Failed to deploy pg-beershop-db-deployer-apt to SAP BTP Trial

[ravindraP20]

cf logs pg-beershop-db-deployer-apt --recent

2021-10-07T17:54:24.75+0530 [STG/0] OUT -----> Adding apt keys
2021-10-07T17:54:24.82+0530 [STG/0] ERR Warning: apt-key output should not be parsed (stdout is not a terminal)
2021-10-07T17:54:25.21+0530 [STG/0] ERR gpg: no valid OpenPGP data found.
2021-10-07T17:54:25.21+0530 [STG/0] ERR gpg: Total number processed: 0
2021-10-07T17:54:25.21+0530 [STG/0] ERR gpg: keyserver communications error: keyserver helper internal error
2021-10-07T17:54:25.21+0530 [STG/0] ERR gpg: keyserver internal error
2021-10-07T17:54:25.21+0530 [STG/0] ERR gpg: WARNING: unable to fetch URI https://dist.sapmachine.io/debian/sapmachine.old.key: keyserver error
2021-10-07T17:54:25.21+0530 [STG/0] OUT ERROR Error running supply: could not add apt key https://dist.sapmachine.io/debian/sapmachine.old.key
2021-10-07T17:54:25.21+0530 [STG/0] OUT
2021-10-07T17:54:25.21+0530 [STG/0] OUT Executing: /tmp/apt-key-gpghome.PMF082jpxx/gpg.1.sh --fetch-keys https://dist.sapmachine.io/debian/sapmachine.old.key
2021-10-07T17:54:25.21+0530 [STG/0] OUT gpgkeys: https fetch error 60: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
2021-10-07T17:54:25.21+0530 [STG/0] OUT
2021-10-07T17:54:25.21+0530 [STG/0] OUT
2021-10-07T17:54:25.21+0530 [STG/0] OUT exit status 2
2021-10-07T17:54:25.21+0530 [STG/0] ERR Failed to run all supply scripts: exit status 14
2021-10-07T17:54:25.22+0530 [STG/0] OUT Exit status 225

[gregorwolf]

Have you tried once again? As the URL https://dist.sapmachine.io/debian/sapmachine.old.key is reachable I guess it could be a temporary issue.

[ravindraP20]

yes, tried once again. The error is same.

2021-10-07T21:51:22.10+0530 [STG/0] OUT -----> Adding apt keys
2021-10-07T21:51:22.16+0530 [STG/0] ERR Warning: apt-key output should not be parsed (stdout is not a terminal)
2021-10-07T21:51:22.54+0530 [STG/0] ERR gpg: no valid OpenPGP data found.
2021-10-07T21:51:22.54+0530 [STG/0] ERR gpg: Total number processed: 0
2021-10-07T21:51:22.54+0530 [STG/0] ERR gpg: keyserver communications error: keyserver helper internal error
2021-10-07T21:51:22.54+0530 [STG/0] ERR gpg: keyserver internal error
2021-10-07T21:51:22.54+0530 [STG/0] ERR gpg: WARNING: unable to fetch URI https://dist.sapmachine.io/debian/sapmachine.old.key: keyserver error
2021-10-07T21:51:22.55+0530 [STG/0] OUT ERROR Error running supply: could not add apt key https://dist.sapmachine.io/debian/sapmachine.old.key
2021-10-07T21:51:22.55+0530 [STG/0] OUT
2021-10-07T21:51:22.55+0530 [STG/0] OUT Executing: /tmp/apt-key-gpghome.PWKc0ozLQc/gpg.1.sh --fetch-keys https://dist.sapmachine.io/debian/sapmachine.old.key
2021-10-07T21:51:22.55+0530 [STG/0] OUT gpgkeys: https fetch error 60: server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
2021-10-07T21:51:22.55+0530 [STG/0] OUT
2021-10-07T21:51:22.55+0530 [STG/0] OUT
2021-10-07T21:51:22.55+0530 [STG/0] OUT exit status 2
2021-10-07T21:51:22.55+0530 [STG/0] ERR Failed to run all supply scripts: exit status 14

[gregorwolf]

I can replicate the issue on my SAP BTP trial account. Are you deploying to a SAP BTP production environment? If yes please file an incident via SAP support.

[ravindraP20]

I am also deploying to SAP BTP trial account.

[gregorwolf]

I've created an issue: Server certificate verification failed for https://dist.sapmachine.io/ due to Let's Encrypt DST Root CA X3 expiration #65 in the apt-buildpack project.

[gregorwolf]

I've tried a build & deploy today. And it seems that SAP updated the trusted certificates so adding the SAPmachine keys is working now. Please give it a try with the latest main.