Python 3.5 20.04 tool bundle not installable

[rfinnie-epic]

Description

As of a week or so ago, the Ubuntu 20.04 Python 3.5 tool bundle is no longer installable, throwing CERTIFICATE_VERIFY_FAILED when pip tries to reach https://pypi.python.org/simple/pip/ (see below)

For the moment, I've got a manual exception in place to skip this during my runner build process, which is needed since it's still in the manifest.

Considering the 3.5 tarballs haven't been touched since 2020 but you are still supporting ubuntu-20.04 runners, I'm not sure if the solution would be to drop 3.5 from the manifests, or spin a new release with an updated vendored requests / urllib3 package which is supporting pip internally.

Platforms affected

• Azure DevOps
• GitHub Actions - Standard Runners
• GitHub Actions - Larger Runners

Runner images affected

• Ubuntu 20.04
• Ubuntu 22.04
• Ubuntu 24.04
• macOS 11
• macOS 12
• macOS 13
• macOS 13 Arm64
• macOS 14
• macOS 14 Arm64
• Windows Server 2019
• Windows Server 2022

Image version and build link

Python tool bundle tarball (python-3.5.10-linux-20.04-x64.tar.gz)

Is it regression?

yes (but not GH's fault)

Expected behavior

Functional tool bundle install

Actual behavior

setup.sh fails with exit 1

Repro steps

root@25b48db3503d:/# cat /etc/os-release
NAME="Ubuntu"
VERSION="20.04.6 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.6 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focalroot@25b48db3503d:/# mkdir -p /pytest /opt/hostedtoolcache
root@25b48db3503d:/# cd /pytest
root@25b48db3503d:/pytest# wget https://github.com/actions/python-versions/releases/download/3.5.10-90026/python-3.5.10-linux-20.04-x64.tar.gz
2024-05-14 21:15:17 (43.1 MB/s) - 'python-3.5.10-linux-20.04-x64.tar.gz' saved [73179534/73179534]

root@25b48db3503d:/pytest# tar zxf python-3.5.10-linux-20.04-x64.tar.gz
root@25b48db3503d:/pytest# env AGENT_TOOLSDIRECTORY=/opt/hostedtoolcache sh setup.sh
Check if Python hostedtoolcache folder exist...
Creating Python hostedtoolcache folder...
Create Python 3.5.10 folder
Copy Python binaries to hostedtoolcache folder
Create additional symlinks (Required for the UsePythonVersion Azure Pipelines task and the setup-python GitHub Action)
Upgrading PIP...
Requirement already satisfied: setuptools in /opt/hostedtoolcache/Python/3.5.10/x64/lib/python3.5/site-packages
Requirement already satisfied: pip in /opt/hostedtoolcache/Python/3.5.10/x64/lib/python3.5/site-packages
Collecting pip
  Could not fetch URL https://pypi.python.org/simple/pip/: There was a problem confirming the ssl certificate: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:728) - skipping
  Could not find a version that satisfies the requirement pip (from versions: )
No matching distribution found for pip
root@25b48db3503d:/pytest# echo $?
1
root@25b48db3503d:/pytest#

[mikhailkoliada]

moving to setup-python as we do not maintain these archives

[dirkf]

Same problem as #866 (with work-around), I think.

[aparnajyothi-y]

Hello @rfinnie-epic, Thank you for creating this issue and we will look into it :)

[priyagupta108]

Hello @rfinnie-epic👋
Thank you for your input! We figured it's covering the same as another one we already have. To avoid duplication, we are proceeding with closing this issue. Please refer to Issue #866 for related discussions.