** Description changed: - While doing apt install <pkg-names> , its failing on 100th or 101th package in queue . it fails with below error each time - Error - OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading + Problem - apt version for resolute fails to requeue pipelined in-flight + requests when a server closes at its keep-alive limit; apt 2.8.3 (noble + version) recovers correctly. + + While doing apt install <pkg-names> , each time its failing on + 100th/101th package in queue - OpenSSL error: error:0A000126:SSL + routines::unexpected eof while reading + + Errors:- + - apt-get -o Acquire::Retries=10 install -y build-essential cmake python3 binutils strace gcc libssl-dev g++ vim + Get:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 [54.0 kB] + Err:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 + OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading + Get:102 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libldap-common all 2.6.10+dfsg-1ubuntu5 [36.0 kB] + + - apt-get -o Acquire::Retries=10 install --download-only -y build-essential cmake python3 binutils strace gcc libssl-dev g++ vim + Get:100 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg1-9ubuntu3 [21.1 kB] + Err:100 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg1-9ubuntu3 + OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading + Get:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 [54.0 kB] + + Tried :- + - Adding -o Acquire::http::Pipeline-Depth=0 solves the issue but i don't want to disable pipelining. Isn't the apt meant to handle such errors with pipelining enabled ? + - Options like -o Acquire::Retries=<x> was also tried but it doesn't solve the issue Apt version - 3.3.3 (default version of resolute is 3.2.0 but 3.3.3 was taken for this fix - https://blog.jak-linux.org/2026/07/03/openssl-pandemic/) Openssl version - 3.5.5 Resolute Container - Built from upstream dockerhub tag (library/ubuntu:resolute-20260912) . The official tag is taken as base image and then just apt sources are just updated to point to internal artifactory - Errors:- - - apt-get -o Acquire::Retries=10 install -y build-essential cmake python3 binutils strace gcc libssl-dev g++ vim - Get:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 [54.0 kB] - Err:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 - OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading - Get:102 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libldap-common all 2.6.10+dfsg-1ubuntu5 [36.0 kB] - - - - apt-get -o Acquire::Retries=10 install --download-only -y build-essential cmake python3 binutils strace gcc libssl-dev g++ vim - Get:100 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg1-9ubuntu3 [21.1 kB] - Err:100 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-modules-db amd64 2.1.28+dfsg1-9ubuntu3 - OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading - Get:101 <internal-artifactory>/ubuntu/20260915T000000Z resolute/main amd64 libsasl2-2 amd64 2.1.28+dfsg1-9ubuntu3 [54.0 kB] - - Tried :- - - Adding -o Acquire::http::Pipeline-Depth=0 solves the issue but i don't want to disable pipelining. Isn't the apt meant to handle such errors with pipelining enabled ? - - Options like -o Acquire::Retries=<x> was also tried but it doesn't solve the issue - - - apt 3.3.3 fails to requeue pipelined in-flight requests when a server closes at its keep-alive limit; apt 2.8.3 recovers correctly. + apt 3.3.3 fails to requeue pipelined in-flight requests when a server + closes at its keep-alive limit; apt 2.8.3 recovers correctly. Server closes after 100 keep-alive requests with Connection: close and a valid TLS close_notify . With Pipeline-Depth=10, apt 3.3.3 reports Err:101 ... OpenSSL error: error:0A000126 and aborts. apt 2.8.3 against the same server, same depth, succeeds — it requeues and reconnects. - -------------- STEPS TO REPRODUCE IT ---------------------------- 1. Pull latest docker hub resolute image - ubuntu:resolute-20260912 - 2. Install openssl & ca-certificates + 2. Install openssl & ca-certificates 3. Remove default ubuntu apt sources and add internal artifactory which is just a mirror to upstream ubuntu snapshot service. 4. apt-get update 5. apt-get install build-essential cmake python3 binutils strace gcc libssl-dev g++ vim --------------------------------------------------------------------------------- Regarding step 3 - Remove default ubuntu apt sources and add internal artifactory which is just a mirror to upstream ubuntu snapshot service. - - There is nothing new being done here and this mirror was being used for noble , jammy too so nothing has changed from artifactory snapshot perceptive. + - There is nothing new being done here and this mirror was being used for noble , jammy too so nothing has changed from artifactory snapshot perceptive. Would you be able to help me fix this issue? Considering apt in resolute has moved from gnutls to openssl , does our internal artifactory snapshot mirror service need some new configs ?
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2167817 Title: OpenSSL error: error:0A000126:SSL routines::unexpected eof while reading To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2167817/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
