Clair image keeps restarting due to https://git.launchpad.net/ubuntu-cve-tracker/': 503 error

[Tejaswini]

Hi,

 CVE tracker repository is no longer accessible via the https url. We are using clair image in our k8s cluster and docker image is keeps getting restarted since it's failing at pulling ubuntu-cve-tracker with 503 errors.

git clone https://git.launchpad.net/ubuntu-cve-tracker with 503 errors. /
Cloning into 'ubuntu-cve-tracker'...
fatal: unable to access 'https://git.launchpad.net/ubuntu-cve-tracker/': The requested URL returned error: 503

{"Event":"could not pull ubuntu-cve-tracker repository","Level":"error","Location":"ubuntu.go:174","Time":"2021-09-16 12:15:58.994075","error":"exit status 128","output":"Cloning into '.'...\nfatal: unable to access 'https://git.launchpad.net/ubuntu-cve-tracker/': The requested URL returned error: 503\n"}
{"Event":"an error occured when fetching update","Level":"error","Location":"updater.go:246","Time":"2021-09-16 12:15:58.994695","error":"could not download requested resource","updater name":"ubuntu"}

Can you have a look please?

Thanks,
Tejaswini D V

[Alex Murray (alexmurray)]

This is a known issue - the large number of clair users all trying to repeatedly clone the ubuntu-cve-tracker git repo puts a large strain on the git hosting so this is intentionally throttled server-side - we tried to help clair move to using our OVAL data instead https://github.com/quay/clair/issues/804 - but there was not much interest from the clair developers on this - so there is not a lot we can do unfortunately. Please work with the clair developers to help move to the OVAL data source instead.

[Tejaswini (tejuvmware)]

Thank you for the update alex.