Garry Tan 8e51fafb3a fix(ci): use HTTP for Hetzner apt mirror (base image lacks ca-certificates) ...

Previous commit switched to https://mirror.hetzner.com/... which proved the
mirror is reachable and routes correctly (no more 90s timeouts), but exposed
a chicken-and-egg: ubuntu:24.04 ships without ca-certificates, and that's
exactly the package we're installing. Result: "No system certificates
available. Try installing ca-certificates."

Fix: use http:// for the Hetzner mirror. Apt's security model verifies
package integrity via GPG-signed Release files, not TLS, so HTTP here is
no weaker than the upstream defaults (Ubuntu's official sources also
default to HTTP for the same reason).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-17 14:44:46 +08:00

..

Dockerfile.ci

fix(ci): use HTTP for Hetzner apt mirror (base image lacks ca-certificates)

2026-04-17 14:44:46 +08:00