ingestion.sh: Could not download data.jar / unable to find valid certification path

When running ingestion.sh get the following download/certification issue.

$ ./docker/ingestion/ingestion.sh
WARNING: Native build is an experimental feature and could change at any time
WARNING: Found orphan containers (datahub-frontend, schema-registry, broker, elasticsearch, kafka-setup, datahub-mae-consumer, zookeeper, neo4j, kibana, datahub-gms, kafka-topics-ui, mysql, kafka-rest-proxy, datahub-mce-consumer, elasticsearch-setup, schema-registry-ui) for this project. If you removed or renamed this service in your compose file, you can run this command with the --remove-orphans flag to clean it up.
Building ingestion
[+] Building 53.6s (9/11)
 => [internal] load .dockerignore                                                                                                                               0.1s
 => => transferring context: 35B                                                                                                                                0.0s
 => [internal] load build definition from Dockerfile                                                                                                            0.0s
 => => transferring dockerfile: 38B                                                                                                                             0.0s
 => [internal] load metadata for docker.io/library/openjdk:8-jre-alpine                                                                                         0.0s
 => [internal] load metadata for docker.io/library/openjdk:8                                                                                                    0.0s
 => [internal] load build context                                                                                                                               0.2s
 => => transferring context: 383.24kB                                                                                                                           0.2s
 => [builder 1/3] FROM docker.io/library/openjdk:8                                                                                                              0.0s
 => [stage-1 1/3] FROM docker.io/library/openjdk:8-jre-alpine                                                                                                   0.0s
 => CACHED [builder 2/3] COPY . datahub-src                                                                                                                     0.0s
 => ERROR [builder 3/3] RUN cd datahub-src && ./gradlew :metadata-ingestion-examples:mce-cli:build                                                             53.2s
------
 > [builder 3/3] RUN cd datahub-src && ./gradlew :metadata-ingestion-examples:mce-cli:build:
#8 0.370 Downloading https://services.gradle.org/distributions/gradle-5.6.4-bin.zip
#8 0.991 .........................................................................................
#8 21.17
#8 21.17 Welcome to Gradle 5.6.4!
#8 21.17
#8 21.17 Here are the highlights of this release:
#8 21.17  - Incremental Groovy compilation
#8 21.17  - Groovy compile avoidance
#8 21.17  - Test fixtures for Java projects
#8 21.17  - Manage plugin versions via settings script
#8 21.17
#8 21.17 For more details see https://docs.gradle.org/5.6.4/release-notes.html
#8 21.17
#8 21.17 To honour the JVM settings for this build a new JVM will be forked. Please consider using the daemon: https://docs.gradle.org/5.6.4/userguide/gradle_daemon.html.
#8 21.96 Daemon will be stopped at the end of the build stopping after processing
#8 23.36 Configuration on demand is an incubating feature.
#8 52.86
#8 52.86 FAILURE: Build failed with an exception.
#8 52.86
#8 52.86 * Where:
#8 52.86 Build file '/datahub-src/metadata-models-ext/build.gradle' line: 15
#8 52.86
#8 52.86 * What went wrong:
#8 52.86 A problem occurred evaluating project ':metadata-models-ext'.
#8 52.86 > Could not resolve all files for configuration ':metadata-models-ext:dataModel'.
#8 52.86    > Could not download data.jar (com.linkedin.pegasus:data:28.3.7)
#8 52.86       > Could not get resource 'https://linkedin.bintray.com/maven/com/linkedin/pegasus/data/28.3.7/data-28.3.7.jar'.
#8 52.86          > Could not GET 'https://akamai.bintray.com/0d/0d1e87cdae99eaff603e8bd060c3c901ab2177ed1fbe9187502a758ddca2bf0e?__gda__=exp=1606831119~hmac=eba3c582f953f8cf19240088cdb25e06037d725f529e2beae628f31482519054&response-content-disposition=attachment%3Bfilename%3D%22data-28.3.7.jar%22&response-content-type=application%2Fjava-archive&requestInfo=U2FsdGVkX1_QjXA24q7flhA8Klk-qe_Es3Jguxw8JLEmX0d0_c-MD1hVhyYi87Cv7ZbSRPX134FKTOk9YoFFsSVdhp4c4VNzg3_EZyC2D2Eky9JV1asDh6dGakGiwQ-IgCJ-gxr1mUyxREDLp91ujA&response-X-Checksum-Sha1=2dab8a3892425e5974d5fb138029e79fae422bb9&response-X-Checksum-Sha2=0d1e87cdae99eaff603e8bd060c3c901ab2177ed1fbe9187502a758ddca2bf0e'.
#8 52.87             > PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
#8 52.87
#8 52.87 * Try:
#8 52.87 Run with --stacktrace option to get the stack trace. Run with --info or --debug option to get more log output. Run with --scan to get full insights.
#8 52.87
#8 52.87 * Get more help at https://help.gradle.org
#8 52.87
#8 52.87 BUILD FAILED in 52s

With simply wget i get:

$ wget https://linkedin.bintray.com/maven/com/linkedin/pegasus/data/28.3.7/data-28.3.7.jar
Will not apply HSTS. The HSTS database must be a regular and non-world-writable file.
ERROR: could not open HSTS store at '/home/<USERNAME>/.wget-hsts'. HSTS will be disabled.
--2020-12-01 14:52:05--  https://linkedin.bintray.com/maven/com/linkedin/pegasus/data/28.3.7/data-28.3.7.jar
Resolving linkedin.bintray.com (linkedin.bintray.com)... 3.122.43.129, 35.157.127.85
Connecting to linkedin.bintray.com (linkedin.bintray.com)|3.122.43.129|:443... connected.
HTTP request sent, awaiting response... 302
Location: https://akamai.bintray.com/0d/0d1e87cdae99eaff603e8bd060c3c901ab2177ed1fbe9187502a758ddca2bf0e?__gda__=exp=1606831445~hmac=71edb21323ca35d882ef5a9d174e309ebe1152a57d11900b25a6d525d23892b9&response-content-disposition=attachment%3Bfilename%3D%22data-28.3.7.jar%22&response-content-type=application%2Fjava-archive&requestInfo=U2FsdGVkX18nrl0vJH5v71Vzb7_LECwCipV5ftq_vQ2lzf33O-OqyQHseTnrP9D4xvBpyLzpxSeduUnwNRI6T4jpO4uxq11MuHKaszBP5WbkqW1LFQk2DRZ-dzku70TVkyYRHXAOh2DYLdR2I55Gig&response-X-Checksum-Sha1=2dab8a3892425e5974d5fb138029e79fae422bb9&response-X-Checksum-Sha2=0d1e87cdae99eaff603e8bd060c3c901ab2177ed1fbe9187502a758ddca2bf0e [following]
--2020-12-01 14:52:06--  https://akamai.bintray.com/0d/0d1e87cdae99eaff603e8bd060c3c901ab2177ed1fbe9187502a758ddca2bf0e?__gda__=exp=1606831445~hmac=71edb21323ca35d882ef5a9d174e309ebe1152a57d11900b25a6d525d23892b9&response-content-disposition=attachment%3Bfilename%3D%22data-28.3.7.jar%22&response-content-type=application%2Fjava-archive&requestInfo=U2FsdGVkX18nrl0vJH5v71Vzb7_LECwCipV5ftq_vQ2lzf33O-OqyQHseTnrP9D4xvBpyLzpxSeduUnwNRI6T4jpO4uxq11MuHKaszBP5WbkqW1LFQk2DRZ-dzku70TVkyYRHXAOh2DYLdR2I55Gig&response-X-Checksum-Sha1=2dab8a3892425e5974d5fb138029e79fae422bb9&response-X-Checksum-Sha2=0d1e87cdae99eaff603e8bd060c3c901ab2177ed1fbe9187502a758ddca2bf0e
Resolving akamai.bintray.com (akamai.bintray.com)... 146.112.56.17, 146.112.252.246, 146.112.56.59, ...
Connecting to akamai.bintray.com (akamai.bintray.com)|146.112.56.17|:443... connected.
ERROR: cannot verify akamai.bintray.com's certificate, issued by ‘CN=Cisco Umbrella Secondary SubCA lon-SG,O=Cisco’:
  Unable to locally verify the issuer's authority.
To connect to akamai.bintray.com insecurely, use `--no-check-certificate'.

[jplaisted]

I’m wondering if it is related. Seems like your docker is just not working (which docker was supposed to help solve the whole “it works on my machine” stuff…). I’m wondering if maybe this is a windows issue. Do you have another machine (mac/linux) you can try on?

[shirshanka]

Closing due to inactivity. Please reopen if this is still an issue.