Uploaded image for project: 'Red Hat build of Keycloak'
  1. Red Hat build of Keycloak
  2. RHBK-3013

Building docker image of keycloak with curl using 2 stage process hangs [GHI#38801]

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      Before reporting an issue

      [x] I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

      Area

      core

      Describe the bug

      dnf hangs when doing a two stage build of keycloak to include curl on running scriplet glibc-2.34-125.el9_5.3.x86_64.

      This works properly on a Windows machine but fails on AWS Linux 2 server. I have tried multiple AWS servers, all fail.

      # create builder image with curl properly installed
      FROM registry.access.redhat.com/ubi9 AS ubi-micro-build
      RUN mkdir -p /mnt/rootfs
      RUN dnf clean all  # troubleshooting step
      RUN dnf upgrade # troubleshooting step
      RUN dnf install --installroot /mnt/rootfs curl --releasever 9 --setopt install_weak_deps=false --nodocs -y && \
      

      dnf --installroot /mnt/rootfs clean all && \
      rpm --root /mnt/rootfs -e --nodeps setup

      # starting with base keycloak image
      FROM quay.io/keycloak/keycloak:26.1
      # copy from build image to custom image
      USER root
      COPY --from=ubi-micro-build /mnt/rootfs /
      
      # continue with snc specific files
      USER 1000
      
      RUN mkdir /opt/keycloak/data/import
      COPY snc-export.json /opt/keycloak/data/import
      

      I can't include errors as the process never completes. I let it run for 10 minutes. Here is a screen shot of the process hanging.

      !Image

      Version

      26.1

      Regression

      [ ] The issue is a regression

      Expected behavior

      When using the recommended approach to add utilities, the build completes and the utility is available.

      Actual behavior

      dnf processes hangs on installing glibc-2.34-125.el9_5.3.x86_64

      How to Reproduce?

      Spin up a AWS Linux 2 host on EC2, upload Dockerfile and run docker build --tag keycloak-snc --no-cache --pull .

      Anything else?

      No response

              Unassigned Unassigned
              pvlha Pavel Vlha
              Keycloak Cloud Native
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: