Buggy/weirdly structured HashiCorp APT repo

What's Your Story?
1

There isn’t really a correct category for why I am here, so I chose “What’s Your Story?”.

I am really trying to get a hold of any HashiCorp engineers involved with the maintenance of the public HashiCorp APT repo at:

https://apt.releases.hashicorp.com/

I work on APT support for the Pulp project (https://pulpproject.org/) and we have had community users alert us that our software is unable to synchronize the above HashiCorp APT repo. Upon investigating we found that the repo has a strange structure that isn’t fully compliant with the specification for APT repos. While we are working on workarounds on our end, that will allow Pulp users to nevertheless sync the repo, we just wanted to give a heads up that somebody at HashiCorp might want to look into this.

Issues I have identified with the repo structure:

Consider the following package paragraph from the package index at (https://apt.releases.hashicorp.com/dists/bionic/main/binary-amd64/Packages):

Package: consul-terraform-sync
Version: 0.4.0
Section:
Priority:
Architecture: arm64
Maintainer: HashiCorp
Installed-Size: 32556
Depends: openssl
Homepage: https://github.com/hashicorp/consul-terraform-sync
Description: Consul Terraform Sync is a service-oriented tool for managing network infrastructure near real-time.
Filename: pool/amd64/main/consul-terraform-sync_0.4.0_arm64.deb
SHA1: 602af81de2a944cdc54efd247142e7182641194d
SHA256: 78a2089ef3461a9d3e30f0bb69989bd8a8c02513085dddaac57a173a9bf76178
Size: 14895694
  • The Section: and Priority: keys have no value (which is not exactly good practice, but probably fine for most software).
  • The above entry is Architecture: arm64 in a package index for binary-amd64/Packages. This is just wrong and also what our software tripped over.

I would be interested to know what software is being used to manage the HashiCorp APT repo? Perhaps it is worth opening a Bug report there.

Feel free to have a look at our issue tracker for this issue: Handle upstream package indices containing packages with the wrong architecture · Issue #422 · pulp/pulp_deb · GitHub
If you have any more questions, feel free to contact me on this thread or via the GitHub issue.

2

I have attached all the warnings the pulp_deb sync code now finds in the dists/bionic/main/binary-amd64/Packages index of the HashiCorp APT repo:
hashi_corp_apt_repo_warnings.txt (11.8 KB)

Looks like only the consul-terraform-sync 0.4.0 and consul-terraform-sync-enterprise 0.4.0 packages are adding wrong architectures to the index…