Skip to content

Commit 52b4a80

Browse files
Fix base image build (#624)
Fix base image build I don't know what's wrong, it looks like OpenSSL on Fedora 41 ppc64le doesn't support SHA384 (but I'm not able to reproduce it outside of Github Actions environment): $ openssl s_client -servername mirrors.fedoraproject.org -connect mirrors.fedoraproject.org:443 < /dev/null Connecting to 140.211.169.196 depth=2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 verify return:1 depth=1 C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 verify error:num=7:certificate signature failure verify return:1 depth=1 C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1 verify return:1 depth=0 C=US, ST=North Carolina, L=Raleigh, O=Red Hat, Inc., CN=*.fedoraproject.org verify error:num=7:certificate signature failure verify return:1 depth=0 C=US, ST=North Carolina, L=Raleigh, O=Red Hat, Inc., CN=*.fedoraproject.org verify return:1 Disabling certificate verification is an ugly workaround, but it makes it work: https://github.com/packit/deployment/actions/runs/12256772166 Reviewed-by: Matej Focko
2 parents 3916a5a + efc0367 commit 52b4a80

File tree

1 file changed

+3
-9
lines changed

1 file changed

+3
-9
lines changed

.github/workflows/base-image-rebuild.yml

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -18,18 +18,10 @@ jobs:
1818
name: Build and push image
1919
runs-on: ubuntu-latest
2020
strategy:
21-
fail-fast: false
2221
matrix:
2322
include:
2423
- containerfile: containers/Containerfile
2524
tags: "fedora latest"
26-
archs: "amd64"
27-
- containerfile: containers/Containerfile
28-
tags: "fedora latest"
29-
archs: "arm64"
30-
- containerfile: containers/Containerfile
31-
tags: "fedora latest"
32-
archs: "ppc64le"
3325

3426
steps:
3527
- uses: actions/checkout@v3
@@ -46,7 +38,9 @@ jobs:
4638
containerfiles: ${{ matrix.containerfile }}
4739
image: base
4840
tags: ${{ matrix.tags }}
49-
archs: ${{ matrix.archs }}
41+
# for some reason building ppc64le image fails on F41 OpenSSL
42+
# not being able to verify certificates, keep it disabled for now
43+
archs: amd64, arm64
5044
# Uncomment once we stop using oc cluster up for tests
5145
# oci: true
5246

0 commit comments

Comments
 (0)