Startup: 访问 tuna apt 源出现 403 错误 #413
Description
1️⃣ 问题描述
请清晰描述您在使用 Docker 或启动服务时遇到的问题：
- 操作步骤：docker compose up --build
- 实际结果：报错
=> ERROR [api stage-0 9/15] RUN set -ex && ln -snf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && echo Asia/Shanghai > /etc/ 3.0s
2️⃣ 环境信息
请提供以下信息，帮助我们快速定位问题：
- 操作系统：Windows11版本
- Docker 版本：Docker version 29.0.1, build eedd969
3️⃣ 启动命令
请提供您使用的完整启动命令：
docker compose up -d
4️⃣ 日志信息
(base) PS D:\xiegaolei\3project\open\Yuxi-Know-0.4.0\Yuxi-Know-0.4.0> docker compose up --build
[+] Running 30/30
✔ graph Pulled 279.5s
✔ etcd Pulled 10.5s
✔ milvus Pulled 461.5s
✔ minio Pulled 166.8s
[+] Building 30.9s (31/37)
=> [internal] load local bake definitions 0.0s
=> => reading from stdin 1.20kB 0.0s
=> [api internal] load build definition from api.Dockerfile 0.0s
=> => transferring dockerfile: 2.35kB 0.0s
=> [web internal] load build definition from web.Dockerfile 0.1s
=> => transferring dockerfile: 1.37kB 0.0s
=> [api internal] load metadata for docker.io/library/node:20-slim 26.3s
=> [api internal] load metadata for docker.io/library/python:3.12-slim 27.2s
=> [api internal] load metadata for ghcr.io/astral-sh/uv:0.7.2 1.6s
=> [web internal] load metadata for docker.io/library/node:20-alpine 26.3s
=> [api internal] load .dockerignore 0.1s
=> => transferring context: 362B 0.0s
=> [web development 1/9] FROM docker.io/library/node:20-alpine@sha256:658d0f63e501824d6c23e06d4bb95c71e7d704537c9d9272f488ac03a370d448 0.1s
=> => resolve docker.io/library/node:20-alpine@sha256:658d0f63e501824d6c23e06d4bb95c71e7d704537c9d9272f488ac03a370d448 0.0s
=> [web internal] load build context 0.4s
=> => transferring context: 4.91MB 0.4s
=> CACHED [web development 2/9] WORKDIR /app 0.0s
=> CACHED [web development 3/9] RUN if [ -n "$http_proxy" ]; then echo "export http_proxy=$http_proxy" >> /etc/environment; fi 0.0s
=> CACHED [web development 4/9] RUN if [ -n "$https_proxy" ]; then echo "export https_proxy=$https_proxy" >> /etc/environment; fi 0.0s
=> CACHED [web development 5/9] RUN npm install -g pnpm@latest 0.0s
=> CACHED [web development 6/9] COPY ./web/package*.json ./ 0.0s
=> CACHED [web development 7/9] COPY ./web/pnpm-lock.yaml* ./ 0.0s
=> CACHED [web development 8/9] RUN pnpm install --registry=https://registry.npmmirror.com 0.0s
=> CACHED [web development 9/9] COPY ./web . 0.0s
=> CANCELED [web] exporting to image 3.6s
=> => exporting layers 0.0s
=> => exporting manifest sha256:e1c55fa2c2bb63ffaf426c2132b724420b6bba4b8dffc3ec4d4b81b2821887d1 0.0s
=> => exporting config sha256:fb40f5ce5b04f27077cae43d536937a0e464c725209692ad3a1de863f675c71c 0.0s
=> => exporting attestation manifest sha256:5c3456f93174e0320f37225786b6f776c65022b8b8a6a67f394ec02a43eb2097 0.1s
=> => exporting manifest list sha256:f5d0b5f0ed00effdd025e6b27889be053a102146e2d3a627cf42131c0d631d59 0.0s
=> => naming to docker.io/library/yuxi-web:0.4.dev 0.0s
