yum.dockerproject.org and apt.dockerproject.org are returning 403 errors

[rodrigc]

I I try to access these URL's I get 403 errors:

• https://yum.dockerproject.org/repo/main/centos/7/repodata/repomd.xml
• https://yum.dockerproject.org
• https://apt.dockerproject.org

I need these to install Docker

[rodrigc]

Same issue as kubernetes-sigs/kubespray#5542

[rodrigc]

@thaJeztah @jessfraz ?

[rptaylor]

I just noticed this too. On a cluster that was installed successfully ~ a month ago, the yum repo is now returning 403 errors. So it looks like an issue with the yum repo servers.

[cpuguy83]

Pinging some folks at Docker.
Please note these repos are deprecated, as far as I am aware, for some time in favor of downloads.docker.com.

[seemethere]

@cpuguy83 is correct, the dockerproject repos were deprecated a long time ago and are no longer recommended to be used as they have not been updated for almost 3 years.

I would highly recommend you switch all of your workloads to use download.docker.com

[rodrigc]

@seemethere if you know of one, can you point me to an announcement which mentioned that these repos are deprecated?

whois -h whois.gandi.net dockerproject.org

shows that the domain is registered to Docker, Inc.
so maybe someone at Docker can shed some light?

[cpuguy83]

They were deprecated the day Docker CE was first released released (March 2017-ish).

[seemethere]

Since I am the former release engineer for all of these artifacts I can definitively say that any dockerproject.org repo is no longer supported.

Sorry if there was no communication for that during my time at Docker but since it was not updated for the past 3 years I had assumed an announcement had already been made about about it no longer being supported. This announcement may or may not still exist in some form somewhere back when we announced the existence of download.docker.com.

The new place to download docker packages (which are up to date with security patches and are endorsed for use by the kubernetes community) is download.docker.com.

I’m sorry for the inconvenience this may have caused you but these packages are offered up for free and hosting/serving them costs real money so I could understand why Docker Inc. may not want to host them anymore on repositories they no longer maintain.

[StefanScherer]

The docs how to install Docker can be found at
https://docs.docker.com/install/linux/docker-ce/ubuntu/ or
https://docs.docker.com/install/linux/docker-ce/centos/
Here you can find the current repo names.

[rodrigc]

@seemethere unfortunately when stuff like dockerproject.org is set up, these types of things get buried in configs and scripts, and as long as the service is still up, people will still use it.

It would be nice if there is an official announcement from Docker as to the status of the dockerproject.org web sites, just to give people an official HEADSUP.

There are a lot of usages of these repos out there:

• https://github.com/search?q=yum.dockerproject.org&type=Code
• https://github.com/search?q=apt.dockerproject.org&type=Code

[nickjj]

These types of things get buried in configs and scripts, and as long as the service is still up, people will still use it.

Indeed. I just had 40 people email me today saying the link doesn't work anymore because I was referencing it somewhere.

Is anyone open to hosting a mirror? There's one at https://web.archive.org/web/20181011063302/http://apt.dockerproject.org/repo/pool/main/d/docker-engine/ (thanks @StefanScherer) to grab the debs but depending on that seems a little sketchy long term.

[thaJeztah]

Use the new location; download.docker.com

packages on the dockerproject.org repository are 3 years old, all of those versions have known vulnerabilities and should not be used

[nickjj]

The new location is missing a bunch of versions.

For example, I'm interested in docker-engine_1.8.3-0~trusty_amd64.deb which doesn't seem to be listed at https://download.docker.com/linux/ubuntu/dists/trusty/pool/stable/amd64/ but was available in the previous location.

[thaJeztah]

that's a four year old release; I hope you're not running that for anything critical as there's critical vulnerabilities in those releases 😱

[tonistiigi]

The repositories should be working again now. Note that these remain deprecated and everyone should move to download.docker.com . We need to set up some timeline for the actual removal.