matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

[201811][jessie] address Jessie docker cert expiry issue (#8933)

Browse Source 
Why I did it
201811 branch image build has been failing due to the certificate expiring: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021. This issue so far only affect Jessie docker because it is using openssl 1.0.

How I did it
Remove the expired cert and refresh the certs bundle.

How to verify it
Build image.

Signed-off-by: Ying Xie <ying.xie@microsoft.com>
This commit is contained in:
Ying Xie 2021-10-08 19:18:25 -07:00 committed by GitHub
parent 00695d918d
commit 3848f50456
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sonic-slave/Dockerfile
View File

@ -330,3 +330,6 @@ RUN add-apt-repository \
RUN apt-get update
RUN apt-get install -y docker-ce=17.03.2~ce-0~debian-jessie
RUN echo "DOCKER_OPTS=\"--experimental --storage-driver=vfs\"" >> /etc/default/docker
# Remove the stale cert and refresh the certs
RUN apt-get install --reinstall ca-certificates && rm -f /etc/ssl/certs/DST_Root_CA_X3.pem && rm -f /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt && update-ca-certificates