From abb4723977a51b4857482f8a28cd1e53d4274681 Mon Sep 17 00:00:00 2001 From: Michael Kriese Date: Mon, 19 Oct 2026 17:30:01 +0200 Subject: [PATCH 1/3] ci: debug the apt proxy on ubuntu 26.04 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/debug-apt-proxy.yml | 57 +++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 .github/workflows/debug-apt-proxy.yml diff --git a/.github/workflows/debug-apt-proxy.yml b/.github/workflows/debug-apt-proxy.yml new file mode 100644 index 0000000000..63956e6747 --- /dev/null +++ b/.github/workflows/debug-apt-proxy.yml @@ -0,0 +1,57 @@ +name: debug-apt-proxy + +# temporary: why build containers can't reach the apt proxy on ubuntu-26.04 (#7487) +on: + pull_request: + +permissions: + contents: read + +jobs: + debug: + runs-on: ${{ matrix.os }} + timeout-minutes: 20 + + strategy: + fail-fast: false + matrix: + os: + - ubuntu-24.04 + - ubuntu-26.04 + + steps: + - name: ⚙️ Setup + uses: containerbase/internal-tools/setup@67555b4b6a55b314657264b90d6d01116a4e7b2b # v5.1.1 + timeout-minutes: 10 + with: + node: false + apt-proxy: true + + - name: Check system + uses: ./.github/actions/check + + - name: Listening ports + run: sudo ss -ltnp + + - name: squid-deb-proxy service + run: | + systemctl status squid-deb-proxy --no-pager || true + sudo journalctl -u squid-deb-proxy --no-pager -n 50 || true + sudo grep -v '^#' /etc/squid-deb-proxy/squid-deb-proxy.conf | grep -v '^$' || true + + - name: Firewall rules + run: | + sudo nft list ruleset || true + sudo iptables -S || true + sudo ufw status verbose || true + + - name: Reach the proxy from the host + run: | + for host in 127.0.0.1 172.17.0.1; do + curl -sS -m 10 -o /dev/null -w "${host}: %{http_code}\n" -x "http://${host}:8000" http://archive.ubuntu.com/ubuntu/dists/noble/InRelease || true + done + + - name: Reach the proxy from a container + run: | + docker run --rm --add-host=host.docker.internal:host-gateway ubuntu:24.04 \ + bash -c 'timeout 10 bash -c " Date: Mon, 19 Oct 2026 17:30:22 +0200 Subject: [PATCH 2/3] ci: skip the build for the debug workflow Co-Authored-By: Claude Opus 5.5 --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3adf251de5..3a4614bbd3 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -66,7 +66,7 @@ jobs: -e '^\.markdownlint-cli2\.jsonc$' \ -e '^\.github/zizmor\.yml$' \ -e '^tools/(audit-sarif|lint-docs|lint-versions)\.ts$' \ - -e '^\.github/workflows/(pnpm-audit|trivy)\.yml$' \ + -e '^\.github/workflows/(pnpm-audit|trivy|debug-apt-proxy)\.yml$' \ -e '^vitest\.config\.ts$' \ -e '^__mocks__/' \ -e '^codecov\.yml$' \ From 6a92ebc8e0e06da62ffcde431e5482b0602c8d92 Mon Sep 17 00:00:00 2001 From: Michael Kriese Date: Mon, 19 Oct 2026 17:30:30 +0200 Subject: [PATCH 3/3] Revert "ci: skip the build for the debug workflow" This reverts commit b91d09417db14d6a44e29ce65f75632b5b0be1c4. --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3a4614bbd3..3adf251de5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -66,7 +66,7 @@ jobs: -e '^\.markdownlint-cli2\.jsonc$' \ -e '^\.github/zizmor\.yml$' \ -e '^tools/(audit-sarif|lint-docs|lint-versions)\.ts$' \ - -e '^\.github/workflows/(pnpm-audit|trivy|debug-apt-proxy)\.yml$' \ + -e '^\.github/workflows/(pnpm-audit|trivy)\.yml$' \ -e '^vitest\.config\.ts$' \ -e '^__mocks__/' \ -e '^codecov\.yml$' \