From 1e3a32e64621d9586679ac922259d593a81f387e Mon Sep 17 00:00:00 2001 From: damansingh1313 Date: Wed, 9 Sep 2026 04:08:30 +0530 Subject: [PATCH] Infra: Fix Hive Dockerfile apt failure on EOL Debian bullseye The apache/hive:4.0.0 base image is built on Debian bullseye, which reached end of life on 2026-08-31. Its security repository metadata is no longer refreshed, so the signed Release file has expired and apt-get update fails with a non-zero exit, breaking the integration-test image build on every PR. Pass Acquire::Check-Valid-Until=false so apt tolerates the stale (but still signature-verified) metadata. This is a minimal unblock; a follow-up can drop the apt-get layer entirely. Closes #3922 --- dev/hive/Dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/dev/hive/Dockerfile b/dev/hive/Dockerfile index e46a035727..cd9c7386c8 100644 --- a/dev/hive/Dockerfile +++ b/dev/hive/Dockerfile @@ -23,7 +23,10 @@ ARG MAVEN_MIRROR=https://repo1.maven.org/maven2 USER root # Install curl (separate layer - rarely changes) -RUN apt-get update -qq && \ +# Debian bullseye (the apache/hive:4.0.0 base) is EOL, so its security repo +# metadata is no longer refreshed and apt rejects the expired Release file. +# Skip the freshness check; the signature is still verified. +RUN apt-get -o Acquire::Check-Valid-Until=false update -qq && \ apt-get -qq -y install --no-install-recommends curl && \ apt-get clean && \ rm -rf /var/lib/apt/lists/*