Skip to content

Failed to update, as HTTPS_PROXY not available in containers for accessing internet locations #450

@BobSilent

Description

@BobSilent

Hi,

in order to access the internet my build machines require to have a proxy configured.
The machine have these environment variables set (just example)

HTTP_PROXY=http://proxy.example.com:80/
HTTPS_PROXY=http://proxy.example.com:80/
NO_PROXY=localhost,127.0.0.0/8,docker-registry.somecorporation.com

when I execute the cli, it can pull the needed images from ghcr and start

    cli | 2025/05/30 11:29:29 image ghcr.io/github/dependabot-update-job-proxy/dependabot-update-job-proxy:latest is already up to date
    cli | 2025/05/30 11:29:29 using image ghcr.io/github/dependabot-update-job-proxy/dependabot-update-job-proxy:latest at sha256:dbd71656cfc9eeb3881c666aab94a4a4f932018ab2150486102441690ec529f2
    cli | 2025/05/30 11:29:30 Failed to find credentials for GitHub container registry.
    cli | 2025/05/30 11:29:30 pulling image: ghcr.io/dependabot/dependabot-updater-nuget
    cli | 2025/05/30 11:31:04 using image ghcr.io/dependabot/dependabot-updater-nuget at sha256:9b7d54f883e07b8cfaa31a11e444074f214620299e9b04757d8a959e8c418538
  proxy | 2025/05/30 11:31:05 proxy starting, commit: a2dfe0ade1104d6b3bc90bb33a7f144d98d5c2dd

but then I only get these infos, and after 900s a timeout.

updater | Renaming '/home/dependabot/dependabot-updater/repo/NuGet.config' to '/home/dependabot/dependabot-updater/repo/NuGet.Config'
updater | 2025/05/30 11:31:11 INFO Discovery JSON path for workspace path [/] created for file [/home/dependabot/.dependabot/discovery_map.json] at location [/home/dependabot/.dependabot/discovery.1.json]
updater | running NuGet discovery:
updater | /opt/nuget/NuGetUpdater/NuGetUpdater.Cli discover --job-id cli --job-path /home/dependabot/dependabot-updater/job.json --repo-root /home/dependabot/dependabot-updater/repo --workspace / --output /home/dependabot/.dependabot/discovery.1.json
  proxy | 2025/05/30 11:31:15 [014] GET https://api.nuget.org:443/v3/index.json
  proxy | 2025/05/30 11:32:05 Skipping sending metrics because api endpoint is empty
  proxy | 2025/05/30 11:32:56 [016] GET https://api.nuget.org:443/v3/index.json
  proxy | 2025/05/30 11:33:05 Skipping sending metrics because api endpoint is empty
  **proxy | 2025/05/30 11:33:26 [014] WARN: Cannot read TLS response from mitm'd server dial tcp [2620:1ec:29:1::44]:443: connect: cannot assign requested address**
  proxy | 2025/05/30 11:34:05 Skipping sending metrics because api endpoint is empty
  proxy | 2025/05/30 11:34:37 [018] GET https://api.nuget.org:443/v3/index.json
  proxy | 2025/05/30 11:35:05 Skipping sending metrics because api endpoint is empty
  **proxy | 2025/05/30 11:35:07 [016] WARN: Cannot read TLS response from mitm'd server dial tcp [2620:1ec:29:1::44]:443: connect: cannot assign requested address**

when i manually start each container (ghcr.io/dependabot/dependabot-updater-nuget:latest) and (ghcr.io/github/dependabot-update-job-proxy/dependabot-update-job-proxy:latest) i can access the internet.

but when I attached to the containers created by CLI i do not have the PROXY environment variables set and cannot access e.g. https://api.nuget.org

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions