Can't complete Kali Linux Docker installation due to 'atp update' failures

Hi

I deployed the latest Kali Linux Docker container. When I try to install the applications, I see two problems:

• Using the default http protocol URL in the ?sources? file yields a ?503 service unavailable error
• Using the https protocol causes a certificate verification failure

Please let me know how to resolve this Catch-22 situation!

Thanks
tl



└─# apt update
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Err:1 http://http.kali.org/kali kali-rolling InRelease
503 Service Unavailable [IP: 192.99.200.113 80]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease 503 Service Unavailable [IP: 192.99.200.113 80]
W: Some index files failed to download. They have been ignored, or old ones used instead.

┌──(root㉿03a634b0065a)-[/]
└─# cat /etc/apt/sources.list
deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

┌──(root㉿03a634b0065a)-[/]
└─# cat > /etc/apt/sources.list
deb https://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

┌──(root㉿03a634b0065a)-[/]
└─# cat /etc/apt/sources.list
deb https://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

┌──(root㉿03a634b0065a)-[/]
└─# apt update
Ign:1 https://http.kali.org/kali kali-rolling InRelease
Ign:1 https://http.kali.org/kali kali-rolling InRelease
Ign:1 https://http.kali.org/kali kali-rolling InRelease
Err:1 https://http.kali.org/kali kali-rolling InRelease
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 192.99.200.113 443]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: Failed to fetch https://http.kali.org/kali/dists/kali-rolling/InRelease Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 192.99.200.113 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

┌──(root㉿03a634b0065a)-[/]
└─#

Not sure if you ever resolved this - but for anyone else finding this post via google, I was able to fix it simply by running

HTML Code:

---

[HTML][CODE]apt-get install ca-certificates[/CODE]

---

[/HTML] as hinted at by the error.

Quote:

---

Originally Posted by tdlemons

Hi

I deployed the latest Kali Linux Docker container. When I try to install the applications, I see two problems:

• Using the default http protocol URL in the ?sources? file yields a ?503 service unavailable error
• Using the https protocol causes a certificate verification failure

Please let me know how to resolve this Catch-22 situation!

Thanks
tl



└─# apt update
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Err:1 http://http.kali.org/kali kali-rolling InRelease
503 Service Unavailable [IP: 192.99.200.113 80]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease 503 Service Unavailable [IP: 192.99.200.113 80]
W: Some index files failed to download. They have been ignored, or old ones used instead.

┌──(root㉿03a634b0065a)-[/]
└─# cat /etc/apt/sources.list
deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

┌──(root㉿03a634b0065a)-[/]
└─# cat > /etc/apt/sources.list
deb https://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

┌──(root㉿03a634b0065a)-[/]
└─# cat /etc/apt/sources.list
deb https://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware

┌──(root㉿03a634b0065a)-[/]
└─# apt update
Ign:1 https://http.kali.org/kali kali-rolling InRelease
Ign:1 https://http.kali.org/kali kali-rolling InRelease
Ign:1 https://http.kali.org/kali kali-rolling InRelease
Err:1 https://http.kali.org/kali kali-rolling InRelease
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 192.99.200.113 443]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: https://http.kali.org/kali/dists/kali-rolling/InRelease: No system certificates available. Try installing ca-certificates.
W: Failed to fetch https://http.kali.org/kali/dists/kali-rolling/InRelease Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 192.99.200.113 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.

┌──(root㉿03a634b0065a)-[/]
└─#

---

Hi

Thanks very much for the reply. I still am interested in solving this problem, and being able to install the latest Kali Linux updates. Unfortunately, executing the command you provided wasn't successful for me. I just downloaded the latest Kali Linux Docker image.

└─# apt update && apt -y install kali-linux-headless
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Ign:1 http://http.kali.org/kali kali-rolling InRelease
Err:1 http://http.kali.org/kali kali-rolling InRelease
503 Service Unavailable [IP: 192.99.200.113 80]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease 503 Service Unavailable [IP: 192.99.200.113 80]
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
E: Unable to locate package kali-linux-headless


┌──(root㉿96404ca5f704)-[/]
└─# apt-get install ca-certificates
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Package ca-certificates is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source


E: Package 'ca-certificates' has no installation candidate


┌──(root㉿96404ca5f704)-[/]
└─#

Suggestions? Thanks!