Try specifying IP address instead. Also enable hermetic mode.

Author: tecarter94

deploy/tasks/buildah-oci-ta.yaml

@@ -291,9 +291,9 @@ spec:
         cp "$dockerfile_path" "$dockerfile_copy"
 
         if [ -n "$JVM_BUILD_WORKSPACE_ARTIFACT_CACHE_PORT_80_TCP_ADDR" ] && grep -q '^\s*RUN \(./\)\?mvn' "$dockerfile_copy"; then
-          settings="<settings><proxies><proxy><id>domain-proxy</id><active>true</active><protocol>http</protocol><host>localhost</host><port>8080</port></proxy></proxies><mirrors><mirror><id>mirror.default</id><url>http://$JVM_BUILD_WORKSPACE_ARTIFACT_CACHE_PORT_80_TCP_ADDR/v1/cache/default/0/</url><mirrorOf>*</mirrorOf></mirror></mirrors></settings>"
+          settings="<settings><proxies><proxy><id>domain-proxy</id><active>true</active><protocol>http</protocol><host>127.0.0.1</host><port>8080</port></proxy></proxies><mirrors><mirror><id>mirror.default</id><url>http://$JVM_BUILD_WORKSPACE_ARTIFACT_CACHE_PORT_80_TCP_ADDR/v1/cache/default/0/</url><mirrorOf>*</mirrorOf></mirror></mirrors></settings>"
         else
-          settings="<settings><proxies><proxy><id>domain-proxy</id><active>true</active><protocol>http</protocol><host>localhost</host><port>8080</port></proxy></proxies></settings>"
+          settings="<settings><proxies><proxy><id>domain-proxy</id><active>true</active><protocol>http</protocol><host>127.0.0.1</host><port>8080</port></proxy></proxies></settings>"
         fi
         sed -i -e "s|^\s*RUN \(\(./\)\?mvn\)\(.*\)|RUN echo \"$settings\" > /tmp/settings.yaml; \1 -s /tmp/settings.yaml \3|g" "$dockerfile_copy"
         touch /var/lib/containers/java
@@ -467,7 +467,6 @@ spec:
         # Without expansion
         cat > /app/build-script.sh << 'EOF'
         #!/bin/sh
-        ip link set dev lo up
         /app/domain-proxy-client-runner &
         client_pid=$!
         EOF
@@ -524,7 +523,6 @@ spec:
         capabilities:
           add:
             - SETFCAP
-            - NET_ADMIN
     - name: sbom-syft-generate
       image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
       workingDir: /var/workdir/source

java-components/domain-proxy/server/src/main/java/com/redhat/hacbs/domainproxy/DomainProxyServer.java

@@ -27,7 +27,7 @@
 @Singleton
 public class DomainProxyServer {
 
-    static final String LOCALHOST = "localhost";
+    static final String LOCALHOST = "127.0.0.1";
 
     @Inject
     @ConfigProperty(name = "server-domain-socket")

pkg/reconciler/dependencybuild/buildrecipeyaml.go

@@ -530,6 +530,13 @@ func createPipelineSpec(log logr.Logger, tool string, commitTime int64, jbsConfi
 						StringVal: domainProxyImage,
 					},
 				},
+				{
+					Name: "HERMETIC",
+					Value: tektonpipeline.ParamValue{
+						Type:      tektonpipeline.ParamTypeString,
+						StringVal: "true",
+					},
+				},
 			},
 		}}, ps.Tasks...)