Skip to content

Update Jessie apt repo config & sources.list URLs - #41

Open
JedMeister wants to merge 1 commit into
sciapp:developfrom
JedMeister:fix-openjdk7
Open

JedMeister wants to merge 1 commit into
sciapp:developfrom
JedMeister:fix-openjdk7

Conversation

@JedMeister

Copy link
Copy Markdown

This PR has been verified against real hardware (Supermicro A1SRi-2758F, AST2400 BMC):

  • image builds successfully.
  • built container launches to a working console within a Firefox (140.15 ESR) window.

Primary/initial problem:
Building the openjdk-7 image fails at apt-get update as Debian 8 "jessie" is EOL and the default package indexes now 404 from deb.debian.org/security.debian.org:

[...]

Err http://deb.debian.org jessie/main amd64 Packages
  404  Not Found [IP: 151.101.130.132 80]
E: Some index files failed to download.

[...]

Cause:
Apt repos of EOL Debian releases are moved from live mirrors to archive.debian.org.

Fix:
Update apt sources.list URLs (archive.debian.org main + debian-security jessie/updates).

Additional, non obvious update/fix 1:
Jessie's archived Release files are past their Valid-Until date, so apt rejects them; check-valid-until=no (included per sources list entry) disables this check.

Additional, non obvious update/fix 2:
Jessie's archived repos doesn't authenticate cleanly against the keys within the base image; trusted=yes (included per sources list entry) disables this check.

NOTE: This is the simplest "fix" but is also a potential security risk (skips signature verification of apt repos accessed via vanilla http). There are other alternative paths to achieve the same ends which are arguably more secure (e.g. bootstrapping debian-archive-keyring, downloading relevant key/s from keyserver, probably others). If desired I am open to implementing an alternate preferred workaround - just ask. 😁

Additional, non obvious update/fix 3:
jessie-updates apt repo was dropped as it was not carried to the archive so is removed rather than updated (it was one of the original 404s).

Related issue - out of scope:
As Debian Stretch is also EOL a similar adjustment is likely required for Dockerfile_openjdk-8 but not included here.

@Jeff-liaojinfu

Jeff-liaojinfu commented Sep 8, 2026 via email

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants