Docker build fails on apt-get install with repeated “Hash Sum mismatch” errors (even after disabling cache)

Question

I’m trying to build a Docker image using the cityflowproject/cityflow base. My build consistently fails during the apt-get install step with Hash Sum mismatch errors, even after attempting common fixes like disabling APT caching and cleaning the lists.

The error occurs at: RUN apt-get update && apt-get install -y ...

partial log:

E: Failed to fetch http://deb.debian.org/debian/pool/main/... Hash Sum mismatch Hashes of expected file:

SHA256:... Hashes of received file:
SHA256:... (different) I’ve also tried: • Adding APT config options to handle bad proxies • Forcing rm -rf /var/lib/apt/lists/* before and after • Using --no-cache with Docker

Still facing the same issue. This seems to be a persistent issue with some Debian mirrors or Docker cache behaviors.

FROM cityflowproject/cityflow

# Configure APT to handle proxy and caching issues
RUN echo 'Acquire::http::Pipeline-Depth "0";' >> /etc/apt/apt.conf.d/99fixbadproxy && \
    echo 'Acquire::http::No-Cache "true";' >> /etc/apt/apt.conf.d/99fixbadproxy && \
    echo 'Acquire::BrokenProxy "true";' >> /etc/apt/apt.conf.d/99fixbadproxy

# Clean and update APT, then install packages
RUN rm -rf /var/lib/apt/lists/* && \
    apt-get clean && \
    apt-get update && \
    apt-get install -y --no-install-recommends \
        build-essential \
        cmake \
        git \
        libboost-all-dev && \
    rm -rf /var/lib/apt/lists/*

# Install Python packages
RUN pip install numpy torch matplotlib ```

I'm facing the same issue. I tried with latest debian trixie image, and latest ubuntu jammy image, both render the same error. I tried to install only git and build-essential, yet it still managed to fail. I read something about changing the mirrors to download packages, but I don't really know what this is all about. — Ximaz
– Ximaz, Commented Sep 1 at 20:19
I hit my issue on macOS, but when I tried on Windows the setup was a lot smoother. — Kunal Kulkarni
– Kunal Kulkarni, Commented Sep 28 at 1:24

ti7 · Accepted Answer · 2025-10-31 09:24:14Z

There can be numerous causes for this, but I've found it's generally to do with

bad WSL2 behavior
badly-supported/detected compression (can represent an issue with the mirror)
corporate firewall modifying/dropping packets

Given you've tried perhaps the most-widely suggested hacks, try changing your compression type (the default is probably xz)

sudo apt-get update --print-uris  # extensions in output show preferred
sudo apt-get update -o Acquire::CompressionTypes::Order::=gz  # always gzip

You can also set this more permanently as an apt option than repeated command line arg if you prefer

RUN echo 'Acquire::CompressionTypes::Order "gz";' >> /etc/apt/apt.conf.d/99force_gzip

You may find forcing SSL can help with corporate firewalls too

https://askubuntu.com/questions/1237335/how-do-i-force-apt-to-use-https-only

Some other related Questions

Collectives™ on Stack Overflow

Docker build fails on apt-get install with repeated “Hash Sum mismatch” errors (even after disabling cache)

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related