Skip to content

Fix SAS Docker build: replace unreachable internal EPEL mirror#405

Merged
yonghaoy merged 1 commit into
masterfrom
fix/sas-epel-mirror
May 12, 2026
Merged

Fix SAS Docker build: replace unreachable internal EPEL mirror#405
yonghaoy merged 1 commit into
masterfrom
fix/sas-epel-mirror

Conversation

@yonghaoy
Copy link
Copy Markdown
Contributor

Summary

  • The SAS base image (sas-analytics-pro) includes a yum repo (crackles-epel-everything) pointing to linuxmirror.unx.sas.com, an internal SAS mirror unreachable from our build environment
  • Docker builds fail at yum install because DNS cannot resolve the mirror host
  • This removes the unreachable repo config and installs epel-release to provide a working public EPEL source

Test plan

  • Verify the SAS devcontainer Docker image builds successfully
  • Confirm jq, curl, fuse, fuse-libs, tar, wget, sudo, git, and gcsfuse all install without errors

🤖 Generated with Claude Code

@yonghaoy yonghaoy requested review from a team as code owners May 12, 2026 19:00
@yonghaoy yonghaoy force-pushed the fix/sas-epel-mirror branch from 9bf1657 to 2381342 Compare May 12, 2026 19:02
@yonghaoy yonghaoy requested a review from pantherman594 May 12, 2026 19:02
@yonghaoy yonghaoy force-pushed the fix/sas-epel-mirror branch 3 times, most recently from 24487f7 to f6b45ff Compare May 12, 2026 19:35
The SAS base image ships yum repos pointing to linuxmirror.unx.sas.com,
which is unreachable outside the SAS internal network. The original
Dockerfile was merged without a build test (smoke test skipped in CI)
and had several latent issues.

Fixes:
- Disable all SAS-internal repos and enable public Red Hat UBI + EPEL
- Add --allowerasing to handle curl-minimal/curl conflict in base image
- Add --allowerasing to apt-get shim so runtime installs also work
- Remove jq and tar from install list (already in the base image)
- Fix user creation: create aou as a separate unprivileged user (auto
  UID) instead of conflicting with existing sas user at UID 1001.
  Use GID 1100 for aougroup matching the original Helm chart.
- Fix docker-compose.yaml tmpfs to use uid=1002,gid=1100
- Install Java 17 (headless) for Workbench CLI; SAS continues using
  Java 11 via its hardcoded JAVA_HOME

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@yonghaoy yonghaoy force-pushed the fix/sas-epel-mirror branch from f6b45ff to c8f65bd Compare May 12, 2026 19:47
@yonghaoy yonghaoy merged commit 495d48e into master May 12, 2026
3 checks passed
@yonghaoy yonghaoy deleted the fix/sas-epel-mirror branch May 12, 2026 21:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants