pingidentity / pingidentity-devops-getting-started

Ping Identity Devops Program
https://devops.pingidentity.com
Other
98 stars 135 forks source link

build problem on Ping Fedare - pingidentity-docker-builds project #557

Closed nunesigor closed 1 month ago

nunesigor commented 1 month ago

Ping Docker build scripts is failing on build Ping federate container.

To reproduce it: 1- Download the latest Ping Federate zip installation file. 2- Clone the pingidentity-docker-builds repository in your local machine 3- Move the zip installation to folder pingfederate/tmp inside the repository and rename the file to produt.zip 4- on folder ci_scripts run the file serial_build.sh passing the parameters version (-v) shim (-s) and jvm (-j) like example below: ./ci_scripts/serial_build.sh -p pingfederate -v 12.1.3 -s alpine:3.20.3 -j al11 5- See the error after create ping base container.

Expected result Creation of 4 containers: base, commom, jvm and ping federate

Error log below: ./pingidentity-docker-builds$ ./ci_scripts/serial_build.sh -p pingfederate -v 12.1.3 -s alpine:3.20.3 -j al11 ################################################################################

Cleaning containers and images ( CI_TAG = master-ab36 )

################################################################################ Deleted Images: untagged: pingidentity/pingbase:master-ab36-x86_64 deleted: sha256:ecbb6acd03a26c9295e1b06bdb381334b17cf7c7e0160f28cb02c672662692e2

Deleted build cache objects: w1kjyvp44xklf32isempajqej jykjc82dp8frarskr5nsxmgn1 hwuuzz4s66npjj9kqbf3o7j2d p6pat2fvwwr1yhsjm5g7bsqjq tpejhtmqww2rj7dgdv151mp63 73gktmu6r5hmidz8jvdofceot kc7bd8js8hr6slsptm8qf7j6d an05v3f0kgi0ey3k3ncgfgn05 xukrrgj3nle52ro9mtgen9nx9 i0i8kqgrlk7a7pyvq0riwx62d 53zmkyc8vov2o93iz9n7tksak rd5dnvrkmf5ws1dse43s0cya1 pfm8bzbpztmuaj7nx8lm4n28k bzxo0lcyql0tykfye8v718b2g

Total reclaimed space: 145.3kB ################################################################################

LOCAL FOUNDATION BUILD

################################################################################ ################################################################################

Building PING COMMON

################################################################################ [+] Building 2.4s (7/12) docker:default => [internal] load build definition from Dockerfile 0.1s => => transferring dockerfile: 1.28kB 0.0s => WARN: FromAsCasing: 'as' and 'FROM' keywords' casing do not match (line 17) 0.1s => WARN: InvalidDefaultArgInFrom: Default value for ARG ${DEPS}alpine:${LATEST_ALPINE_VERSION} results in empty or invalid base image name (line 17) 0.1s => [internal] load metadata for docker.io/library/alpine:3.20.3 1.1s => [auth] library/alpine:pull token for registry-1.docker.io 0.0s => [internal] load .dockerignore 0.1s => => transferring context: 2B 0.0s => [product-staging 1/5] FROM docker.io/library/alpine:3.20.3@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d 0.6s => => resolve docker.io/library/alpine:3.20.3@sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d 0.1s => => sha256:33735bd63cf84d7e388d9f6d297d348c523c044410f553bd878c6d7829612735 528B / 528B 0.0s => => sha256:91ef0af61f39ece4d6710e465df5ed6ca12112358344fd51ae6a3b886634148b 1.47kB / 1.47kB 0.0s => => sha256:43c4264eed91be63b206e17d93e75256a6097070ce643c5e8f0379998b44f170 3.62MB / 3.62MB 0.2s => => sha256:beefdbd8a1da6d2915566fde36db9db0b524eb737fc57cd1367effd16dc0d06d 1.85kB / 1.85kB 0.0s => => extracting sha256:43c4264eed91be63b206e17d93e75256a6097070ce643c5e8f0379998b44f170 0.1s => [internal] load build context 0.3s => => transferring context: 121.70kB 0.2s => ERROR [product-staging 2/5] RUN apk --no-cache --update add gnupg 0.4s

[product-staging 2/5] RUN apk --no-cache --update add gnupg: 0.290 fetch https://dl-cdn.alpinelinux.org/alpine/v3.20/main/x86_64/APKINDEX.tar.gz 0.339 283B9207007F0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:2091: 0.340 WARNING: fetching https://dl-cdn.alpinelinux.org/alpine/v3.20/main: Permission denied 0.340 fetch https://dl-cdn.alpinelinux.org/alpine/v3.20/community/x86_64/APKINDEX.tar.gz 0.369 283B9207007F0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:2091: 0.370 WARNING: fetching https://dl-cdn.alpinelinux.org/alpine/v3.20/community: Permission denied 0.370 ERROR: unable to select packages: 0.370 gnupg (no such package): 0.370 required by: world[gnupg]

2 warnings found (use docker --debug to expand):

PingDavidR commented 1 month ago

Thanks for submitting @nunesigor! We'll triage it here soon. In the meantime, it MIGHT be an issue with the alpine repositories (possibly transient), regarding a certificate that may have expired or something?

[product-staging 2/5] RUN apk --no-cache --update add gnupg: 0.290 fetch https://dl-cdn.alpinelinux.org/alpine/v3.20/main/x86_64/APKINDEX.tar.gz 0.339 283B9207007F0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:2091: 0.340 WARNING: fetching https://dl-cdn.alpinelinux.org/alpine/v3.20/main: Permission denied 0.340 fetch https://dl-cdn.alpinelinux.org/alpine/v3.20/community/x86_64/APKINDEX.tar.gz 0.369 283B9207007F0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:2091: 0.370 WARNING: fetching https://dl-cdn.alpinelinux.org/alpine/v3.20/community: Permission denied 0.370 ERROR: unable to select packages: 0.370 gnupg (no such package): 0.370 required by: world[gnupg]

PingDavidR commented 1 month ago

@nunesigor I just re-ran your command:

./ci_scripts/serial_build.sh -p pingfederate -v 12.1.3 -s alpine:3.20.3 -j al11

after grabbing the 12.1.3 zip and renaming it as we are instructed to do. Attached is the output from my run, which was successful.

It's looking like you may have hit a transient error around the gnupg package as I indicated above.

In hindsight, I probably should have used a different branch name that didn't include the text "build-fail" in it as all of my images ended up with that tag ;)

Would you mind trying again and reporting back? build_log.txt

PingDavidR commented 1 month ago

@nunesigor We are going to close this ticket at this time. If you have any further issues, feel free to reach out again, and we will help in any way possible.