform:scale3d(1,1,1)}}.pounding-heart-container{display:none;align-items:center;justify-content:center;position:absolute;left:0;right:0;top:0;bottom:0;z-index:9999999999;background:linear-gradient(132.49deg,#414857 14.17%,#252831 83.36%)}.pounding-heart-container.show-splash{display:flex}.logo{width:130px;-webkit-backface-visibility:hidden;-ms-transform:translateZ(0);-webkit-transform:translateZ(0);transform:translateZ(0)}.logo.pulse{animation:heartbeat 1.7s infinite}.logo.zoom-out{animation:heartbeatOut 150ms forwards}</style><link href=/ui/css/app.db6f951f.css rel=preload as=style><link href=/ui/css/chunk-vendors.bbf97627.css rel=preload as=style><link href=/ui/js/app.96a6aa31.js rel=preload as=script><link href=/ui/js/chunk-vendors.b10e22f6.js rel=preload as=script><link href=/ui/js/preloader.948ab2a1.js rel=preload as=script><link href=/ui/css/chunk-vendors.bbf97627.css rel=stylesheet><link href=/ui/css/app.db6f951f.css rel=stylesheet></head><body><div class="pounding-heart-container show-splash"><img class="logo pulse" src=/ui/img/jfrog.8f770bff.svg></div><noscript><strong>We're sorry but jfrog webapp doesn't work properly without JavaScript enabled. Please enable it to continue.</strong></noscript><div id=app></div><script src=/ui/js/chunk-vendors.b10e22f6.js></script><script src=/ui/js/app.96a6aa31.js></script><script src=/ui/js/preloader.948ab2a1.js></script></body></html>

2) If I try to get the file with a browser and verify it with the Adoptium key, there seems to be something wrong with the signature on the InRelease file.

# gpg --verify --homedir /var/lib/spacewalk/gpgdir InRelease
gpg: WARNING: unsafe permissions on homedir '/var/lib/spacewalk/gpgdir'
gpg: Signature made Fri Sep  1 06:16:28 2023 PDT
gpg:                using RSA key 843C48A565F8F04B
gpg: BAD signature from "Adoptium GPG Key (DEB/RPM Signing Key) <temurin-dev@eclipse.org>" [unknown]
karianna commented 1 year ago

@gdams susepct JFrog config issue here, can you reach out?

gdams commented 1 year ago

@ppanon2022 you're making an http request to an artifactory UI page (see the /ui path in your request). The correct path should be: https://packages.adoptium.net/artifactory/deb/dists/jammy/Release

For instructions on using our installers please see https://adoptium.net/installation/linux/