Skip to content

build(base-image): make apt install resilient to transient mirror failures #42221

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
subrata71 merged 2 commits into from
Sep 16, 2026
+14 −4
Merged

build(base-image): make apt install resilient to transient mirror failures #42221

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b4adfb7
build(base-image): make apt install resilient to transient mirror fai…
subrata71 Sep 11, 2026
1d82958
fix: propagate curl failures by downloading to temp files instead of …
subrata71 Sep 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 14 additions & 4 deletions deploy/docker/base.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,12 @@ ENV LC_ALL=C.UTF-8

# Install dependency packages
RUN set -o xtrace \
# Make apt resilient to transient Ubuntu-mirror connection failures on the build
# host. ubuntu:24.04 ships no retry config (apt default is 0 retries), so a single
# dropped connection fails the whole build. This drop-in is build-scoped: it is
# removed in the cleanup step below, so the shipped image's apt behavior is
# unchanged. Does not rescue a sustained egress outage, only transient blips. APP-15960.
&& printf 'Acquire::Retries "3";\nAcquire::http::Timeout "30";\nAcquire::https::Timeout "30";\n' > /etc/apt/apt.conf.d/80-appsmith-retries \
&& apt-get update \
&& apt-get upgrade --yes \
&& DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes \
Expand All @@ -64,10 +70,12 @@ RUN set -o xtrace \
&& add-apt-repository -y ppa:git-core/ppa \
# Install MongoDB v7, PostgreSQL v14
# Note: MongoDB 7.0 does not publish apt packages for Ubuntu 24.04 (noble) yet, so we use the jammy (22.04) packages — same pattern used for the previous 6.0 install.
&& curl -fsSL https://www.mongodb.org/static/pgp/server-7.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg \
&& curl --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 -fsSL -o /tmp/mongodb-server-7.0.asc https://www.mongodb.org/static/pgp/server-7.0.asc \
&& gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg /tmp/mongodb-server-7.0.asc \
&& echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list \
&& echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list \
&& curl --silent --show-error --location https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \
&& curl --fail --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 --silent --show-error --location -o /tmp/pgdg-ACCC4CF8.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc \
&& apt-key add /tmp/pgdg-ACCC4CF8.asc \
&& apt update \
&& DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes \
mongodb-org-server mongodb-org-mongos mongodb-mongosh \
Expand All @@ -87,6 +95,7 @@ RUN set -o xtrace \
/usr/share/doc \
/usr/share/man \
/var/lib/apt/lists/* \
/etc/apt/apt.conf.d/80-appsmith-retries \
/tmp/*

# Install Redis from official image to avoid false positive CVE reports from dpkg-based scanners.
Expand All @@ -102,8 +111,9 @@ ENV PATH="/usr/lib/postgresql/14/bin:${PATH}"
RUN set -o xtrace \
&& mkdir -p /opt/java \
&& arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" \
&& curl --location "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" \
| tar -xz -C /opt/java --strip-components 1
&& curl --fail --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 --location -o /tmp/adoptium-jdk.tar.gz "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" \
&& tar -xzf /tmp/adoptium-jdk.tar.gz -C /opt/java --strip-components 1 \
&& rm -f /tmp/adoptium-jdk.tar.gz

# Install NodeJS
RUN <<END
Expand Down
Loading