Hello,
During installation on my server, the HestiaCP installer automatically adds the packages.sury.org PHP and Apache repositories. However, since August 12, 2025, the packages.sury.org repository has been officially archived and switched to read-only mode. This means its SSL certificate will no longer be renewed and no further package updates will be provided.
As a result, the installation process fails immediately with errors like:
W: Failed to fetch https://packages.sury.org/apache2/dists/bookworm/InRelease 503 certificate has expired [IP: 146.75.47.52 443]
W: Failed to fetch https://packages.sury.org/php/dists/bookworm/InRelease 503 certificate has expired [IP: 146.75.47.52 443]
W: Some index files failed to download. They have been ignored, or old ones used instead.
Because of this, PHP 8.3 and its dependencies cannot be installed, and the HestiaCP installation stops. At the moment, any new HestiaCP installation on Debian 12 (aarch64) will fail due to this issue.
My question: Will the HestiaCP team provide an alternative solution (for example, hosting its own PHP repository or switching to Debian’s official PHP packages) to replace the now-archived sury.org repo, especially for Debian 12 (aarch64)?
My server details:
-
OS: Debian GNU/Linux 12 (aarch64)
-
CPU: 8 cores
-
RAM: 7.5 GB
-
Disk: 471 GB
-
Virtualization: Dedicated
Thanks in advance for clarification.
