Comment 3 for bug 1694121

Revision history for this message
Chris West (faux) wrote :

The linked bug report perfectly describes what I am seeing, but, if you want something more specific:

On the apt-cacher-ng machine, running the attached config without the workaround, I cannot fetch .asc files, such as this one from openssl:

% curl http://localhost:3142/debian/pool/main/o/openssl/openssl_1.1.0f.orig.tar.gz.asc
<!DOCTYPE html>
<html lang="en"><head><title>403 Forbidden file type or location</title>
...

This is hit by "apt source" in sid. You can test this with Docker, if Docker is your thing:

# In an up to date-ish Debian Sid machine...
faux@astoria:~% docker pull debian:sid && docker run -it debian:sid
sid: Pulling from library/debian
Digest: sha256:4a9698e05982d5b3a26c799a480e5c3aae58d1ad6b02605a14ec928fa8cf4b6e
Status: Image is up to date for debian:sid

# Configure the proxy (here "urika" is the name of the machine running apt-cacher-ng),
# then run apt update, then try and apt source openssl:
root@cff2c85d3dea:/# echo 'Acquire::http { Proxy "http://urika:3142"; };' > /etc/apt/apt.conf.d/1694121acng && sed -i 'p;s/^deb/&-src /' /etc/apt/sources.list && apt update && apt source openssl

Get:1 http://deb.debian.org/debian sid InRelease [243 kB]
Get:2 http://deb.debian.org/debian sid/main Sources [9734 kB]
Get:3 http://deb.debian.org/debian sid/main amd64 Packages [10.1 MB]
Fetched 20.1 MB in 1s (17.5 MB/s)
Reading package lists... Done
Building dependency tree... Done
23 packages can be upgraded. Run 'apt list --upgradable' to see them.

Reading package lists... Done
NOTICE: 'openssl' packaging is maintained in the 'Svn' version control system at:
svn://anonscm.debian.org/pkg-openssl/openssl/
Need to get 5335 kB of source archives.
Get:1 http://deb.debian.org/debian sid/main openssl 1.1.0f-1 (dsc) [2583 B]
Get:2 http://deb.debian.org/debian sid/main openssl 1.1.0f-1 (tar) [5278 kB]
Err:3 http://deb.debian.org/debian sid/main openssl 1.1.0f-1 (asc)
  403 Forbidden file type or location: http://deb.debian.org/debian/pool/main/o/openssl/openssl_1.1.0f.orig.tar.gz.asc
Get:4 http://deb.debian.org/debian sid/main openssl 1.1.0f-1 (diff) [53.5 kB]
Fetched 5334 kB in 0s (83.2 MB/s)
W: Download is performed unsandboxed as root as file 'openssl_1.1.0f-1.dsc' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
E: Failed to fetch http://deb.debian.org/debian/pool/main/o/openssl/openssl_1.1.0f.orig.tar.gz.asc 403 Forbidden file type or location: http://deb.debian.org/debian/pool/main/o/openssl/openssl_1.1.0f.orig.tar.gz.asc
E: Failed to fetch some archives.

It fails, because of the above 403 from apt-cacher-ng.

You can see apt-cacher-ng logging the error in /var/log/apt-cacher-ng/apt-cacher.log:
1496161336|E|428|192.168.1.235|403 Forbidden file type or location: http://deb.debian.org/debian/pool/main/o/openssl/openssl_1.1.0f.orig.tar.gz.asc