<div dir="auto">Bundler only uses RubyGems so that's not where the Alpine packages are being installed from. After looking a bit more closely at the `jekyll/builder:3` Docker image and the source repository for it at <a href="https://github.com/envygeeks/jekyll-docker">https://github.com/envygeeks/jekyll-docker</a>, I'd encourage you to fork it to fix those issues. The source code for that Docker image tag is about 3 years old and there may be some other issues with it beyond the outdated package signature methods.<div dir="auto"><br></div><div dir="auto">Sasha</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 20 Jul 2022, 11:12 Edmond Lepedus, <<a href="mailto:ed.lepedus@googlemail.com">ed.lepedus@googlemail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space">Hi LRUG,<br><br>Does anyone know if Bundler on Alpine installs native APKs, and if so, how I can get it to install dependencies from the testing repo from an older version of Alpine?<br><br>I appreciate that might be a stupid question, and I may be barking up the wrong tree entirely, but I’m drawing a bit of a blank as to what else might be going on. <div><br></div><div>Basically, I built a Jekyll site a few years ago, and it’s been happily building & deploying through GitLab CI since. The build step uses the `jekyll/builder:3`image, but adds various dependencies to support jekyll-assets/mini_magick/image_optim etc.</div><div><br></div><div>A couple of days ago, these builds started failing, complaining about untrusted signatures. I believe this is due to Alpine version changes/new signatures on the repositories. The Jekyll Builder image uses Alpine 3.10 under the hood, and this seems to ship with outdated keys. As a stopgap mitigation, I’m trying to install the dependencies with —allow-untrusted flag, which works fine for my scripted `apk add <package> ` steps, which all install correctly. However, the `bundle install` step appears to run its own `apk fetch` which ignores the untrusted repositories, then errors because it can’t find the tags. The output looks like this:</div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><span style="box-sizing:border-box;white-space:pre-wrap;font-weight:600;color:rgb(30,255,30)">$ bundle install --path ../gems</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L237" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L237" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">237</a><span style="box-sizing:border-box;white-space:pre-wrap">fetch <a href="http://dl-cdn.alpinelinux.org/alpine/v3.10/main/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://dl-cdn.alpinelinux.org/alpine/v3.10/main/x86_64/APKINDEX.tar.gz</a></span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L238" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L238" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">238</a><span style="box-sizing:border-box;white-space:pre-wrap">fetch <a href="http://dl-cdn.alpinelinux.org/alpine/v3.10/community/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://dl-cdn.alpinelinux.org/alpine/v3.10/community/x86_64/APKINDEX.tar.gz</a></span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L239" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L239" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">239</a><span style="box-sizing:border-box;white-space:pre-wrap">fetch <a href="http://uk.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://uk.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz</a></span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L240" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L240" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">240</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: Ignoring <a href="http://uk.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://uk.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz</a>: UNTRUSTED signature</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L241" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L241" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">241</a><span style="box-sizing:border-box;white-space:pre-wrap">fetch <a href="http://uk.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://uk.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz</a></span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L242" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L242" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">242</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: Ignoring <a href="http://uk.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://uk.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz</a>: UNTRUSTED signature</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L243" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L243" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">243</a><span style="box-sizing:border-box;white-space:pre-wrap">fetch <a href="http://uk.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://uk.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz</a></span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L244" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L244" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">244</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: Ignoring <a href="http://uk.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz" rel="nofollow noopener noreferrer noreferrer" style="box-sizing:border-box;color:inherit!important" target="_blank">http://uk.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz</a>: UNTRUSTED signature</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L245" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L245" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">245</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'advancecomp@community' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L246" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L246" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">246</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'gifsicle@community' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L247" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L247" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">247</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'jhead@testing' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L248" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L248" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">248</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'jpegoptim@community' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L249" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L249" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">249</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'libjpeg@edge' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L250" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L250" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">250</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'libjpeg-turbo-utils@edge' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L251" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L251" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">251</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'optipng@community' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L252" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L252" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">252</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'pngcrush@edge' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L253" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L253" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">253</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'pngquant@edge' does not exist</span></div><div style="box-sizing:border-box;padding:1px 8px 1px 55px;min-height:1.25rem;color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;font-variant-ligatures:normal;background-color:rgb(255,255,255)"><a id="m_-1389374158269109609L254" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L254" style="box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">254</a><span style="box-sizing:border-box;white-space:pre-wrap">WARNING: The repository tag for world dependency 'ruby-bundler@edge' does not exist</span></div><div><a id="m_-1389374158269109609L255" href="https://gitlab.com/cgntv/idr-jekyll/-/jobs/2743557060#L255" style="font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;background-color:rgb(255,255,255);box-sizing:border-box;color:rgb(127,128,127);text-decoration:none;font-size:0.875rem;padding:0px 1em 0px 8px;min-width:50px;display:inline-block!important;text-align:right!important" target="_blank" rel="noreferrer">255</a><span style="color:rgb(0,0,0);font-family:Menlo,"DejaVu Sans Mono","Liberation Mono",Consolas,"Ubuntu Mono","Courier New","andale mono","lucida console",monospace;font-size:13px;background-color:rgb(255,255,255);box-sizing:border-box;white-space:pre-wrap">ERROR: Not committing changes due to missing repository tags. Use --force-broken-world to override.</span> </div><div><br></div><div>Any idea how I can get this to work, without suddenly upgrading to Jekyll 4 and its newer builder image?</div><div><br></div><div>Thanks in advance,</div><div>Ed</div></div>_______________________________________________<br>
Chat mailing list<br>
<a href="mailto:Chat@lists.lrug.org" target="_blank" rel="noreferrer">Chat@lists.lrug.org</a><br>
Archives: <a href="http://lists.lrug.org/pipermail/chat-lrug.org" rel="noreferrer noreferrer" target="_blank">http://lists.lrug.org/pipermail/chat-lrug.org</a><br>
Manage your subscription: <a href="http://lists.lrug.org/options.cgi/chat-lrug.org" rel="noreferrer noreferrer" target="_blank">http://lists.lrug.org/options.cgi/chat-lrug.org</a><br>
List info: <a href="http://lists.lrug.org/listinfo.cgi/chat-lrug.org" rel="noreferrer noreferrer" target="_blank">http://lists.lrug.org/listinfo.cgi/chat-lrug.org</a><br>
</blockquote></div>