⚓ T216384 Integrate Stretch 9.8 point update

base-files/stable 9.9+deb9u8 amd64 [upgradable from: 9.9+deb9u6]
gpgv/stable 2.1.18-8~deb9u4 amd64 [upgradable from: 2.1.18-8~deb9u3]
libc-bin/stable 2.24-11+deb9u4 amd64 [upgradable from: 2.24-11+deb9u3]
libc6/stable 2.24-11+deb9u4 amd64 [upgradable from: 2.24-11+deb9u3]
libsystemd0/stable 232-25+deb9u9 amd64 [upgradable from: 232-25+deb9u8]
libudev1/stable 232-25+deb9u9 amd64 [upgradable from: 232-25+deb9u8]
multiarch-support/stable 2.24-11+deb9u4 amd64 [upgradable from: 2.24-11+deb9u3]

In T216384#4975063, @hashar wrote:

May we update our base Docker container as well? Looking at docker-registry.wikimedia.org/wikimedia-stretch:latest (29397cdce9f7):

Agreed, that makes sense, especially as glibc was updated in this point release.

MoritzMuehlenhoff updated the task description. (Show Details)Feb 25 2019, 2:38 PM

jbond updated the task description. (Show Details)Feb 25 2019, 4:05 PM

jbond updated the task description. (Show Details)

jbond updated the task description. (Show Details)Feb 27 2019, 11:24 AM

jbond updated the task description. (Show Details)Feb 27 2019, 11:30 AM

jbond triaged this task as Medium priority.Mar 4 2019, 7:47 PM

Eventually we had HHVM segfault that started to be very problematic since last week at least (T216689). A stacktrace points at pthreads_create and the Debian changelog glibc_2.24-11+deb9u4 has:

Fix a use after free in pthread_create(). Closes: #916925.

So we would need a rebuild of docker-registry.wikimedia.org/wikimedia-stretch. After an apt update I get:

base-files/stable 9.9+deb9u8 amd64 [upgradable from: 9.9+deb9u6]
gpgv/stable 2.1.18-8~deb9u4 amd64 [upgradable from: 2.1.18-8~deb9u3]
libc-bin/stable 2.24-11+deb9u4 amd64 [upgradable from: 2.24-11+deb9u3]
libc6/stable 2.24-11+deb9u4 amd64 [upgradable from: 2.24-11+deb9u3]
libsystemd0/stable 232-25+deb9u9 amd64 [upgradable from: 232-25+deb9u8]
libudev1/stable 232-25+deb9u9 amd64 [upgradable from: 232-25+deb9u8]
multiarch-support/stable 2.24-11+deb9u4 amd64 [upgradable from: 2.24-11+deb9u3]

hashar mentioned this in T216689: Merge blocker: quibble-vendor-mysql-hhvm-docker in gate fails for most merges (exit status -11).Mar 14 2019, 4:13 PM

Base images for jessie and stretch have been built and pushed to the docker registry.

Change 496608 had a related patch set uploaded (by Hashar; owner: Hashar):
[integration/config@master] docker: rebuild ci-stretch for debian/libc6 update

https://gerrit.wikimedia.org/r/496608

gerritbot added a project: Patch-For-Review.Mar 14 2019, 8:29 PM

Change 496608 merged by jenkins-bot:
[integration/config@master] docker: rebuild ci-stretch for debian/libc6 update

https://gerrit.wikimedia.org/r/496608

hashar unsubscribed.Mar 25 2019, 3:38 PM

MoritzMuehlenhoff updated the task description. (Show Details)Apr 16 2019, 10:49 AM

Maintenance_bot removed a project: Patch-For-Review.May 22 2019, 3:37 PM

MoritzMuehlenhoff updated the task description. (Show Details)Jun 19 2019, 10:25 AM

MoritzMuehlenhoff updated the task description. (Show Details)Jun 19 2019, 10:27 AM

MoritzMuehlenhoff updated the task description. (Show Details)Jul 11 2019, 10:14 AM