CI infra: packaging-check apt-get update hangs until 60-minute step timeout #20473

This issue was generated automatically by Claude Code (Anthropic's AI coding agent) running a scheduled CI-triage routine on behalf of @FrankChen021. Analysis and suggested fixes are AI-produced; please verify before acting on them.

Status: Open: no fix PR
Subject: .github/scripts/setup_generate_license.sh apt-get update hang (Static Checks CI, packaging-check (25) / packaging-check-jdk25)
Failures: 1 · First seen: 2026-10-01 · Last seen: 2026-10-01

Root cause

packaging-check.sh first runs setup_generate_license.sh, which calls sudo apt-get update && sudo apt-get install python3 -y with no timeout. On 87d36ea the runner's azure.archive.ubuntu.com mirror was ignored, apt fell back to archive.ubuntu.com, and the update stalled after fetching noble-security InRelease with no further output until the 60-minute step timeout killed the job. This is a runner/mirror outage, unrelated to the commit (a dependency-classloader change); the same job compiled normally on neighbouring commits.

Suggested fix

Skip the apt step when python3 -m venv and pip3 already work (the ubuntu-24.04 runner image ships Python 3), or bound it with timeout 300 sudo apt-get -o Acquire::Retries=3 -o Acquire::http::Timeout=30 update so a stalled mirror fails fast.

Occurrences

Failed push-triggered master jobs only. The daily triage routine adds one row per new failed job.