-
Notifications
You must be signed in to change notification settings - Fork 240
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: Pipeline agent image update from 18.04 to 22.04 | AzSecPack #2327
Conversation
ab02fd2
to
54fb0b3
Compare
Will integrate changes from #1985 which #2320 (comment) mentions in the matching closed PR in a future PR to fix the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me!
@@ -499,7 +499,7 @@ manifest-push: # util target to push multiarch container manifest. | |||
$(CONTAINER_BUILDER) manifest push --all $(IMAGE_REGISTRY)/$(IMAGE):$(TAG) docker://$(IMAGE_REGISTRY)/$(IMAGE):$(TAG) | |||
|
|||
manifest-skopeo-archive: # util target to export tar archive of multiarch container manifest. | |||
skopeo copy --all docker://$(IMAGE_REGISTRY)/$(IMAGE):$(TAG) oci-archive:$(IMAGE_ARCHIVE_DIR)/$(IMAGE)-$(TAG).tar | |||
skopeo copy --all docker://$(IMAGE_REGISTRY)/$(IMAGE):$(TAG) oci-archive:$(IMAGE_ARCHIVE_DIR)/$(IMAGE)-$(TAG).tar --debug |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we want to keep this as debug?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe we should as it provides good understanding of what is happening with the *auth.json
files IRT skopeo. Future changes to skopeo could break the current hack and future CI changes of this command.
|
||
echo "setting XDG_RUNTIME_DIR" | ||
export XDG_RUNTIME_DIR=/run/user/$(id -u) | ||
echo $XDG_RUNTIME_DIR |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we want to set this in the task or set this as an env var from the pipeline level?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If we set this as an env var in the pipeline then it impacts podman and buildah negatively. This hack is exclusive to skopeo.
* Use ResolveCtl for Ubuntu22.04 * test: debug * test: XDG dir * ci: Remove sudo for testvalidate * ci: remove sudo dualstack * ci: remove test scripts * fix: lint --------- Co-authored-by: Sheyla Trudo <[email protected]>
…#2327) to release/v1.4 (#2353) fix: Pipeline agent image update from 18.04 to 22.04 | AzSecPack (#2327) * Use ResolveCtl for Ubuntu22.04 * test: debug * test: XDG dir * ci: Remove sudo for testvalidate * ci: remove sudo dualstack * ci: remove test scripts * fix: lint --------- Co-authored-by: Sheyla Trudo <[email protected]>
Reason for Change:
This PR is the first to migrate our agent pool to a 1ES maintained agent pool. This is primarily to unblock the ACN PR pipeline and will be improved upon.
Future CI:
sudo
where applicableIssue Fixed:
Requirements:
Notes: