Generate Ubuntu 18.04 | 20.04 image fails certificate error

[wmayvis]

A couple of weeks, I can't generate new ubuntu 1804 or ubuntu 2004 images.
The execution failes due certificate errors. See build log.

[al-cheb]

Use the main brach to build images.

[wmayvis]

The first step I will do a git clone, so I use the main branch.
Cloning into 'virtual-environments'...
Already on 'main'
Your branch is up to date with 'origin/main'.
Already up to date.

It looks like that ftp.byfly.by an alternated host is that is hosted in Belarus and that should maybe block.

[mikhailkoliada]

I've just checked our regular builds and found nothing suspicious, all the downloading is happening using the download.opensuse.org address, so might be repo owners have some kind of load balancing/round robin, do failed builds always refer to byfly.by?

[wmayvis]

There is also a lot of certificate issues.
Err:14 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04 crun 100:1.2-2
azure-arm: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: ::ffff:146.112.61.104 443]
azure-arm: Err:22 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04 podman 100:3.4.2-5
azure-arm: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: ::ffff:146.112.61.104 443]
azure-arm: Err:23 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04 skopeo 100:1.5.0-3
azure-arm: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: ::ffff:146.112.61.104 443]
azure-arm: Err:25 https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04 containernetworking-plugins 100:1.1.1~1
azure-arm: Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: ::ffff:146.112.61.104 443]
azure-arm: Fetched 13.5 MB in 10s (1287 kB/s)

[al-cheb]

Looks like firewall blocking - https://support.umbrella.com/hc/en-us/articles/115001357688-What-are-the-Cisco-Umbrella-Block-Page-IP-Addresses-