Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GSA staff workstations' proxy prevents image dependency install without HTTPS CA override #3

Open
aj-stein-gsa opened this issue Sep 27, 2024 · 0 comments

Comments

@aj-stein-gsa
Copy link
Contributor

aj-stein-gsa commented Sep 27, 2024

I will work to propose a solution on this next week, but per discussoin on GitHub, GSA/TTS workstations have the build of multiple dependencies because certification verification fails due to the proxy overriding certificate authorities for intercept and monitoring.

 % git branch --show-current 
main
% git rev-parse HEAD
ec80d7a54fc97bbc5d7965c292d2825eb85cd02a
% docker compose --version
>>>> Executing external compose provider "/opt/homebrew/bin/podman-compose". Please see podman-compose(1) for how to disable this message. <<<<

podman-compose version 1.2.0
podman version 5.2.2
% docker compose up
# ... truncated, a lot of additional output
ERROR: Could not install packages due to an OSError: HTTPSConnectionPool(host='objects.githubusercontent.com', port=443): Max retries exceeded with url: /github-production-release-asset-2e65be/84940268/57d669be-3dae-4e67-b7ae-2325a0b6cfde?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240927%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240927T213316Z&X-Amz-Expires=300&X-Amz-Signature=d935a33bb985ceab4ba0419fda2730d4195b5f99fc6e4fba31ed23a1e1c127b7&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Den_core_web_sm-3.7.1-py3-none-any.whl&response-content-type=application%2Foctet-stream (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1006)')))
@aj-stein-gsa aj-stein-gsa changed the title GSA staff workstations' proxy will prevent installation of image dependencies without overriding HTTP certificates GSA staff workstations' proxy prevents image dependency install without HTTPS CA override Sep 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant