From 71f1bce7bd611967d7aba59c6d8122e645d286f1 Mon Sep 17 00:00:00 2001
From: Tim Hockin <thockin@google.com>
Date: Thu, 27 May 2021 10:17:38 -0700
Subject: [PATCH] Downgrade libcurl to avoid HTTP bug

---
 Dockerfile.in | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Dockerfile.in b/Dockerfile.in
index 8878d35..6ead6c5 100644
--- a/Dockerfile.in
+++ b/Dockerfile.in
@@ -58,8 +58,15 @@ RUN apt-get -y install --no-install-recommends \
         coreutils \
         socat \
         openssh-client
+# We want a newer git than the norm.
 RUN apt-get -y -t buster-backports install --no-install-recommends \
         git
+# libcurl3-gnutls=7.74.0-1.2~bpo10+1 is broken.  We can downgrade for now until
+# the fix reaches upstream.
+# https://github.com/kubernetes/git-sync/issues/395
+RUN apt-get -y install --no-install-recommends --allow-downgrades \
+        libcurl3-gnutls:amd64=7.64.0-4+deb10u2
+RUN apt-get -y autoremove
 RUN rm -rf /var/lib/apt/lists/*
 
 # By default we will run as this user...