Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-8003

lsstsw/bin/deploy broken downloading git source

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Resolution: Done
    • Fix Version/s: None
    • Component/s: lsstsw
    • Labels:
      None

      Description

      lsstsw's bin/deploy script has been broken for several days now. The failure is coming from curl when attempting to download the git source.

      curl: (35) Unknown SSL protocol error in connection to www.kernel.org:443

        Attachments

          Issue Links

            Activity

            Hide
            jhoblitt Joshua Hoblitt added a comment -

            The TlS cert for kernel.org has a validity period starting on 10/10/2016, so it was likely changed in the last ~week. I'm guessing the issue is with not having up-to-date intermediate certs. However, I can't reproduce the failure in a centos 6 container.

            $ docker run -ti centos:6
            [root@556bc5336a8b /]# GIT_VERSION=${GIT_VERSION:-2.2.2} 
            [root@556bc5336a8b /]#  GIT_BASE_URL="https://www.kernel.org/pub/software/scm/git"
            [root@556bc5336a8b /]# curl -# -L -O ${GIT_BASE_URL}/git-${GIT_VERSION}.tar.gz
            ######################################################################## 100.0%
            

            Show
            jhoblitt Joshua Hoblitt added a comment - The TlS cert for kernel.org has a validity period starting on 10/10/2016 , so it was likely changed in the last ~week. I'm guessing the issue is with not having up-to-date intermediate certs. However, I can't reproduce the failure in a centos 6 container. $ docker run -ti centos: 6 [root @556bc5336a8b /]# GIT_VERSION=${GIT_VERSION:- 2.2 . 2 } [root @556bc5336a8b /]# GIT_BASE_URL= "https://www.kernel.org/pub/software/scm/git" [root @556bc5336a8b /]# curl -# -L -O ${GIT_BASE_URL}/git-${GIT_VERSION}.tar.gz ######################################################################## 100.0 %
            Hide
            jhoblitt Joshua Hoblitt added a comment -

            The issue seems to have resolved itself on the jenkins build slaves. It appears to be now only present under travis-ci. My suspicion is that the initial issue was with the new kernel.org cert, which was fixed at some point. The logs on the jenkins el7-1 slave show that the certs db was updated in July.

            47:Jul 10 18:46:00 Updated: ca-certificates-2015.2.4-70.0.el7_1.noarch

            Show
            jhoblitt Joshua Hoblitt added a comment - The issue seems to have resolved itself on the jenkins build slaves. It appears to be now only present under travis-ci. My suspicion is that the initial issue was with the new kernel.org cert, which was fixed at some point. The logs on the jenkins el7-1 slave show that the certs db was updated in July. 47:Jul 10 18:46:00 Updated: ca-certificates-2015.2.4-70.0.el7_1.noarch
            Hide
            jhoblitt Joshua Hoblitt added a comment -

            I've opened an issue with travis-ci: https://github.com/travis-ci/travis-ci/issues/6744

            Show
            jhoblitt Joshua Hoblitt added a comment - I've opened an issue with travis-ci: https://github.com/travis-ci/travis-ci/issues/6744
            Hide
            frossie Frossie Economou added a comment -

            bin/deploy is working except in Travis, and the bug report with Travis provided an answer for that, to be addressed next cycle.

            Show
            frossie Frossie Economou added a comment - bin/deploy is working except in Travis, and the bug report with Travis provided an answer for that, to be addressed next cycle.
            Hide
            jhoblitt Joshua Hoblitt added a comment -

            The build failures on travis seem to have evaporated as of this morning. Presumably, a new travis container image has been cut.

            Show
            jhoblitt Joshua Hoblitt added a comment - The build failures on travis seem to have evaporated as of this morning. Presumably, a new travis container image has been cut.

              People

              Assignee:
              jhoblitt Joshua Hoblitt
              Reporter:
              jhoblitt Joshua Hoblitt
              Watchers:
              Frossie Economou, Joshua Hoblitt
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Jenkins

                  No builds found.