Hacktoberfest 2026: as issues que os mantenedores marcaram para outubro, abertas e boas para iniciantes. Ver issues do Hacktoberfest

Base sandbox build broken: NodeSource yanked pinned Node.js 22.22.1 package

Aberta
#56 2 comentários 0 reações 0 responsáveis Ver no GitHub

Ninguém assumiu esta issue ainda.

Avaliação

Dificuldade
3/5
Tempo estimado
1-2 dias
Facilidade para iniciantes
68/100
Tipo de issue
Bug
Clareza
Razoavelmente clara
Status de atividade
Pouca atividade
Stack de tecnologia
docker, github-actions, node.js
Domínio
build-system, ci-cd, devops

Direção de pesquisa

Start with sandboxes/base/Dockerfile at line 61 and the Build Sandbox Images workflow, then reproduce the failed build to confirm the unavailable NodeSource pin. Compare the proposed installation approaches and verify that the chosen approach builds the base sandbox image successfully without depending on the missing package version.

Escrita pelo modelo de indexação a partir do texto da issue.

Descrição

Summary

The Build Sandbox Images workflow is failing because NodeSource removed nodejs=22.22.1-1nodesource1 from their apt repository. The base sandbox Dockerfile pins this exact version at line 61, causing the Docker build to fail with:

E: Version '22.22.1-1nodesource1' for 'nodejs' was not found

Failed run: https://github.com/NVIDIA/OpenShell-Community/actions/runs/23721670468

Root Cause

NodeSource has a recurring issue where they publish patch releases to their apt repo and then remove them shortly after, keeping only the .0 release. This is documented in multiple upstream issues:

The version 22.22.1-1nodesource1 was available when the pin was introduced in commit d5073c3 (Mar 12) and built successfully as recently as Mar 24 (run 23503799247). NodeSource yanked it between Mar 24–28.

The highest version currently available in the NodeSource repo is 22.22.0-1nodesource1.

Suggested Fix

Pinning to NodeSource apt packages is unreliable since they remove versions without notice. Consider one of:

  1. Install from official Node.js tarballs — download pre-built binaries directly from https://nodejs.org/dist/ which are never removed. This is the most robust option.
  2. Pin to the latest available NodeSource version (22.22.0-1nodesource1) as a short-term fix, accepting it will likely break again on the next patch release cycle.
  3. Remove the version pin and just install nodejs without a version suffix, trading reproducibility for resilience.

Option 1 is recommended since it avoids this class of problem entirely.

Linguagem predominante
Dockerfile
Estrelas
191
Forks
76
Nenhum PR com merge em 30d

Guia de contribuição

Abrir o guia de contribuição

Primeiros passos

  1. Leia a issue inteira e depois o guia de contribuição do projeto.
  2. Comente na issue dizendo que vai assumir — evita que duas pessoas façam o mesmo trabalho.
  3. Faça um fork do repositório e trabalhe em uma branch.
  4. Abra um pull request que referencie o número da issue.

Mais de NVIDIA/OpenShell-Community

Todas as issues de NVIDIA/OpenShell-Community

Issues semelhantes

Mais issues de Build System

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.