=> => unpacking to docker.io/library/yuxi-web:0.4.dev 3.5s
=> [api] FROM ghcr.io/astral-sh/uv:0.7.2@sha256:3b898ca84fbe7628c5adcd836c1de78a0f1ded68344d019af8478d4358417399 0.1s
=> => resolve ghcr.io/astral-sh/uv:0.7.2@sha256:3b898ca84fbe7628c5adcd836c1de78a0f1ded68344d019af8478d4358417399 0.1s
=> [api internal] load build context 0.2s
=> => transferring context: 2.23MB 0.2s
=> [api stage-0 1/15] FROM docker.io/library/python:3.12-slim@sha256:fa48eefe2146644c2308b909d6bb7651a768178f84fc9550dcd495e4d6d84d01 0.1s
=> => resolve docker.io/library/python:3.12-slim@sha256:fa48eefe2146644c2308b909d6bb7651a768178f84fc9550dcd495e4d6d84d01 0.1s
=> [api] FROM docker.io/library/node:20-slim@sha256:1b38aaddff63cd0d3a9b5b03863a71fd33ee62047dd2e915f494d96b4b9c18cc 0.2s
=> => resolve docker.io/library/node:20-slim@sha256:1b38aaddff63cd0d3a9b5b03863a71fd33ee62047dd2e915f494d96b4b9c18cc 0.1s
=> CACHED [api stage-0 2/15] COPY --from=ghcr.io/astral-sh/uv:0.7.2 /uv /uvx /bin/ 0.0s
=> CACHED [api stage-0 3/15] COPY --from=node:20-slim /usr/local/bin /usr/local/bin 0.0s
=> CACHED [api stage-0 4/15] COPY --from=node:20-slim /usr/local/lib/node_modules /usr/local/lib/node_modules 0.0s
=> CACHED [api stage-0 5/15] COPY --from=node:20-slim /usr/local/include /usr/local/include 0.0s
=> CACHED [api stage-0 6/15] COPY --from=node:20-slim /usr/local/share /usr/local/share 0.0s
=> CACHED [api stage-0 7/15] WORKDIR /app 0.0s
=> CACHED [api stage-0 8/15] RUN npm install -g npm@latest && npm cache clean --force 0.0s
=> ERROR [api stage-0 9/15] RUN set -ex && ln -snf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && echo Asia/Shanghai > /etc/ 3.0s
------
> [api stage-0 9/15] RUN set -ex && ln -snf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && echo Asia/Shanghai > /etc/timezone && sed -i 's|deb.debian.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apt/sources.list.d/debian.sources && sed -i 's|security.debian.org/debian-security|mirrors.tuna.tsinghua.edu.cn/debian-security|g' /etc/apt/sources.list.d/debian.sources && apt-get update && apt-get install -y --no-install-recommends --fix-missing curl ffmpeg libsm6 libxext6 && apt-get clean && rm -rf /var/lib/apt/lists/*:
0.563 + ln -snf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
0.569 + echo Asia/Shanghai
0.569 + sed -i s|deb.debian.org|mirrors.tuna.tsinghua.edu.cn|g /etc/apt/sources.list.d/debian.sources
0.574 + sed -i s|security.debian.org/debian-security|mirrors.tuna.tsinghua.edu.cn/debian-security|g /etc/apt/sources.list.d/debian.sources
0.575 + apt-get update
0.958 Err:1 http://mirrors.tuna.tsinghua.edu.cn/debian trixie InRelease
0.958 403 Forbidden [IP: 101.6.15.130 80]
1.010 Err:2 http://mirrors.tuna.tsinghua.edu.cn/debian trixie-updates InRelease
1.010 403 Forbidden [IP: 101.6.15.130 80]
1.074 Err:3 http://mirrors.tuna.tsinghua.edu.cn/debian-security trixie-security InRelease
1.074 403 Forbidden [IP: 101.6.15.130 80]
1.078 Reading package lists...
1.085 E: The repository 'http://mirrors.tuna.tsinghua.edu.cn/debian trixie InRelease' is not signed.
1.085 E: Failed to fetch http://mirrors.tuna.tsinghua.edu.cn/debian/dists/trixie/InRelease 403 Forbidden [IP: 101.6.15.130 80]
1.085 E: Failed to fetch http://mirrors.tuna.tsinghua.edu.cn/debian/dists/trixie-updates/InRelease 403 Forbidden [IP: 101.6.15.130 80]
1.085 E: The repository 'http://mirrors.tuna.tsinghua.edu.cn/debian trixie-updates InRelease' is not signed.
1.085 E: Failed to fetch http://mirrors.tuna.tsinghua.edu.cn/debian-security/dists/trixie-security/InRelease 403 Forbidden [IP: 101.6.15.130 80]
1.085 E: The repository 'http://mirrors.tuna.tsinghua.edu.cn/debian-security trixie-security InRelease' is not signed.
------
api.Dockerfile:21
--------------------
20 | # 设置代理和时区，更换镜像源，安装系统依赖 - 合并为一个RUN减少层数
21 | >>> RUN set -ex \
22 | >>> # (A) 设置时区
23 | >>> && ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone \
24 | >>> # (B) 替换清华源 (针对 Debian Bookworm 的新版格式)
25 | >>> && sed -i 's|deb.debian.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apt/sources.list.d/debian.sources \
26 | >>> && sed -i 's|security.debian.org/debian-security|mirrors.tuna.tsinghua.edu.cn/debian-security|g' /etc/apt/sources.list.d/debian.sources \
27 | >>> # (C) 安装必要的系统库
28 | >>> && apt-get update \
29 | >>> && apt-get install -y --no-install-recommends --fix-missing \
30 | >>> curl \
31 | >>> ffmpeg \
32 | >>> libsm6 \
33 | >>> libxext6 \
34 | >>> # (D) 清理垃圾，减小体积
35 | >>> && apt-get clean \
36 | >>> && rm -rf /var/lib/apt/lists/*
37 |
--------------------
target api: failed to solve: process "/bin/sh -c set -ex && ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone && sed -i 's|deb.debian.org|mirrors.tuna.tsinghua.edu.cn|g' /etc/apt/sources.list.d/debian.sources && sed -i 's|security.debian.org/debian-security|mirrors.tuna.tsinghua.edu.cn/debian-security|g' /etc/apt/sources.list.d/debian.sources && apt-get update && apt-get install -y --no-install-recommends --fix-missing curl ffmpeg libsm6 libxext6 && apt-get clean && rm -rf /var/lib/apt/lists/*" did not complete successfully: exit code: 100
View build details: docker-desktop://dashboard/build/default/default/uryng38l9w7uqtru6ovx5c2cn
5️⃣ 配置文件（可选）
如果您修改过 docker-compose.yml 或 .env 文件，请提供相关配置片段（注意隐藏敏感信息）：
# docker-compose.yml 相关部分
...
# .env 相关部分
...MODEL_DIR=./models
SAVE_DIR=./saves
# region model_provider
SILICONFLOW_API_KEY= heoqjkwzlpsz # 推荐使用硅基流动免费服务 https://cloud.siliconflow.cn/i/Eo5yTHGJ
TAVILY_API_KEY= i37gCGtzyJ1vEfP # 获取搜索服务的 api key 请访问 https://app.tavily.com/
# # 其余可选配置
# OPENAI_API_KEY=
# OPENAI_API_BASE=
# ZHIPUAI_API_KEY=
# DASHSCOPE_API_KEY=
# DEEPSEEK_API_KEY=
# ARK_API_KEY=
# TOGETHER_API_KEY=
# # endregion model_provider
# # region neo4j
# NEO4J_URI=
# NEO4J_USERNAME=
# NEO4J_PASSWORD=
# # endregion neo4j
# # Servies
# YUXI_SUPER_ADMIN_NAME=
# YUXI_SUPER_ADMIN_PASSWORD=
# # MinerU
# MINERU_API_KEY=