We have set up a remote repo that looks like this
Package Type: Debian
Repository Path: archive.ubuntu.com/
Repository Layout: maven-2-default
Remote Repository URL: http://archive.ubuntu.com
Which we are using frequently to build docker containers that are based on different versions of Ubuntu. Right now we are seeing a lot of problem with "Hash sum mismatch" when trying to fetch and install packages from this repo. It happens both for index files, all Ubuntu versions, and individual packages, mostly for Ubuntu 16.04 packages.
We have tried various workarounds like doing "sudo rm -rf /var/lib/apt/lists/*" before apt-get clean, update and install.
We have tried to add different configurations for apt like
to a file in /etc/apt/apt.conf.d/
Sometimes it seems to help for awhile but we keep ending up with the hash sum mismatch problem, sometimes we can get a few Docker builds through if we do Zap cache, but it usually doesn't last for long.
I have tried to verify the hash sums that apt-get claims is not matching up but I have not been able see any thing strange there. If I fetch the packages manually and compare the hash sums with the values in Artifactory it all seems to match. And the same correct hashes are visible in the apt-get command when I enable debug printouts for apt-get.
If we skip our Artifactory server and use the Ubuntu repository directly we never see these problems.
We are kind of stuck here and not really sure what to do, any insights would be appreciated. And I would be happy to supply more information.