Build Antrea UBI8 Docker image keeps failing

[tnqn]

Describe the bug

See https://github.com/antrea-io/antrea/actions/runs/9397341715/job/25880373846

#18 [stage-1 5/5] RUN rm -f /etc/yum.repos.d/* && mv /tmp/CentOS.repo /etc/yum.repos.d/CentOS.repo &&     curl https://www.centos.org/keys/RPM-GPG-KEY-CentOS-Official -o /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial &&     sed -i.bak "s/^manage_repos = .$/manage_repos = 0/g" /etc/rhsm/rhsm.conf &&     yum install /tmp/ovs-rpms/* -y && yum install epel-release -y &&     yum install iptables logrotate -y &&     mv /etc/logrotate.d/openvswitch /etc/logrotate.d/openvswitch-switch &&     sed -i "/rotate /a\    #size 100M" /etc/logrotate.d/openvswitch-switch &&     sed -i 's/^initsystem=.*$/initsystem="namespaces"/' /usr/libexec/ipsec/setup &&     rm /etc/rhsm/rhsm.conf.bak &&     rm -rf /tmp/* && yum clean all
#18 0.157   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
#18 0.157                                  Dload  Upload   Total   Spent    Left  Speed
#18 0.157 
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  1683  100  1683    0     0   4585      0 --:--:-- --:--:-- --:--:--  4585
#18 0.802 Updating Subscription Management repositories.
#18 0.802 Unable to read consumer identity
#18 0.804 
#18 0.804 This system is not registered with an entitlement server. You can use subscription-manager to register.
#18 0.804 
#18 1.090 CentOS-8-stream - AppStream                     152  B/s |  38  B     00:00    
#18 1.099 Error: Failed to download metadata for repo 'AppStream': Cannot prepare internal mirrorlist: No URLs in mirrorlist
#18 ERROR: process "/bin/sh -c rm -f /etc/yum.repos.d/* && mv /tmp/CentOS.repo /etc/yum.repos.d/CentOS.repo &&     curl https://www.centos.org/keys/RPM-GPG-KEY-CentOS-Official -o /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial &&     sed -i.bak \"s/^manage_repos = .$/manage_repos = 0/g\" /etc/rhsm/rhsm.conf &&     yum install /tmp/ovs-rpms/* -y && yum install epel-release -y &&     yum install iptables logrotate -y &&     mv /etc/logrotate.d/openvswitch /etc/logrotate.d/openvswitch-switch &&     sed -i \"/rotate /a\\    #size 100M\" /etc/logrotate.d/openvswitch-switch &&     sed -i 's/^initsystem=.*$/initsystem=\"namespaces\"/' /usr/libexec/ipsec/setup &&     rm /etc/rhsm/rhsm.conf.bak &&     rm -rf /tmp/* && yum clean all" did not complete successfully: exit code: 1
------
 > [stage-1 5/5] RUN rm -f /etc/yum.repos.d/* && mv /tmp/CentOS.repo /etc/yum.repos.d/CentOS.repo &&     curl https://www.centos.org/keys/RPM-GPG-KEY-CentOS-Official -o /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial &&     sed -i.bak "s/^manage_repos = .$/manage_repos = 0/g" /etc/rhsm/rhsm.conf &&     yum install /tmp/ovs-rpms/* -y && yum install epel-release -y &&     yum install iptables logrotate -y &&     mv /etc/logrotate.d/openvswitch /etc/logrotate.d/openvswitch-switch &&     sed -i "/rotate /a\    #size 100M" /etc/logrotate.d/openvswitch-switch &&     sed -i 's/^initsystem=.*$/initsystem="namespaces"/' /usr/libexec/ipsec/setup &&     rm /etc/rhsm/rhsm.conf.bak &&     rm -rf /tmp/* && yum clean all:

100  1683  100  1683    0     0   4585      0 --:--:-- --:--:-- --:--:--  4585
0.802 Updating Subscription Management repositories.
0.802 Unable to read consumer identity
0.804 
0.804 This system is not registered with an entitlement server. You can use subscription-manager to register.
0.804 
1.090 CentOS-8-stream - AppStream                     152  B/s |  38  B     00:00    
1.099 Error: Failed to download metadata for repo 'AppStream': Cannot prepare internal mirrorlist: No URLs in mirrorlist
------

[tnqn]

Maybe related to upstream repo change? @xliuxu do you have any idea?

[luolanzone]

Here is a potential fix: https://stackoverflow.com/questions/70926799/centos-through-a-vm-no-urls-in-mirrorlist
but I am wondering if we should backport the ubi base image change to v1.15 if there is no issue for ubi9?

[xliuxu]

https://blog.centos.org/2023/04/end-dates-are-coming-for-centos-stream-8-and-centos-linux-7/
Centos 8 is EOL on May 31, 2024.
I'm not sure if we can switch to RHEL 8 due to licensing reasons. If not, we may need to upgrade to UBI9 and Centos 9.

[luolanzone]

@tnqn @xliuxu any conclusion for this? maybe backport this PR #5737?

[tnqn]

Updating to UBI9 sounds good, is there any drawback? If not, I think we could backport #5737

[luolanzone]

Fixed by #6441 which backported two PRs #5737 and #6104 to release-1.15 to fix UBI build failure.