Page MenuHomePhabricator

Rebuild all blubber build docker images running on kubernetes
Open, HighPublic

Description

To ensure images are not running as root in kubernetes clusters we need the images to have numeric UIDs rather then user names set in the "USER" instructions (via Dockerfile).

With https://gerrit.wikimedia.org/r/c/blubber/+/660771 merged and deployed, blubber(oid) will take care of that automatically, but a rebuild (and deploy to kubernetes) is needed for images build <= 2021-02-03.

Snapshot as of 2021-02-09:

If I tagged you, your project or team here, I figured you might be maintaining one of the images above. Please trigger a rebuild and deploy wherever you can and/or get back to me with questions. Feel free so unsubscribe/correct me if I made a mistake!

Event Timeline

JMeybohm created this task.Tue, Feb 9, 2:54 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptTue, Feb 9, 2:54 PM
JMeybohm triaged this task as High priority.Wed, Feb 10, 3:48 PM
JMeybohm updated the task description. (Show Details)

Change 663235 had a related patch set uploaded (by Mvolz; owner: Mvolz):
[mediawiki/services/citoid@master] Trigger re-build

https://gerrit.wikimedia.org/r/663235

Change 663260 had a related patch set uploaded (by Mvolz; owner: Mvolz):
[mediawiki/services/zotero@master] Trigger rebuild

https://gerrit.wikimedia.org/r/663260

Change 663235 abandoned by Mvolz:
[mediawiki/services/citoid@master] Trigger re-build

Reason:
rebuild got triggered elsewhere

https://gerrit.wikimedia.org/r/663235

Change 663235 restored by Mvolz:
[mediawiki/services/citoid@master] Trigger re-build

https://gerrit.wikimedia.org/r/663235

Change 663265 had a related patch set uploaded (by Jforrester; owner: Jforrester):
[mediawiki/services/citoid@master] Trigger rebuild

https://gerrit.wikimedia.org/r/663265

Change 663265 abandoned by Jforrester:
[mediawiki/services/citoid@master] Trigger rebuild

Reason:

https://gerrit.wikimedia.org/r/663265

Change 663235 merged by jenkins-bot:
[mediawiki/services/citoid@master] Trigger re-build

https://gerrit.wikimedia.org/r/663235

Change 663303 had a related patch set uploaded (by Physikerwelt; owner: Physikerwelt):
[mediawiki/services/mathoid@master] Trigger rebuild

https://gerrit.wikimedia.org/r/663303

Change 663260 merged by jenkins-bot:
[mediawiki/services/zotero@master] Trigger rebuild

https://gerrit.wikimedia.org/r/663260

Change 663524 had a related patch set uploaded (by Mvolz; owner: Mvolz):
[operations/deployment-charts@master] Update zotero

https://gerrit.wikimedia.org/r/663524

Change 663524 merged by jenkins-bot:
[operations/deployment-charts@master] Update zotero

https://gerrit.wikimedia.org/r/663524

Mvolz updated the task description. (Show Details)Thu, Feb 11, 11:54 AM
Mvolz updated the task description. (Show Details)

Change 663566 had a related patch set uploaded (by Hnowlan; owner: Hnowlan):
[operations/deployment-charts@master] similar-users: deploy rebuilt image

https://gerrit.wikimedia.org/r/663566

Change 663566 merged by jenkins-bot:
[operations/deployment-charts@master] similar-users: deploy rebuilt image

https://gerrit.wikimedia.org/r/663566

hnowlan updated the task description. (Show Details)Thu, Feb 11, 1:06 PM

Change 663303 merged by jenkins-bot:
[mediawiki/services/mathoid@master] Trigger rebuild

https://gerrit.wikimedia.org/r/663303

JMeybohm updated the task description. (Show Details)Mon, Feb 15, 9:17 AM
JMeybohm added a subscriber: Physikerwelt.

Change 663873 had a related patch set uploaded (by JMeybohm; owner: PipelineBot):
[operations/deployment-charts@master] mathoid: pipeline bot promote

https://gerrit.wikimedia.org/r/663873

kostajh updated the task description. (Show Details)Mon, Feb 15, 1:08 PM

linkrecommendation / research-mwaddlink was handled via https://gerrit.wikimedia.org/r/c/operations/deployment-charts/+/660394

Change 666376 had a related patch set uploaded (by Hnowlan; owner: Hnowlan):
[mediawiki/services/change-propagation@master] Bump redis-mock version to trigger package rebuild.

https://gerrit.wikimedia.org/r/666376

Change 666376 merged by jenkins-bot:
[mediawiki/services/change-propagation@master] Bump redis-mock version to trigger package rebuild.

https://gerrit.wikimedia.org/r/666376

Change 666390 had a related patch set uploaded (by Hnowlan; owner: Hnowlan):
[operations/deployment-charts@master] changeprop/changeprop-jobqueue: Bump image version, bump log level in eqiad changeprop

https://gerrit.wikimedia.org/r/666390

Change 666390 merged by jenkins-bot:
[operations/deployment-charts@master] changeprop/changeprop-jobqueue: Bump image version, bump log level in eqiad changeprop

https://gerrit.wikimedia.org/r/666390

hnowlan updated the task description. (Show Details)Tue, Feb 23, 5:01 PM
hnowlan updated the task description. (Show Details)Tue, Feb 23, 5:29 PM