percona-release 1.0-31.generic hangs enabling repository on Ubuntu 24.04 “noble” (uses HTTP instead of HTTPS)

[Gabriel_Lopes]

When installing percona-release_latest.noble_all.deb on Ubuntu 24.04.1 LTS (“noble”), the enable command hangs because the script always uses HTTP to contact repo.percona.com instead of HTTPS.

Environment
OS: Ubuntu 24.04.1 LTS (noble)
percona-release version: 1.0-31.generic
Architecture: amd64

Reproduction steps

1. Download package:
   wget https://repo.percona.com/apt/percona-release_latest.$(lsb_release -sc)_all.deb

2. Install with dpkg:
   sudo dpkg -i percona-release_latest.$(lsb_release -sc)_all.deb

3. Attempt to enable “prel” repository:
   sudo percona-release enable prel release

4. Script hangs at this point, always calling HTTP:
   ++ curl -s http://repo.percona.com

Observed behavior
The process waits indefinitely on curl http://repo.percona.com. Interrupting with Ctrl-C causes post-install to fail.

Expected behavior
The script should honor --scheme https or URL=“https://repo.percona.com” in /etc/default/percona-release and use HTTPS by default on recent distributions.

What I’ve tried
• Passing --scheme https (flag not recognized)
• Setting URL=“https://repo.percona.com” in /etc/default/percona-release (still uses HTTP)
• Forcing CURL_EXEC=(/usr/bin/curl “–proto” “=https”) (no effect)

Question
Has anyone encountered this? Is there a workaround or planned fix to support HTTPS natively on Ubuntu “noble”?

[Edith_Puclla1]

Hi @Gabriel_Lopes , thanks so much for reporting this issue and providing all the details!

We’ve seen a similar problem before, especially when connections need to go through a proxy. One workaround is to explicitly add --scheme https When enabling the repository, like this:

sudo percona-release --scheme https enable psmdb-70 release 

Alternatively, you can manually update /usr/bin/percona-release to use https instead of http If the above doesn’t work.

Let us know if this helps or if you run into any other issues.

[Vadim_Yalovets]

Hi Gabriel,

@Gabriel_Lopes

What I’ve tried
• Passing --scheme https (flag not recognized)
• Setting URL=“https://repo.percona.com” in /etc/default/percona-release (still uses HTTP)
• Forcing CURL_EXEC=(/usr/bin/curl “–proto” “=https”) (no effect)

The flag –scheme have to be used at the end of the command.
It was missed to add a description of usage the flag. It will be done in the next release.