Skip to content
This repository was archived by the owner on Nov 17, 2023. It is now read-only.

Conversation

@ChaiBapchya
Copy link
Contributor

@ChaiBapchya ChaiBapchya commented Apr 10, 2020

Fixes #18005

It doesn't occur on Master branch yet due to docker cache caching the Nvidia docker image for Ubuntu 14.04

This switches the dep link in /etc/apt/sources.list.d/*.list from https to http
Specifically 2 files exit
nvidia-ml.list and cuda.list

With this switch, TLS is no longer needed and hence the handshake error gets circumvented.

@leezu @zachgk Thanks for the help with investigation.
Pl review

@mxnet-bot
Copy link

Hey @ChaiBapchya , Thanks for submitting the PR
All tests are already queued to run once. If tests fail, you can trigger one or more tests again with the following commands:

  • To trigger all jobs: @mxnet-bot run ci [all]
  • To trigger specific jobs: @mxnet-bot run ci [job1, job2]

CI supported jobs: [unix-cpu, miscellaneous, sanity, clang, centos-gpu, windows-gpu, website, unix-gpu, windows-cpu, centos-cpu, edge]


Note:
Only following 3 categories can trigger CI :PR Author, MXNet Committer, Jenkins Admin.
All CI tests must pass before the PR can be merged.

@ChaiBapchya
Copy link
Contributor Author

@mxnet-label-bot add [build]

@ChaiBapchya
Copy link
Contributor Author

@mxnet-bot run ci [sanity]

To verify if builds are triggered on both jenkins dev & prod.

@mxnet-bot
Copy link

Jenkins CI successfully triggered : [sanity]

@zachgk
Copy link
Contributor

zachgk commented Apr 10, 2020

This is really not that great for security. Especially considering that this is for our release pipeline. I see two other options:

  1. We could try building and installing openssl from source so we get a newer version
  2. Ultimately, we will need to find a way to migrate this build away from using ubuntu 14.04 at some point. That would also resolve this problem too

@leezu
Copy link
Contributor

leezu commented Apr 11, 2020

@zachgk we'll move to CentOS as part of #17984

So you can regard this as temporary fix

@leezu leezu merged commit a1fa6a8 into apache:master Apr 11, 2020
@ChaiBapchya ChaiBapchya deleted the fix_gnutls_handshake_nvidia_docker_ubuntu1404 branch April 11, 2020 23:13
ChaiBapchya added a commit to ChaiBapchya/mxnet that referenced this pull request Apr 13, 2020
leezu pushed a commit that referenced this pull request Apr 14, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[nvidia-docker][1.6] apt-get update failing with gnutls_handshake() failed: Handshake failed

5 participants