`make docker` fails with `Hash Sum mismatch` for apt.opennetlinux.org/debian

[paulmenzel]

Debian sid/unstable with docker.io 26.1.5+dfsg1-9+b9

$ git clone https://github.com/dentproject/dentOS/
$ cd dentOS
$ git log --oneline --no-decorate -1 origin/main
e47cf928 Kernel Config Changes made for Docker Installation
$ # apply https://github.com/dentproject/dentOS/pull/312
$ make docker
[…]
Get:19 http://127.0.0.1:3142/archive.debian.org/debian-security buster/updates/main Translation-en [330 kB]
Get:20 http://127.0.0.1:3142/apt.opennetlinux.org/debian unstable/main amd64 Packages [8920 B]
Err:20 http://127.0.0.1:3142/apt.opennetlinux.org/debian unstable/main amd64 Packages
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:8920 [weak]
   - SHA512:96ae706e4828c64d68dbe213ce4258db93fa805c48773fc67532f2287b739ce1bb50eb46fb59404aa140d9430e1a7cbdacabfab7056b397b2d5b77ff21f30730
   - SHA256:f9a46f04e19a24c94344297de1d8a0b4e71e872a1d954dd88321a7f87634cd41
   - SHA1:ce6268e0874f74c9b34e8473a2398d0204ac48cb [weak]
   - MD5Sum:852802fe44212f6bdd59a9f4e80cda1f [weak]
  Hashes of received file:
   - SHA512:32fb66016f695f9f35d6b219f4ab4f5e81c33b8a17b61dfb10912d47b53c9e1c5bfa13745fa5d3226a811f0fe2ea67aba6cfd2356d2d0fe073548a0bbe84360e
   - SHA256:1fa835f352b906be654f67c6daa7ad2c6577e78420581dc57b2f3d7ed9703eff
   - SHA1:f1efa08173dab0c25cc6ca232e0a7ee5682ec20e [weak]
   - MD5Sum:e1f590de181c1c915f6ece0fc16ac0a0 [weak]
   - Filesize:8920 [weak]
  Last modification reported: Thu, 21 Apr 2016 17:12:45 +0000
  Release file created at: Tue, 05 Apr 2016 19:39:19 +0000
Fetched 15.1 MB in 3s (4544 kB/s)
Reading package lists... Done
W: The repository 'copy:/home/build/src/dentOS/REPO/buster/packages/binary-all ./ Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'copy:/home/build/src/dentOS/REPO/buster/packages/binary-amd64 ./ Release' does not have a Release file.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://127.0.0.1:3142/archive.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 648ACFD622F3D138 NO_PUBKEY 0E98404D
386FA1D9 NO_PUBKEY DCC9EFBF77E11517
W: The repository 'http://127.0.0.1:3142/archive.debian.org/debian buster InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://127.0.0.1:3142/deb.frrouting.org/frr buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 74DEED43AB194DBF
W: The repository 'http://127.0.0.1:3142/deb.frrouting.org/frr buster InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: Skipping acquire of configured file 'main/binary-amd64/Packages' as repository 'http://127.0.0.1:3142/deb.frrouting.org/frr buster InRelease' doesn't have the component 'main' (component misspelt in sources.li
st?)
W: Skipping acquire of configured file 'main/i18n/Translation-en' as repository 'http://127.0.0.1:3142/deb.frrouting.org/frr buster InRelease' doesn't have the component 'main' (component misspelt in sources.list?)
W: GPG error: http://127.0.0.1:3142/archive.debian.org/debian-security buster/updates InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 112695A0E562B32A NO_PUBKEY 54404762BBB6E853
W: The repository 'http://127.0.0.1:3142/archive.debian.org/debian-security buster/updates InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: The repository 'http://127.0.0.1:3142/apt.opennetlinux.org/debian unstable Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch http://127.0.0.1:3142/apt.opennetlinux.org/debian/dists/unstable/main/binary-amd64/Packages.gz  Hash Sum mismatch
   Hashes of expected file:
    - Filesize:8920 [weak]
    - SHA512:96ae706e4828c64d68dbe213ce4258db93fa805c48773fc67532f2287b739ce1bb50eb46fb59404aa140d9430e1a7cbdacabfab7056b397b2d5b77ff21f30730
    - SHA256:f9a46f04e19a24c94344297de1d8a0b4e71e872a1d954dd88321a7f87634cd41
    - SHA1:ce6268e0874f74c9b34e8473a2398d0204ac48cb [weak]
    - MD5Sum:852802fe44212f6bdd59a9f4e80cda1f [weak]
   Hashes of received file:
    - SHA512:32fb66016f695f9f35d6b219f4ab4f5e81c33b8a17b61dfb10912d47b53c9e1c5bfa13745fa5d3226a811f0fe2ea67aba6cfd2356d2d0fe073548a0bbe84360e
    - SHA256:1fa835f352b906be654f67c6daa7ad2c6577e78420581dc57b2f3d7ed9703eff
    - SHA1:f1efa08173dab0c25cc6ca232e0a7ee5682ec20e [weak]
    - MD5Sum:e1f590de181c1c915f6ece0fc16ac0a0 [weak]
    - Filesize:8920 [weak]
   Last modification reported: Thu, 21 Apr 2016 17:12:45 +0000
   Release file created at: Tue, 05 Apr 2016 19:39:19 +0000
E: Some index files failed to download. They have been ignored, or old ones used instead.
apt update failed. Exit value: 100
INFO:onlrfs:[profiler] sudo /usr/sbin/multistrap -d buster/rootfs-amd64.d -f /tmp/tmpCNnfaw : 4.67469191551 seconds (0.0779115319252 minutes)
DEBUG:onlrfs:Executing:sudo mount -t devtmpfs dev buster/rootfs-amd64.d/dev
INFO:onlrfs:[profiler] sudo mount -t devtmpfs dev buster/rootfs-amd64.d/dev : 0.0310599803925 seconds (0.000517666339874 minutes)
DEBUG:onlrfs:Executing:sudo mount -t proc proc buster/rootfs-amd64.d/proc
mount: buster/rootfs-amd64.d/proc: mount point does not exist.
ERROR:onlrfs:Exception 'Could not mount proc in rfs.' in OnlRfsContext::__enter__
DEBUG:onlrfs:Executing:sudo umount -l buster/rootfs-amd64.d/dev buster/rootfs-amd64.d/proc
umount: buster/rootfs-amd64.d/proc: no mount point specified.
ERROR:onlrfs:Could not unmount dev and proc
make[3]: *** [/home/build/src/dentOS/make/rfs.mk:51: RFS] Error 1
Traceback (most recent call last):
  File "/home/build/src/dentOS/tools/onlpm.py", line 1423, in <module>
    pm.build(p)
  File "/home/build/src/dentOS/tools/onlpm.py", line 1091, in build
    products = pg.build(dir_=dir_)
  File "/home/build/src/dentOS/tools/onlpm.py", line 694, in build
    self.gmake_locked("", 'Build')
  File "/home/build/src/dentOS/tools/onlpm.py", line 669, in gmake_locked
    ex=OnlPackageError('%s failed.' % operation))
  File "/home/build/src/dentOS/tools/onlu.py", line 126, in execute
    raise ex
onlpm.OnlPackageError: 'Build failed.'   
make[2]: *** [/home/build/src/dentOS/make/pkg.mk:30: pkgall] Error 1
make[1]: *** [/home/build/src/dentOS/make/subdirs.mk:15: all] Error 1
make[1]: Leaving directory '/home/build/src/dentOS/builds/amd64'
make: *** [Makefile:23: amd64] Error 2   
make: *** [Makefile:57: docker] Error 2