Plugin failing to work with Action Controller ( summerwinds )

[mkadricogito]

Hey Folks!
I am trying to use ur plugin in my eks based k8s cluster,
I am using a Github Action controller that spawns on demand Container as Self Hosted runner
When the Github action start ur plugin tries to build itself and fails with below error, any thoughts or ideas ?
This is my self hosted runner image Link

FYI : If i run a standalone alpine container in the cluster all typical cmd works, and this also works with default ubuntu based self hosted runner, so i dont think its the cluster

/usr/local/bin/docker build -t 60e226:1b6fc15462134e6fb8520b7df48cf7fd -f "/runner/_work/_actions/aquasecurity/trivy-action/master/Dockerfile" "/runner/_work/_actions/aquasecurity/trivy-action/master"
  Sending build context to Docker daemon  644.6kB
  
  Step 1/5 : FROM ghcr.io/aquasecurity/trivy:0.[3](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:3)7.1
  0.37.1: Pulling from aquasecurity/trivy
  c158987b0551: Pulling fs layer
  67a7d067ef7d: Pulling fs layer
  2ec1cdd[4](https://github.com/docker-images/actions/runs/4134005760/jobs/7147011143#step:3:4)8f38: Pulling fs layer
  fe[5](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:5)[6](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:6)e6aa[7](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:7)00e: Pulling fs layer
  c15[8](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:8)[9](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:9)87b0551: Download complete
  c158987b0551: Pull complete
  67a7d067ef7d: Verifying Checksum
  67a7d067ef7d: Download complete
  fe56e6aa700e: Download complete
  67a7d067ef7d: Pull complete
  2ec1cdd48f38: Verifying Checksum
  2ec1cdd48f38: Download complete
  2ec1cdd48f38: Pull complete
  fe56e6aa700e: Pull complete
  Digest: sha256:7c[16](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:16)7f7f3002948f1ec099555aa968bd8b8b097780603a38cc801fe965da0a69
  Status: Downloaded newer image for ghcr.io/aquasecurity/trivy:0.37.1
   ---> c3e68408cd24
  Step 2/5 : COPY entrypoint.sh /
   ---> 1f1da443ea86
  Step 3/5 : RUN apk --no-cache add bash curl npm
   ---> Running in 647f7f479cac
  fetch https://dl-cdn.alpinelinux.org/alpine/v3.[17](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:17)/main/x86_64/APKINDEX.tar.gz
  48ABC73BEB7F0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:[18](https://github.com//docker-images/actions/runs/4134005760/jobs/7147011143#step:3:18)89:
  WARNING: Ignoring https://dl-cdn.alpinelinux.org/alpine/v3.17/main: Permission denied
  fetch https://dl-cdn.alpinelinux.org/alpine/v3.17/community/x86_64/APKINDEX.tar.gz
  48ABC73BEB7F0000:error:0A000086:SSL routines:tls_post_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1889:
  WARNING: Ignoring https://dl-cdn.alpinelinux.org/alpine/v3.17/community: Permission denied
  ERROR: unable to select packages:
    bash (no such package):
      required by: world[bash]
    curl (no such package):
      required by: world[curl]
    npm (no such package):
      required by: world[npm]
  The command '/bin/sh -c apk --no-cache add bash curl npm' returned a non-zero code: 3
  Warning: Docker build failed with exit code 3, back off 6.807 seconds before retry.

[knqyf263]

Step 3/5 : RUN apk --no-cache add bash curl npm

The error seems to occur at this line. It doesn't look like our issue.

[maggix]

I had the same issue and had to do with a firewall preventing the private runner to reach the download site.
Add https://dl-cdn.alpinelinux.org to the allowed outgoing firewall rules.