Skip to content

Commit 84de2be

Browse files
committed
unix: trust Debian Jessie sources
The signing keys expired and package installs are refusing to proceed because a trust chain to a valid signing key can't be established. Work around this by implicitly trusting the source.
1 parent a07a392 commit 84de2be

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

cpython-unix/base.Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,9 @@ ENV HOME=/build \
1717
CMD ["/bin/bash", "--login"]
1818
WORKDIR '/build'
1919

20+
# Jessie's signing keys expired in late 2022. So need to add [trusted=yes] to force trust.
2021
RUN for s in debian_jessie debian_jessie-updates debian-security_jessie/updates; do \
21-
echo "deb http://snapshot.debian.org/archive/${s%_*}/20221105T150728Z/ ${s#*_} main"; \
22+
echo "deb [trusted=yes] http://snapshot.debian.org/archive/${s%_*}/20221105T150728Z/ ${s#*_} main"; \
2223
done > /etc/apt/sources.list && \
2324
( echo 'quiet "true";'; \
2425
echo 'APT::Get::Assume-Yes "true";'; \

0 commit comments

Comments
 (0)