From 963640ddb29afd13507536097a0c8a2106e48359 Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Fri, 7 Aug 2026 18:03:53 -0700 Subject: [PATCH] fix(ci): apt-get update before every apt-get install `apt-get install` with no preceding `apt-get update` is a time bomb rather than a flake. The GitHub runner image ships a pre-baked apt list pinning an exact .deb version; it works until Ubuntu supersedes that version in the archive, and then the pinned URL 404s on every run until the runner image is rebuilt: E: Failed to fetch .../__amd64.deb 404 Not Found E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? That is exactly what took out two jobs in vhd-forensic. apt names the fix in its own error text. Found by sweeping the fleet after fixing that one repo: of 181 install sites, 41 refresh the lists on the same line and 111 on a preceding line, leaving 29 sites across 4 repos with no update at all -- all latent, each failing on whatever day its package next gets a security update. This repo's share is fixed here; sites that already refresh are untouched. Verified locally in a container rather than by re-running CI. On ubuntu:24.04, installing with the image's shipped apt state fails ("E: Unable to locate package") and the same install succeeds after apt-get update. Co-Authored-By: Claude Opus 5 --- .github/workflows/docs.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index c23c3015..d1b995fb 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -38,7 +38,9 @@ jobs: git clone --depth 1 https://github.com/SecurityRonin/usnjrnl-forensic.git usnjrnl-forensic - name: Install system dependencies - run: sudo apt-get install -y protobuf-compiler + run: | + sudo apt-get update + sudo apt-get install -y protobuf-compiler - name: Install Rust toolchain uses: dtolnay/rust-toolchain@stable