Medium During the setup of the build for podvm-payload in Konflux, we've had build issues when using ubi-minimal as the base for the final image.
Using ubi9 itself helped, but it is a bigger image, and we never understood the root cause of the problem.
We need to understand what went wrong and return to using ubi-minimal if possible.
See this PR for details: https://github.com/openshift/cloud-api-adaptor/pull/19
The error message we had during build is:
[3/3] STEP 1/6: FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5 Trying to pull registry.access.redhat.com/ubi9/ubi-minimal:9.5... Getting image source signatures Checking if image destination supports signatures Copying blob sha256:5025173ec0b35686a33458b367c2a6e898c824f57a07925c25d26a0cfb5f2e50 Copying blob sha256:3333307dcd2e4279579646a05a5f99082a61a20906175240445b0e15f73b6d6e Copying config sha256:da8c0ca2c3f40c149598f1a3b5f3987911fb20187b079c677d3ed0aad2e431d0 Writing manifest to image destination Storing signatures [3/3] STEP 2/6: COPY --from=go_builder /artifacts /artifacts [3/3] STEP 3/6: COPY --from=rust_builder /artifacts /artifacts [3/3] STEP 4/6: RUN microdnf install -y tar gzip && microdnf clean all Downloading metadata... Downloading metadata... Downloading metadata... Downloading metadata... error: cannot update repo 'rhel-9-for-x86_64-baseos-rpms': Cannot download repomd.xml: Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/repodata/repomd.xml [error setting certificate file: /etc/rhsm/ca/redhat-uep.pem]; Last error: Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/repodata/repomd.xml [error setting certificate file: /etc/rhsm/ca/redhat-uep.pem] subprocess exited with status 1 subprocess exited with status 1 Error: building at STEP "RUN microdnf install -y tar gzip && microdnf clean all": exit status 1