Sonic bullseye slave docker image build failure

[Puneet1726]

Description

During make configure PLATOFRM=vs, while building bullseye image it is failing with the below error

Running in b4debf057171

get_url_version https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.13/amd64/golang-1.15-go_1.15.15-1~deb11u4+fips_amd64.deb failed

-->

Steps to reproduce the issue:

1. clone sonic build image repo
2. run make init
3. run make configure PLATFORm=vs

Describe the results you received:

Error is below,
Step 23/72 : RUN wget -O golang-go.deb 'https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.13/amd64/golang-1.15-go_1.15.15-1~deb11u4+fips_amd64.deb' && wget -O golang-src.deb 'https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.13/amd64/golang-1.15-src_1.15.15-1~deb11u4+fips_amd64.deb' && eatmydata dpkg -i golang-go.deb golang-src.deb && ln -sf /usr/lib/go-1.15 /usr/local/go && rm golang-go.deb golang-src.deb
---> Running in b4debf057171
get_url_version https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.13/amd64/golang-1.15-go_1.15.15-1~deb11u4+fips_amd64.deb failed
The command '/bin/sh -c wget -O golang-go.deb 'https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.13/amd64/golang-1.15-go_1.15.15-1~deb11u4+fips_amd64.deb' && wget -O golang-src.deb 'https://sonicstorage.blob.core.windows.net/public/fips/bullseye/0.13/amd64/golang-1.15-src_1.15.15-1~deb11u4+fips_amd64.deb' && eatmydata dpkg -i golang-go.deb golang-src.deb && ln -sf /usr/lib/go-1.15 /usr/local/go && rm golang-go.deb golang-src.deb' returned a non-zero code: 1
Unable to find image 'sonic-slave-bullseye:f99becc7eed' locally
Error response from daemon: pull access denied for sonic-slave-bullseye, repository does not exist or may require 'docker login': denied: requested access to the resource is denied

Describe the results you expected:

It was running successfully till 5th November 2024

Output of show version:

(paste your output here)

Output of show techsupport:

(paste your output here or download and attach the file here )

Additional information you deem important (e.g. issue happens only occasionally):

[jon-nokia]

Additionally, several other accesses to sonicblob.storage affected
get_url_version https://sonicstorage.blob.core.windows.net/debian/pool/main/liby/libyang/libyang2_2.0.112-6.dsc failed get_url_version https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc failed

[wdoekes]

And this when building for bookworm:

$ curl https://sonicstorage.blob.core.windows.net/public/20190307/dsserve
<?xml version="1.0" encoding="utf-8"?><Error><Code>PublicAccessNotPermitted</Code><Message>Public access is not permitted on this storage account.
RequestId:e40f122e-501e-0027-63fc-31d693000000

Did someone toggle the is_public flag on a bucket somewhere?

[swapnaNann]

Any fix/workaround for this issue?

[hoanganh-dzsi]

I faced the same situation. Is there any fix or workaround for this issue? Thanks.

[Oleksii-Fadieiev-PLV]

The same for me.
Workaround for dockers compilation could be setting INCLUDE_FIPS to no:
export INCLUDE_FIPS=n

(of course it disables the relevant functionality)

But then it fails at linux-headers compilation with the similar error:
get_url_version https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc failed

So when I execute the next command(s) in the terminal:

wget -O linux_6.1.94-1.dsc "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc"
wget -O linux_6.1.94.orig.tar.xz "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94.orig.tar.xz"
wget -O linux_6.1.94-1.debian.tar.xz "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.debian.tar.xz"

I get an error:

wget -O linux_6.1.94-1.dsc "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc"
--2024-11-09 22:57:11--  https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc
Resolving sonicstorage.blob.core.windows.net (sonicstorage.blob.core.windows.net)... 20.60.59.131
Connecting to sonicstorage.blob.core.windows.net (sonicstorage.blob.core.windows.net)|20.60.59.131|:443... connected.
HTTP request sent, awaiting response... 409 Public access is not permitted on this storage account.
2024-11-09 22:57:11 ERROR 409: Public access is not permitted on this storage account..

Have anyone had the same behavior? Any suggestions how to solve that or any workaround?

[swapnaNann]

I worked around the issue by using prebuilt debian packages.

There were three issues I noticed in my branch( based on 202305) that failed during compilation

1. Getting linux_6.1.94-1.dsc
2. Getting socat_1.7.4.1-3.dsc
3. NTP didn't compile

Steps:
1) copy your prebuilt debian packages here
swapna@sonic-buildmachine:/opt/prebuilt-debian-packages$ ls -al
total 72132
drwxr-xr-x 2 root root 4096 Nov 10 14:19 .
drwxr-xr-x 6 root root 4096 Nov 10 14:19 ..
-rwxrw-rw- 1 root root 197238 Nov 9 10:06 linux_5.10.179-3.dsc
-rwxrw-rw- 1 root root 1117360 Nov 10 10:48 linux-headers-5.10.0-23-2-amd64_5.10.179-3_amd64.deb
-rwxrw-rw- 1 root root 9105472 Nov 8 21:06 linux-headers-5.10.0-23-2-common_5.10.179-3_all.deb
-rwxrw-rw- 1 root root 7440988 Nov 9 10:06 linux-headers-5.10.0-23-2-common-rt_5.10.179-3_all.deb
-rwxrw-rw- 1 root root 54812748 Nov 10 10:49 linux-image-5.10.0-23-2-amd64-unsigned_5.10.179-3_amd64.deb
-rwxrw-rw- 1 root root 1336 Nov 9 10:06 linux-image-amd64-dbg_5.10.179-3_amd64.deb
-rw-r--r-- 1 root root 784868 Nov 10 14:19 ntp_4.2.8p15+dfsg-1+deb10u2_amd64.deb
-rwxrw-rw- 1 root root 372152 Nov 9 22:31 socat_1.7.4.1-3_amd64.deb

2. Apply the above patch
   sonic-build-error.patch

Hope this helps someone!

[chenvxu]

The same for me. Workaround for dockers compilation could be setting INCLUDE_FIPS to no: export INCLUDE_FIPS=n

(of course it disables the relevant functionality)

But then it fails at linux-headers compilation with the similar error: get_url_version https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc failed

So when I execute the next command(s) in the terminal:

wget -O linux_6.1.94-1.dsc "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc"
wget -O linux_6.1.94.orig.tar.xz "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94.orig.tar.xz"
wget -O linux_6.1.94-1.debian.tar.xz "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.debian.tar.xz"

I get an error:

wget -O linux_6.1.94-1.dsc "https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc"
--2024-11-09 22:57:11--  https://sonicstorage.blob.core.windows.net/debian-security/pool/updates/main/l/linux/linux_6.1.94-1.dsc
Resolving sonicstorage.blob.core.windows.net (sonicstorage.blob.core.windows.net)... 20.60.59.131
Connecting to sonicstorage.blob.core.windows.net (sonicstorage.blob.core.windows.net)|20.60.59.131|:443... connected.
HTTP request sent, awaiting response... 409 Public access is not permitted on this storage account.
2024-11-09 22:57:11 ERROR 409: Public access is not permitted on this storage account..

Have anyone had the same behavior? Any suggestions how to solve that or any workaround?

You can try to replace the https://sonicstorage.blob.core.windows.net with others debian mirror states(i used http://ftp.cn.debian.org/debian/), but there are so many files need to download from sonicstorage, you have to replace the source of each error or a simply way is copy the previously compiled file to replace it.

[prgeor]

@Puneet1726 hope this is unblocked with the suggested workaround above

[Puneet1726]

@prgeor : Please close the issue