search

ucphhpc / docker-migrid

Containerized MiG
GNU General Public License v2.0
3 stars 7 forks source link

Build error on v1.0.7 with centos7 #61

Closed jonasbardino closed 2 months ago

jonasbardino commented 2 months ago

For the record we started seeing certificate verification errors for basic pip commands during centos7 builds, which crashed the build. It looks like the old distro default pip package in CentOS7 can no longer validate the python package index host certificates with the default CA certificate chain.

The result was that sooner or later during the build a pip install command would crash the build with an error like:

Could not fetch URL https://pypi.python.org/simple/paramiko/: There was a problem confirming the ssl certificate: [SSL:CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) - skipping

or whatever package would first trigger it.

jonasbardino commented 2 months ago

We fixed the issue by explicitly pointing pip to the installed system ca-certificates as described in: https://github.com/ucphhpc/docker-migrid/commit/a5973c1c620ace7f90e288b3abfd01ecd26c306c

This issue was also reported/confirmed by AU in the meantime. Thanks :+1: