Unable to load the service index for source https://api.nuget.org/v3/index.json

[rahulrraj]

Hi,
I created a project with net7.0
dotnet new serverless.NativeAOT -n ServerlessNativeAOT
and trying to build a package using the following command
dotnet lambda package --output-package lambda-build/deploy-package.zip
while running the above command I get following error
... docker run: MSBuild version 17.4.0+18d5aef85 for .NET ... docker run: Determining projects to restore... ... docker run: /tmp/source/ServerlessNativeAOT.csproj : error NU1301: Unable to load the service index for source https://api.nuget.org/v3/index.json. ... docker run: Failed to restore /tmp/source/ServerlessNativeAOT.csproj (in 24.26 sec). ERROR: Container build returned 1 Failed to create application package
To resolve this I need to include the certificate which usually I do like this
FROM mcr.microsoft.com/dotnet/sdk:6.0 AS build COPY *.crt /usr/local/share/ca-certificates/ RUN update-ca-certificates
But I am not sure how include certificate in the container when I run dotnet lambda package command to build net7.0 application

[ashishdhingra]

@rahulrraj Kindly advise on how you determined to include certificate? For the NuGet error, StackOverflow post https://stackoverflow.com/questions/41185443/nuget-connection-attempt-failed-unable-to-load-the-service-index-for-source might provide some clue. Is the error related to NuGet resolved or are we talking about some different error?

[rahulrraj]

We use zscalar which acts as MAN-IN-THE-MIDDLE doing the ssl inspecting. Usually, I include the following in my docker file to resolve

FROM mcr.microsoft.com/dotnet/sdk:6.0 AS build
COPY *.crt /usr/local/share/ca-certificates/
RUN update-ca-certificates

I am not sure how to include the certificate in the container when I run dotnet lambda package command to build the net7.0 application

For example, for a simple asp dotnet app, If I in include the following in my docker file, my build is successful. Refer to the image below

FROM mcr.microsoft.com/dotnet/sdk:6.0 AS build
COPY *.crt /usr/local/share/ca-certificates/
RUN update-ca-certificates

but if I remove them I get the following error

[normj]

I think for your situation the easiest fix would be for you to create a custom image using our image public.ecr.aws/sam/build-dotnet7:latest-x86_64 as the base and then include the cert in your custom image. Then when you run the dotnet lambda deploy-function command use the --container-image-for-build switch to specify your image.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.