Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

new(ci): push docker images to ghcr. #70

Merged
merged 17 commits into from
Feb 6, 2024
Merged

new(ci): push docker images to ghcr. #70

merged 17 commits into from
Feb 6, 2024

Conversation

FedeDP
Copy link
Collaborator

@FedeDP FedeDP commented Aug 1, 2023

WIP until we've got a nwe self-hosted runner associated with the kernel-testing repository (right now, the self-hosted is only available for libs repo).

@poiana
Copy link

poiana commented Oct 30, 2023

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

@FedeDP
Copy link
Collaborator Author

FedeDP commented Nov 2, 2023

/remove-lifecycle stale

@FedeDP
Copy link
Collaborator Author

FedeDP commented Dec 6, 2023

We now have actuated.dev arm nodes! 🚀

@FedeDP FedeDP changed the title wip: new(ci): push docker images to ghcr. new(ci): push docker images to ghcr. Dec 6, 2023
@FedeDP
Copy link
Collaborator Author

FedeDP commented Dec 6, 2023

Build is failing because :

2023-12-06T10:23:58.0504130Z ERROR: failed to solve: failed to register layer: write /usr/lib64/libstdc++.so.6.0.29: no space left on device

I think we need more disk space from actuated.dev nodes.

@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from c017c98 to 132f5d7 Compare December 6, 2023 11:31
@poiana poiana added size/L and removed size/M labels Dec 6, 2023
@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from 132f5d7 to 93e2c52 Compare December 6, 2023 11:41
images/Makefile Outdated
echo "Pushing image: $$image"; \
docker push $$image; \
fi; \
docker image rm -f $(docker images -a | grep -v "initrd-builder:0.0.1" | awk 'NR>1 {print $3}'); \
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Clear up all images except for initrd-builder:0.0.1 that is not pushed anywhere and is only used locally as a base for other images.

@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from 93e2c52 to 56cff14 Compare December 6, 2023 13:11
@FedeDP
Copy link
Collaborator Author

FedeDP commented Dec 6, 2023

/hold

Signed-off-by: Federico Di Pierro <[email protected]>
…modernbpf-builder now.

Signed-off-by: Federico Di Pierro <[email protected]>
@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from acf756f to 16fe946 Compare December 6, 2023 15:40
images/Makefile Outdated
echo "Pushing image: $$image"; \
docker push $$image; \
fi; \
docker image rm -f $$image; \
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since images are big, we don't want to fill up the runner node disk space; therefore after each build and eventual push, clean up images.

@@ -25,8 +25,6 @@ RUN dnf groupinstall -y 'Development Tools' && \
xargs -I@ curl -Lo headers.rpm ${URL}@ && \
grep -E 'kernel-devel-'${VERSION}'.*.rpm' primary.xml | grep href | cut -d\" -f2 | \
xargs -I@ curl -Lo sources.rpm ${URL}@ && \
grep -E 'bpftool-'${VERSION}'.*.rpm' primary.xml | grep href | cut -d\" -f2 | \
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

bpftool is not needed since scap-open with modern-bpf built in gets built in a specific step with a specific rootfs.

@FedeDP
Copy link
Collaborator Author

FedeDP commented Dec 11, 2023

There are multiple issues still since lots of distros killed headers packages that we were using (ie: they are not present anymore in their repos).

therealbobo
therealbobo previously approved these changes Dec 11, 2023
@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from cacf3f8 to f51cdc4 Compare January 30, 2024 16:18
@poiana poiana added size/XXL and removed size/XL labels Jan 31, 2024
Signed-off-by: Federico Di Pierro <[email protected]>
Signed-off-by: Federico Di Pierro <[email protected]>
@FedeDP
Copy link
Collaborator Author

FedeDP commented Jan 31, 2024

Still failing:
arm64:

FAIL: ghcr.io/falcosecurity/kernel-testing/fedora-kernel:6.2-aarch64-7724324758
FAIL: ghcr.io/falcosecurity/kernel-testing/oraclelinux-kernel:5.15-aarch64-7724324758

amd64:

FAIL: ghcr.io/falcosecurity/kernel-testing/oraclelinux-kernel:2.6-x86_64-7724324758

…ht override kernel Makefile variable.

Signed-off-by: Federico Di Pierro <[email protected]>
Also, moved ubuntu-6.3 to 6.5 and added archlinux x86_64 6.7 entry.
Finally, renamed `version` in `tag`.

Signed-off-by: Federico Di Pierro <[email protected]>
@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from 214ae89 to 777a6d1 Compare January 31, 2024 12:22
…pported.

Since virtio_mmio is not supported on this kernel.

Signed-off-by: Federico Di Pierro <[email protected]>
@FedeDP
Copy link
Collaborator Author

FedeDP commented Jan 31, 2024

Arm64 should be all ok; we are having issues with the actuated arm64 node and docker:

2024-01-31T15:39:33.0685388Z #3 ERROR: failed to copy: httpReadSeeker: failed open: failed to do request: Get "http://192.168.128.1:5000/v2/library/fedora/manifests/sha256:3f01c8f79691df76331cb4bb0944794a60850475e859c15e49513fcbe0a3d88a?ns=docker.io": dial tcp 192.168.128.1:5000: connect: connection refused

images/Makefile Show resolved Hide resolved
images/Makefile Outdated Show resolved Hide resolved
images/Makefile Outdated Show resolved Hide resolved
@FedeDP FedeDP force-pushed the new/push_images_ghcr branch 3 times, most recently from c666823 to 612325b Compare February 6, 2024 12:18
@FedeDP FedeDP force-pushed the new/push_images_ghcr branch from 612325b to 56a25dd Compare February 6, 2024 12:47
@FedeDP
Copy link
Collaborator Author

FedeDP commented Feb 6, 2024

/unhold
We are finally ready!

@therealbobo
Copy link
Collaborator

/approve

@poiana
Copy link

poiana commented Feb 6, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: FedeDP, therealbobo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana poiana merged commit f10873b into main Feb 6, 2024
5 checks passed
@poiana poiana deleted the new/push_images_ghcr branch February 6, 2024 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants