Error loading shared library ld-linux-x86-64.so.2

[awelburn]

Running Azure Artifacts Credential Provider in Docker was fine until this morning:

FROM mcr.microsoft.com/dotnet/sdk:8.0-alpine AS build-env
RUN wget -qO- https://aka.ms/install-artifacts-credprovider.sh | sh

No version specified, using latest release.
Fetching versioned release install script from https://github.com/microsoft/artifacts-credprovider/releases/latest/download/installcredprovider.sh
Fetching release metadata from https://api.github.com/repos/microsoft/artifacts-credprovider/releases/latest
Validating script content with SHA256 checksum
Executing install script...
INFO: Calculated artifacts-credprovider RuntimeIdentifier: linux-x64
INFO: Creating the nuget plugin directory (i.e. /root/.nuget/plugins).
INFO: Downloading from https://github.com/Microsoft/artifacts-credprovider/releases/latest/download/Microsoft.linux-x64.NuGet.CredentialProvider.tar.gz
INFO: credential provider netcore plugin extracted to /root/.nuget/
Installation completed with exit code: 0

RUN dotnet restore -s https://api.nuget.org/v3/index.json -s $INTERNAL_NUGET_URL

Determining projects to restore...
Failed to load /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libhostpolicy.so, error: Error loading shared library ld-linux-x86-64.so.2: No such file or directory (needed by /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libhostpolicy.so)
An error occurred while loading required library libhostpolicy.so from [/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/]
/usr/share/dotnet/sdk/8.0.417/NuGet.targets(174,5): error : Problem starting the plugin '/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/CredentialProvider.Microsoft.dll'. Pipe is broken.

I've unblocked my teams by pinning the version in the Dockerfile, so we're working again:

ENV AZURE_ARTIFACTS_CREDENTIAL_PROVIDER_VERSION=v1.4.1

I couldn't see anything in the release notes that suggested we're doing something unsupported?
Is there a new prerequisite when running within an alpine image, for example?

[LucaswareCaldwell]

Similar issue seen here with Docker builds (using mcr.microsoft.com/dotnet/sdk:6.0-alpine base image) (running on Azure Pipelines ubuntu-22.04 host image):

[build 2/22] RUN sh -c "$(curl -fsSL https://aka.ms/install-artifacts-credprovider.sh)"%22)
0.476 No version specified, using latest release.
0.476 Fetching versioned release install script from https://github.com/microsoft/artifacts-credprovider/releases/latest/download/installcredprovider.sh
0.683 Fetching release metadata from https://api.github.com/repos/microsoft/artifacts-credprovider/releases/latest
0.940 Validating script content with SHA256 checksum
0.942 Executing install script...
0.944 INFO: Calculated artifacts-credprovider RuntimeIdentifier: linux-x64
0.944 INFO: Creating the nuget plugin directory (i.e. /root/.nuget/plugins).
0.946 INFO: Downloading from https://github.com/Microsoft/artifacts-credprovider/releases/latest/download/Microsoft.linux-x64.NuGet.CredentialProvider.tar.gz
2.561 INFO: credential provider netcore plugin extracted to /root/.nuget/
2.561 Installation completed with exit code: 0
DONE 2.9s

[build 8/22] RUN dotnet build "Libraries.sln" -c Release -o /app/build
0.284 MSBuild version 17.3.4+a400405ba for .NET
1.023 Failed to load /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libhostpolicy.so, error: Error loading shared library ld-linux-x86-64.so.2: No such file or directory (needed by /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libhostpolicy.so)
1.023 An error occurred while loading required library libhostpolicy.so from [/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/]
1.063 [NuGet Manager] [Error] Problem starting the plugin '/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/CredentialProvider.Microsoft.dll'. Pipe is broken.
3.734 Determining projects to restore...
5.928 Failed to load /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libhostpolicy.so, error: Error loading shared library ld-linux-x86-64.so.2: No such file or directory (needed by /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libhostpolicy.so)
5.928 An error occurred while loading required library libhostpolicy.so from [/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/]
6.036 /usr/share/dotnet/sdk/6.0.428/NuGet.targets(132,5): error : Problem starting the plugin '/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/CredentialProvider.Microsoft.dll'. Pipe is broken.

[fstugren]

A lot of build pipelines were broken by this change. I also opened this issue https://github.com/microsoft/artifacts-credprovider/issues/620.
Cred provider owners, please provide a solution, things are breaking left and right.

[embetten]

Starting with v2.0.0, the install scripts default to auto‑detecting the platform and installing the self‑contained artifacts‑credprovider. For platforms that don’t support the self‑contained binaries, or when explicitly requested, the scripts fall back to the .NET 8 non‑self‑contained version (previously defaulted to .NET 6 in 1.4.1).

On Alpine, it looks like there are additional runtime requirements for self‑contained .NET apps, particularly when dotnet itself is not installed via a package manager. Microsoft documents these dependencies here:
https://learn.microsoft.com/dotnet/core/install/linux-alpine?tabs=dotnet8#dependencies

To unblock this your scenario, it there are a couple options:

1. (Preferred) Migrate to the dotnet tool instead of using the install scripts. However, this has .NET 9.0.2+ requirement for the nuget restore.
2. Install the Alpine dependencies for self‑contained .NET apps
   This enables the self‑contained credprovider to run on Alpine and avoids future breaks when we need to move to newer .NET runtimes (e.g., .NET 10).
3. Force installation of the non‑self‑contained .NET 8 version
   Use ARTIFACTS_CREDENTIAL_PROVIDER_NON_SC=1 with the .sh script, or pass -NonSelfContained when using the PowerShell installer.
4. Pin to the previous behavior (v1.4.1)
   If you prefer the earlier default version, you can pin it via:
   ENV AZURE_ARTIFACTS_CREDENTIAL_PROVIDER_VERSION=v1.4.1

Let us know if any of these don’t work for your Alpine setup. We can update the 2.0.0 release discussion for other alpine users.

[NordiskaRobin]

@embetten

4. Pin to the previous behavior (v1.4.1)
   If you prefer the earlier default version, you can pin it via:
   ENV AZURE_ARTIFACTS_CREDENTIAL_PROVIDER_VERSION=v1.4.1

Let us know if any of these don’t work for your Alpine setup. We can update the 2.0.0 release discussion for other alpine users.

This solution works...

But im not super happy that all my companies pipelines got killed today. Feel kind of blindsided with this breaking change. You basicly bricked all pipelines with the official mcr.microsoft.com/dotnet/sdk:8.0-alpine image in the build phase...

I feel like it would be logical for you to do a rollback or add like

# Detect Alpine Linux and use version 1.4.1 for compatibility
if [ -f /etc/alpine-release ] && [ -z "${AZURE_ARTIFACTS_CREDENTIAL_PROVIDER_VERSION}" ]; then
  echo "Alpine Linux detected, using version 1.4.1 for compatibility"
  AZURE_ARTIFACTS_CREDENTIAL_PROVIDER_VERSION="1.4.1"
fi

in the script for https://aka.ms/install-artifacts-credprovider.sh

[embetten]

We’re not planning to roll back the 2.0.0 release for this issue at this time. Many users have already upgraded and rolling back risks further instability. The proposed changes to the scripts to pin 1.4.1 for alpine or hard‑coding legacy behavior also introduces long‑term maintenance cost to the scripts and won’t prevent future breaking changes.

If you need to stay on a previous version or non-self-contained compatible asset, the supported version pinning and ARTIFACTS_CREDENTIAL_PROVIDER_NON_SC options remain available. We’ll continue improving the documentation to make the upgrade path clearer.

[awelburn]

Thanks for the feedback.

1. It would be difficult to move off the sdk:8.0-alpine image (political rather than technical!)

2. I've read the documentation and tried this:

RUN apk add --upgrade --no-cache \
        ca-certificates \
        libgcc \
        libssl3 \
        libstdc++ \
        zlib \
        icu-libs \
        icu-data-full \
        tzdata \
        krb5 \
        gcompat

but now the error message is

Failed to load /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libcoreclr.so, error: Error relocating /root/.nuget/plugins/netcore/CredentialProvider.Microsoft/libcoreclr.so: __isnan: symbol not found
/usr/share/dotnet/sdk/8.0.417/NuGet.targets(174,5): error : Problem starting the plugin '/root/.nuget/plugins/netcore/CredentialProvider.Microsoft/CredentialProvider.Microsoft.dll'. Plugin 'CredentialProvider.Microsoft' failed within 0.818 seconds with exit code 139.

Would be helpful to have a minimal working Dockerfile as an example.

3. Haven't tried this, but doesn't seem like a long-term solution(?)

4. This is what we're currently doing, but would like to move to the latest version when possible.

[awelburn]

For longer-term support, I've also added a feature to the download script : #625
By setting AZURE_ARTIFACTS_CREDENTIAL_PROVIDER_VERSION="2", this resolves to the latest 2.x without pinning to an exact x.y.z version.

[mark-hopper]

We too also got blind-sided by this change, I was scratching my head for the last couple of hours as nothing had changed within our docker files

[paibrahim]

What worked for me was running the following that uses the previous version credential provider in the Dockerfile:

RUN curl -L https://raw.githubusercontent.com/microsoft/artifacts-credprovider/3c3ac17018f437ac773b126ebb87fc9accaeef16/helpers/installcredprovider.sh | sh

[whiskycompiler]

Using the dotnet tool as suggested by @embetten here worked for me in a docker build setup (dotnet 10 alpine).

I also needed to add the dotnet tool directory to the path and updated the legacy env var VSS_NUGET_EXTERNAL_FEED_ENDPOINTS to ARTIFACTS_CREDENTIALPROVIDER_EXTERNAL_FEED_ENDPOINTS (not sure if the old one still works).

# add nuget tool folder to path
ENV PATH="$PATH:/root/.dotnet/tools"

# install credential provider for private nuget feed usage
RUN dotnet tool install --global Microsoft.Artifacts.CredentialProvider.NuGet.Tool

# set env var with secrets
ENV ARTIFACTS_CREDENTIALPROVIDER_EXTERNAL_FEED_ENDPOINTS=<see docs how to do this>

In the main readme is a link to this page under the headline "Docker containers" which seems outdated now. If someone were to follow the instructions on this page they will probably end up with the issues mentioned here. So it might be a good idea to update the link or the linked page if possible.

[terry-brown-26870]

Same problem here... just wanted to point out we are trying to install the credential provider on the Microsoft .NET SDK alpine image, and it fails.

[terry-brown-26870]

Using the 1.4.1 ENV did not work, getting a file not found:

#5 [2/2] RUN apk add --no-cache libintl bash curl && wget -q -O /tmp/installcredprovider.sh https://raw.githubusercontent.com/Microsoft/artifacts-credprovider/master/helpers/installcredprovider.sh && bash /tmp/installcredprovider.sh && rm /tmp/installcredprovider.sh
#5 0.602 (1/4) Installing libncursesw (6.5_p20251123-r0)
#5 0.617 (2/4) Installing readline (8.3.1-r0)
#5 0.631 (3/4) Installing bash (5.3.3-r1)
#5 0.655 Executing bash-5.3.3-r1.post-install
#5 0.658 (4/4) Installing libintl (0.24.1-r1)
#5 0.673 Executing busybox-1.37.0-r30.trigger
#5 0.680 OK: 61.0 MiB in 41 packages
#5 0.758 INFO: Calculated artifacts-credprovider RuntimeIdentifier: linux-x64
#5 0.759 INFO: Creating the nuget plugin directory (i.e. /root/.nuget/plugins).
#5 0.761 INFO: Downloading from https://github.com/Microsoft/artifacts-credprovider/releases/download/v1.4.1/Microsoft.linux-x64.NuGet.CredentialProvider.tar.gz
#5 0.880 tar: invalid magic
#5 0.881 tar: short read
#5 0.881 tar: plugins/netcore: not found in archive

[kalebasiyakup]

Hi,

I solved the problem by directly using.
https://github.com/microsoft/artifacts-credprovider/releases/download/v1.4.1/installcredprovider.sh

RUN curl --proto '=https' --tlsv1.2 -fsSL https://github.com/microsoft/artifacts-credprovider/releases/download/v1.4.1/installcredprovider.sh | sh