[CI] Download Zeppelin from the Apache CDN instead of the Lyra mirror - #3248
Merged
Merged
Conversation
mirror.lyrahosting.com has one backend serving an expired TLS certificate since 2026-08-04, which makes the nightly docker image build fail intermittently with curl exit code 60. Download from dlcdn.apache.org instead and fall back to archive.apache.org, since dlcdn only hosts current releases. Also pass --fail to curl so an HTTP error page is not saved as the archive, which lets the fallback trigger on 404.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Did you read the Contributor Guide?
Is this PR related to a ticket?
[CI] my subjectWhat changes were proposed in this PR?
The nightly docker image build has been failing intermittently since 2026-08-05 with:
mirror.lyrahosting.comsits behind a load balancer where one backend has been serving an expired TLS certificate (expired 2026-08-04); whether a givencurlhits the good or bad backend is a coin flip, so the amd64 and arm64 build stages can fail independently.Changes to
docker/install-zeppelin.sh:dlcdn.apache.org(the Apache CDN) instead of the third-party Lyra mirror.archive.apache.orgif the CDN download fails, since dlcdn only hosts current releases. The sha512 checksum is still fetched from the Apache archive and verified either way.--failto curl (matchinginstall-spark.sh) so an HTTP error page is not saved as the tarball and a 404 correctly triggers the fallback.How was this patch tested?
dlcdn.apache.organdarchive.apache.orgservezeppelin-0.12.0-bin-netinst.tgz(HTTP 200).bash -nand shellcheck (pre-commit) pass.Did this PR include necessary documentation updates?