Public bug reported: While doing apt install <pkg-names> , its failing on 100th or 101th package in queue . it fails with below error each time Error - OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading
Apt version - 3.3.3 (default version of resolute is 3.2.0 but 3.3.3 was taken for this fix - https://blog.jak-linux.org/2026/07/03/openssl-pandemic/) Openssl version - 3.5.5 Resolute Container - Built from upstream dockerhub tag (library/ubuntu:resolute-20260912) . The official tag is taken as base image and then just apt sources are just updated to point to internal artifactory Errors:- - apt-get -o Acquire::Retries=10 install -y build-essential cmake python3 binutils strace gcc libssl-dev g++ vim Get:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 [54.0 kB] Err:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading Get:102 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libldap-common all 2.6.10+dfsg-1ubuntu5 [36.0 kB] - apt-get -o Acquire::Retries=10 install --download-only -y build-essential cmake python3 binutils strace gcc libssl-dev g++ vim Get:100 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg1-9ubuntu3 [21.1 kB] Err:100 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg1-9ubuntu3 OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading Get:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 [54.0 kB] Tried :- - Adding -o Acquire::http::Pipeline-Depth=0 solves the issue but i don't want to disable pipelining. Isn't the apt meant to handle such errors with pipelining enabled ? - Options like -o Acquire::Retries=<x> was also tried but it doesn't solve the issue apt 3.3.3 fails to requeue pipelined in-flight requests when a server closes at its keep-alive limit; apt 2.8.3 recovers correctly. Server closes after 100 keep-alive requests with Connection: close and a valid TLS close_notify . With Pipeline-Depth=10, apt 3.3.3 reports Err:101 ... OpenSSL error: error:0A000126 and aborts. apt 2.8.3 against the same server, same depth, succeeds — it requeues and reconnects. -------------- STEPS TO REPRODUCE IT ---------------------------- 1. Pull latest docker hub resolute image - ubuntu:resolute-20260912 2. Install openssl & ca-certificates 3. Remove default ubuntu apt sources and add internal artifactory which is just a mirror to upstream ubuntu snapshot service. 4. apt-get update 5. apt-get install build-essential cmake python3 binutils strace gcc libssl-dev g++ vim --------------------------------------------------------------------------------- Regarding step 3 - Remove default ubuntu apt sources and add internal artifactory which is just a mirror to upstream ubuntu snapshot service. - There is nothing new being done here and this mirror was being used for noble , jammy too so nothing has changed from artifactory snapshot perceptive. Would you be able to help me fix this issue? Considering apt in resolute has moved from gnutls to openssl , does our internal artifactory snapshot mirror service need some new configs ? ** Affects: apt (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2167817 Title: OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2167817/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
