"failed to run apt update" when using a specific package-repository with 20.04 base
Metadata
Current evaluation
Ubuntu 20.04 HTTPS APT repositories failed certificate verification; Rockcraft now blocks that EOL base by default, making this legacy report obsolete unless users force it with --ignore=unmaintained.
Suggested action: close stale
Reason: Current code and a spread test require Rockcraft to stop with "Cannot pack rock. Base 'ubuntu@20.04' has reached end-of-life"; the base guide says such builds require --ignore=unmaintained. The original default-build failure therefore concerns an unsupported, permanently obsolete base rather than a defect affecting supported bases.
Evaluated by: mr-cal-bot
Impact:
24
Quick Win:
11
Complexity:
42
Confidence:
93
Actionability:
82
Issue body
### Bug Description
Building the provided rockcraft.yaml fails. The problem happens specifically because of the "https" `url`. If I change it to "http", _or_ if I change the base to 22.04, it works.
As part of diagnosis I tried running a `public.ecr.aws/ubuntu/ubuntu:20.04` container; I can `wget` that url just fine.
### To Reproduce
Use the `rockcraft.yaml` provided, then `rockcraft -v`
### Environment
rockcraft from edge (`latest/edge: 0+git.3c49911 2023-08-14 (980)`)
### rockcraft.yaml
```shell
name: my-rock-name
base: ubuntu:20.04
version: '0.1'
summary: Test
description: Test
license: GPL-3.0
platforms:
amd64:
package-repositories:
- type: apt
components: [main]
suites: [focal]
key-id: 9FD3B784BC1C6FC31A8A0A1C1655A0AB68576280
url: https://deb.nodesource.com/node_14.x
parts:
my-part:
plugin: nil
overlay-packages: [hello]
```
### Relevant log output
```shell
2023-08-14 10:06:24.222 :: 2023-08-14 13:06:19.406 [pid=619] chroot to PosixPath('/root/overlay/overlay')
2023-08-14 10:06:24.222 :: 2023-08-14 13:06:19.406 Executing: ['apt-get', 'update']
2023-08-14 10:06:24.222 :: 2023-08-14 13:06:19.529 :: Ign:1 https://deb.nodesource.com/node_14.x jammy InRelease
2023-08-14 10:06:24.222 :: 2023-08-14 13:06:19.610 :: Err:2 https://deb.nodesource.com/node_14.x jammy Release
2023-08-14 10:06:24.222 :: 2023-08-14 13:06:19.610 :: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 189.72.175.82 443]
```
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
24
Quick Win:
11
Complexity:
42
Confidence:
93
Actionability:
82
|
close stale | Ubuntu 20.04 HTTPS APT repositories failed certificate verification; Rockcraft now blocks that EOL base by default, making this legacy report obsolete unless users force it with --ignore=unmaintained. | |
| stealth/space-bunny-alpha |
Impact:
35
Quick Win:
10
Complexity:
55
Confidence:
86
Actionability:
65
|
needs triage | Ubuntu 20.04 builds with an HTTPS apt repository fail CA verification. The report is reproducible but untriaged; 20.04 is now EOL and requires --ignore=unmaintained, so current behavior needs retesting. | |
| qwen/qwen3.6-35b-a3b |
Impact:
40
Quick Win:
14
Complexity:
50
Confidence:
65
Actionability:
70
|
needs triage | Rockcraft fails with apt certificate verification error when using HTTPS package-repository with Ubuntu 20.04 base. No labels, no maintainer response. | |
| qwen/qwen3.8-27b |
Impact:
40
Quick Win:
18
Staleness:
75
Complexity:
55
Confidence:
65
Support Request:
10
|
needs triage | apt update fails in the overlay step with a certificate-verification error when an HTTPS package-repository is used with the ubuntu:20.04 base; http or a 22.04 base works. Open since Aug 2023, no labels, no maintainer response, inactive ~13 months. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
95
Complexity:
30
Confidence:
85
Support Request:
10
|
close stale | Bug report about apt update failing due to certificate verification on Ubuntu 20.04 base with a specific HTTPS repository. Untriaged and inactive for nearly three years. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
92
Complexity:
30
Confidence:
70
Support Request:
40
|
close stale | Unassessed issue reporting apt certificate verification failures when using Ubuntu 20.04 base with NodeSource 14.x repository. No maintainer response or labels. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
90
Complexity:
40
Confidence:
75
Support Request:
10
|
needs triage | Rockcraft fails apt update with HTTPS package repository on Ubuntu 20.04 due to certificate verification errors. Unlabelled, no maintainer comments, inactive for over a year. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.