MartijnVisser commented on code in PR #21873:
URL: https://github.com/apache/flink/pull/21873#discussion_r1154369959


##########
tools/azure-pipelines/e2e-template.yml:
##########
@@ -98,6 +98,19 @@ jobs:
 
         echo "Free up disk space"
         ./tools/azure-pipelines/free_disk_space.sh
+        
+        # the APT mirrors access is based on a proposal from 
https://github.com/actions/runner-images/issues/7048#issuecomment-1419426054
+        echo "Configure APT mirrors"
+        mirror_file_path="/etc/apt/mirrors.txt"
+        default_ubuntu_mirror_url="http://azure.archive.ubuntu.com/ubuntu/";
+        
+        # add Azure's Ubuntu mirror as a top-priority source
+        echo -e "${default_ubuntu_mirror_url}\tpriority:1" | sudo tee 
${mirror_file_path}
+        
+        # use other mirrors as a fallback option
+        curl http://mirrors.ubuntu.com/mirrors.txt | sudo tee --append 
${mirror_file_path}

Review Comment:
   The only thing this could introduce is option for a supply chain attack, but 
we already have others sources where we do something similar and I would 
classify the risk that Ubuntu gets compromised the same as we do for the other 
sources (Maven/Github). 



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to