1720875 - Pontoon build fails in Docker on M1 MacBooks due to segfault in curl

Status: RESOLVED MOVED

(Webtools Graveyard :: Pontoon, defect, P3)

Description

[Eemeli Aro [:eemeli]]

The issue is mentioned in the Docker Desktop release notes:

On Apple Silicon in native arm64 containers, older versions of libssl in debian:buster, ubuntu:20.04 and centos:8 will segfault when connected to some TLS servers, for example curl https://dl.yarnpkg.com. The bug is fixed in newer versions of libssl in debian:bullseye, ubuntu:21.04 and fedora:35.

The Pontoon Docker image uses python:3.8-buster as a base, and apparantely all current python images are themselves based on buster images.

As a workaround, forcing the platform to linux/amd64 appears to allow the build to succeed, as it's then emulated:

--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,6 +5,7 @@ version: "2"
 services:
   # Webapp
   webapp:
+    platform: linux/amd64
     build:
       context: .
       dockerfile: ./docker/Dockerfile

Comment 1

[GitHub Bugzilla PR Linker]

Attachment: Link to GitHub pull-request: https://github.com/mozilla/pontoon/pull/1973

Comment 2

[GitHub Bugzilla PR Linker]

Attachment: Link to GitHub pull-request: https://github.com/mozilla/pontoon/pull/2008

Comment 3

[BMO Automation]

*This bug has been moved to GitHub.*

*Please check it out on https://github.com/mozilla/pontoon/issues.*