search

ros-infrastructure / ros_buildfarm

ROS buildfarm based on Docker
Apache License 2.0
81 stars 96 forks source link

Install ca-certificates before processing repository keys #1062

Closed j-rivero closed 3 months ago

j-rivero commented 3 months ago

Detected the problem while installing the packages.o.o key in testing for the Jammy distribution, not happening on Noble.

https://citest.build.osrfoundation.org/view/ci/job/ci__colcon_gpu_any-manual_ubuntu_jammy_amd64/4/console

....
 > [18/21] RUN python3 -u /tmp/wrapper_scripts/apt.py update-install-clean -q -y git python3-apt python3-empy python3-yaml:
235.0 W: https://packages.osrfoundation.org/gazebo/ubuntu-stable/dists/jammy/InRelease: No system certificates available. Try installing ca-certificates.
235.0 W: http://repos.ros.org/repos/ros_bootstrap/dists/jammy/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
235.0 W: https://packages.osrfoundation.org/gazebo/ubuntu-stable/dists/jammy/InRelease: No system certificates available. Try installing ca-certificates.
235.0 W: https://packages.osrfoundation.org/gazebo/ubuntu-stable/dists/jammy/InRelease: No system certificates available. Try installing ca-certificates.
235.0 W: https://packages.osrfoundation.org/gazebo/ubuntu-stable/dists/jammy/InRelease: No system certificates available. Try installing ca-certificates.
235.0 W: Failed to fetch https://packages.osrfoundation.org/gazebo/ubuntu-stable/dists/jammy/InRelease  Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown.  Could not handshake: Error in the certificate verification. [IP: 52.52.171.73 443]

The certificate issuer is unknown for the vanilla Jammy system. I solved the problem by installing the ca-certificates before installing the packages.o.o repo.