qzyu999 opened a new issue, #3922:
URL: https://github.com/apache/iceberg-python/issues/3922

   ### Apache Iceberg version
   
   main (HEAD)
   
   ### Please describe the bug 🐛
   
   The `integration-test` CI job is failing repo-wide because 
`dev/hive/Dockerfile` runs `apt-get update` against an expired Debian Bullseye 
security repo.
   
   The `apache/hive:4.0.0` base image uses Debian Bullseye, which reached end 
of life. The InRelease file for `bullseye-security` is no longer being 
refreshed, so `apt-get update` rejects it:
   
   ```
   E: Release file for 
http://deb.debian.org/debian-security/dists/bullseye-security/InRelease
   is expired (invalid since 7h 1min 15s). Updates for this repository will not 
be applied.
   ```
   
   This is not intermittent — it affects every PR. Confirmed on at least four 
unrelated branches:
   - `feature/core-rewrite-api` (run 34186219561)
   - `jschmidt/add-fast-forward` (run 34260757166)
   - `remove_orphan_snapshots` (run 34260442342)
   - `reject-out-of-range-in-literals` (run 34200528342)
   
   All unit tests, lint, docs, S3/ADLS/GCS integration, and Windows CI jobs 
pass. Only the Hive-dependent `integration-test` job fails.
   
   The failing line is in `dev/hive/Dockerfile:26`:
   
   ```dockerfile
   RUN apt-get update -qq && \
       apt-get -qq -y install --no-install-recommends curl && \
       apt-get clean && \
       rm -rf /var/lib/apt/lists/*
   ```
   
   ### Possible fix
   
   Add `Acquire::Check-Valid-Until "false"` before the `apt-get update` to 
allow the expired repo:
   
   ```dockerfile
   RUN echo 'Acquire::Check-Valid-Until "false";' > 
/etc/apt/apt.conf.d/99no-check-valid && \
       apt-get update -qq && \
       apt-get -qq -y install --no-install-recommends curl && \
       apt-get clean && \
       rm -rf /var/lib/apt/lists/*
   ```
   
   Alternatively, a newer Hive base image not based on Bullseye would resolve 
this permanently.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to