Page MenuHomePhabricator
Create Task
Maniphest T162042

Prepare and maintain base container images
Closed, ResolvedPublic
Actions

Description

We should create base container images on top of which all the application containers will be built upon. Not only that but we should define the things that need to be preconfigured/preinstalled in the images as well as the structure of images that will potentionally help with tasks like logging and monitoring. There are quite a few things to think of and work on. Below is a definitely incomplete list of container images that we should end up having. The exact hierarchy/interdependencies and structure of these images is yet undefined and is the goal of this task

  • nodejs
  • python3
  • debian/jessie
  • debian/stretch

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
profile::docker::builder: check out production-imagesoperations/puppetproduction+22 -1
Build a stretch imageoperations/puppetproduction+50 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

akosiaris created this task.Apr 3 2017, 1:50 PM
akosiaris mentioned this in T162043: Define a process to keep images up-to-date on similar standards as the rest of production.
MoritzMuehlenhoff subscribed.Apr 3 2017, 1:52 PM
• mobrovac edited projects, added Services (designing), User-mobrovac; removed Services.Apr 3 2017, 2:22 PM
MoritzMuehlenhoff triaged this task as High priority.Apr 7 2017, 11:20 AM
MoritzMuehlenhoff claimed this task.Apr 28 2017, 1:39 PM
MoritzMuehlenhoff added a comment.Apr 28 2017, 1:45 PM

I don't think we need a trusty image. The remaining services run on trusty are in the process of migration to jessie/stretch or sunset (ocg, rcstream). Plus, supporting trusty would throw a completely different init system into the mix.

gerritbot subscribed.Apr 28 2017, 1:46 PM

Change 350843 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] Build a stretch image

https://gerrit.wikimedia.org/r/350843

gerritbot added a project: Patch-For-Review.Apr 28 2017, 1:46 PM
• mobrovac subscribed.Apr 28 2017, 4:12 PM
In T162042#3220775, @MoritzMuehlenhoff wrote:

I don't think we need a trusty image. The remaining services run on trusty are in the process of migration to jessie/stretch or sunset (ocg, rcstream). Plus, supporting trusty would throw a completely different init system into the mix.

Agreed, but we still have Zotero around, and it is the only service that really needs Trusty :/

thcipriani subscribed.Apr 28 2017, 4:39 PM
akosiaris added a comment.May 2 2017, 10:26 AM
In T162042#3221344, @mobrovac wrote:
In T162042#3220775, @MoritzMuehlenhoff wrote:

I don't think we need a trusty image. The remaining services run on trusty are in the process of migration to jessie/stretch or sunset (ocg, rcstream). Plus, supporting trusty would throw a completely different init system into the mix.

Agreed, but we still have Zotero around, and it is the only service that really needs Trusty :/

I think we can live with zotero being in it's current state (VMs) instead of migrating it to kubernetes for as long as zotero is still in service.

MoritzMuehlenhoff added a comment.May 2 2017, 10:32 AM

Definitely, zotero can reside in sca* until trusty support runs out in two years.

MoritzMuehlenhoff updated the task description. (Show Details)May 3 2017, 8:36 AM
gerritbot added a comment.May 5 2017, 8:37 AM

Change 350843 merged by Muehlenhoff:
[operations/puppet@production] Build a stretch image

https://gerrit.wikimedia.org/r/350843

greg moved this task from INBOX to Watching / External on the Release-Engineering-Team board.May 20 2017, 11:59 AM
greg edited projects, added Release-Engineering-Team (Watching / External); removed Release-Engineering-Team.
Joe added a subtask: T167269: Make security updates of docker images manageable.Jun 7 2017, 10:08 AM
MoritzMuehlenhoff removed MoritzMuehlenhoff as the assignee of this task.Jun 14 2017, 5:47 PM
gerritbot added a comment.Jun 28 2017, 3:14 PM

Change 361881 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/puppet@production] profile::docker::builder: check out production-images

https://gerrit.wikimedia.org/r/361881

gerritbot added a comment.Jun 28 2017, 3:23 PM

Change 361881 merged by Giuseppe Lavagetto:
[operations/puppet@production] profile::docker::builder: check out production-images

https://gerrit.wikimedia.org/r/361881

Joe closed this task as Resolved.Jun 30 2017, 3:00 PM
Joe updated the task description. (Show Details)
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits