Here's a relatively minimal example:
```
$ sudo fips-mode-setup --check
FIPS mode is enabled.
$ uname -a
Linux hostname 4.18.0-553.8.1.el8_10.x86_64 #1 SMP Fri Jun 14 03:19:37 EDT 2024
x86_64 x86_64 x86_64 GNU/Linux
```
```
FROM ubuntu:24.04 AS builder
RUN . /etc/os-release && \
DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install -y
--no-install-recommends \
curl apt-transport-https ca-certificates xz-utils \
cmake build-essential pkg-config \
libboost-all-dev libusb-1.0-0-dev \
python3-mako python3-numpy python3-setuptools python3-requests
```
Ran with
```
docker build .
```
produces attached output
** Attachment added: "error_logs.txt"
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2066990/+attachment/5822395/+files/error_logs.txt
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ca-certificates in Ubuntu.
https://bugs.launchpad.net/bugs/2066990
Title:
high memory consumption in Ubuntu Noble
Status in ca-certificates package in Ubuntu:
Confirmed
Bug description:
I wanted to try the new Ubuntu 24.04 Noble Numbat based .NET docker
image and updated the base docker image in our CI pipeline to
mcr.microsoft.com/dotnet/sdk:8.0-noble. However, it results in an out-
of-memory exception. Based on my investigation, the exception occurs
specifically when the update-ca-certificates command is executed. I
can also repro the issue with ubuntu:noble image which means it's not
specific to .NET docker images. It works fine with Jammy, by the way.
The problem likely lies with the Noble base image rather than the .NET
image. I'm not sure what changes were made between Jammy and Noble,
but it appears that updating certificates consumes a lot of memory in
Noble. I adjusted some memory settings in our GitLab runner, but it
didn't resolve the issue. I attached all Gitlab Runner shell logs for
.NET 8 Jammy, .NET 8 Noble and Ubuntu Noble images.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/2066990/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
