Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

apt update fails in arm32v7/httpd:2.4.33 image #507

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

goooseman
Copy link

After runnnig apt-get update I got the follwoing error:

W: Failed to fetch http://deb.debian.org/debian/dists/jessie-updates/InRelease  Unable to find expected entry 'main/binary-armhf/Packages' in Release file (Wrong sources.list entry or malformed file)

W: Failed to fetch http://deb.debian.org/debian/dists/jessie-backports/main/binary-armhf/Packages  404  Not Found

E: Some index files failed to download. They have been ignored, or old ones used instead.

Some of the repos are not maintained anymore.

But we can bypass the problem by returning true if this happens.

@no1xsyzy
Copy link
Contributor

no1xsyzy commented May 4, 2019

I've tried debian:jessie-20190326 in the playground and it just never try to access the URLs you've posted.
Clipboard01
Make sure you are not MITM-ed and you have the latest debian:8 image.

@goooseman
Copy link
Author

debian:jessie-20190326 is OK, but arm32v7/httpd:2.4.33 which is used to build webui image from, is failing in sandbox.

I've ran following commands:

docker run -it arm32v7/httpd:2.4.33 bash 
apt update

And here is the output:

Screenshot from 2019-05-06 11-45-30

@no1xsyzy
Copy link
Contributor

no1xsyzy commented May 6, 2019

Sorry I didn't notice that it is using the seperate stage build (or whatever it is callled).
I think it better to switch to the latest version of httpd image like 2.4.39, since it should contain some fixes.
For example, until httpd:2.4.37, apt-get --version shows the version of apt is 1.4.8, which should be vulnerable to CVE-2019-3462.

I don't have ARM platform in hand. Please test build with httpd:2.4.39 and revert your last commit and create a new commit fixing the FROM.

@goooseman
Copy link
Author

Sorry for the delay.

I've checked: httpd:2.4.39 works ok.

I've changed my PR.

@no1xsyzy
Copy link
Contributor

Good job!
@anthonyraymond @ziahamza I have finished my review (though I forgot to start it as a review :P ).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants