Mirror issue when building.

15 views
Skip to first unread message

Roger Oberholtzer

unread,
Dec 13, 2021, 2:22:51 AM12/13/21
to kiwi-...@googlegroups.com
I am having a problem that is not specifically a kiwi problem. But I
need to find a solution in kiwi. I am trying to build an image, but a
specific RPM always has a problem. Or at least it has for the last
couple days.I suspect that the problem is a local mirror that gets
used to retrieve the file. Confusingly, I can always access the RPM
outside kiwi (eg, in a browser), But in kiwi (zypper, I guess), it
always fails on one specific file.

In kiwi, how can I find out what mirror is actually being used? Then,
in kiwi, can I blacklist that mirror? It is probably someplace in
Stockholm, or at least in Sweden. But I do not know which is the
specific mirror that is causing the problem.

This is what always happens:

DEBUG: 12:15:58 | system: Retrieving:
proj-data-se-8.2.0-lp153.63.2.noarch.rpm [.done (2.4 MiB/s)]
DEBUG: 12:15:58 | system: Retrieving package
python-rpm-macros-20211209.3834c04-lp153.154.1.noarch (10/1664), 37.5
KiB ( 80.3 KiB unpacked)
DEBUG: 12:15:58 | system: Retrieving:
python-rpm-macros-20211209.3834c04-lp153.154.1.noarch.rpm [error]
DEBUG: 12:15:58 | system: Abort, retry, ignore? [a/r/i/...? shows all
options] (a): a
ERROR: 12:15:58 | KiwiInstallPhaseFailed: System package installation
failed: Download (curl) error for
'http://download.opensuse.org/repositories/Application:/Geo/openSUSE_Leap_15.3/noarch/python-rpm-macro
s-20211209.3834c04-lp153.154.1.noarch.rpm':
Error code: Curl error 60
Error message: SSL certificate problem: self signed certificate in
certificate chain

Problem occurred during or after installation or removal of packages:
Installation has been aborted as directed.
Please see the above error message for a hint.

INFO: 12:15:58 | Cleaning up SystemPrepare instance
DEBUG: 12:15:58 | EXEC: [mountpoint -q /result/build/image-root/var/cache/kiwi]




--
Roger Oberholtzer

Till Dörges

unread,
Dec 13, 2021, 3:15:50 AM12/13/21
to kiwi-...@googlegroups.com, Roger Oberholtzer
Am 13.12.21 um 08:22 schrieb Roger Oberholtzer:

> ERROR: 12:15:58 | KiwiInstallPhaseFailed: System package installation
> failed: Download (curl) error for
> 'http://download.opensuse.org/repositories/Application:/Geo/openSUSE_Leap_15.3/noarch/python-rpm-macro
> s-20211209.3834c04-lp153.154.1.noarch.rpm':
> Error code: Curl error 60
> Error message: SSL certificate problem: self signed certificate in
> certificate chain

Sounds similar to problem reported a few months ago on this list. In short, this
should help:

--- snip ---
<packages type="bootstrap">
...
<package name="ca-certificates"/>
<package name="ca-certificates-mozilla"/>
</packages>
--- snap ---

I also attached the original mail by Marcus for reference.

HTH -- Till
--
Dipl.-Inform. Till Dörges doe...@pre-sense.de

PRESENSE Technologies GmbH Nagelsweg 41, D-20097 HH
Geschäftsführer/Managing Directors AG Hamburg, HRB 107844
Till Dörges, Jürgen Sander USt-IdNr.: DE263765024
[kiwi] Adding TLS certs.eml
signature.asc

Roger Oberholtzer

unread,
Dec 13, 2021, 6:56:39 AM12/13/21
to Till Dörges, kiwi-...@googlegroups.com
On Mon, Dec 13, 2021 at 9:15 AM Till Dörges <doe...@pre-sense.de> wrote:
>
> Am 13.12.21 um 08:22 schrieb Roger Oberholtzer:
>
> > ERROR: 12:15:58 | KiwiInstallPhaseFailed: System package installation
> > failed: Download (curl) error for
> > 'http://download.opensuse.org/repositories/Application:/Geo/openSUSE_Leap_15.3/noarch/python-rpm-macro
> > s-20211209.3834c04-lp153.154.1.noarch.rpm':
> > Error code: Curl error 60
> > Error message: SSL certificate problem: self signed certificate in
> > certificate chain
>
> Sounds similar to problem reported a few months ago on this list. In short, this
> should help:
>
> --- snip ---
> <packages type="bootstrap">
> ...
> <package name="ca-certificates"/>
> <package name="ca-certificates-mozilla"/>
> </packages>
> --- snap ---
>
> I also attached the original mail by Marcus for reference.


I did not remember that thread. I did not have
ca-certificates-mozilla. After adding that it gets much further. It's
still building. But it is past the point of failure..

Thanks!


--
Roger Oberholtzer
Reply all
Reply to author
Forward
0 new messages