httpd-fcgi image is failing validation using its own test.sh
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Legoktm
	May 26 2021, 10:56 PM

Project Tags

Referenced Files

None

Subscribers

Aklapper

Joe

Legoktm

Description

Deploying shellbox to staging failed because the httpd-fcgi image configured was still using "www-data" user. The httpd-fcgi image was updated to use numerical UIDs in 2.4.38-3 but that version was never published to the registry. I tried to build 2.4.38-4 just now and it fails because of test.sh not working:

...
2021-05-26 22:45:45,778 [docker-pkg-build] INFO - Successfully built 4d57c64823fb (image.py:210)
2021-05-26 22:45:45,787 [docker-pkg-build] INFO - Successfully tagged docker-registry.discovery.wmnet/httpd-fcgi:2.4.38-4 (image.py:210)
2021-05-26 22:45:45,787 [docker-pkg-build] INFO - Removing build context /tmp/docker-pkg-httpd-fcgiorgomwtr (image.py:491)
2021-05-26 22:45:45,812 [docker-pkg-build] ERROR - Verification of image docker-registry.discovery.wmnet/httpd-fcgi failed with return code 2 (image.py:448)
2021-05-26 22:45:45,813 [docker-pkg-build] ERROR - -- output: None (image.py:450)

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	httpd-fcgi: fixes to functionality and tests	Giuseppe Lavagetto	operations/docker-images/production-images	master	+16 -9

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	Joe	T252745 Sandbox/limit child processes within a container runtime
Resolved	tstarling	T260330 RFC: PHP microservice for containerized shell execution
Resolved	Legoktm	T281423 New Service Request Shellbox
Resolved	Joe	T283774 httpd-fcgi image is failing validation using its own test.sh

Event Timeline

Legoktm created this task.May 26 2021, 10:56 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 26 2021, 10:56 PM

Legoktm updated the task description. (Show Details)May 26 2021, 10:59 PM

Legoktm added a parent task: T281423: New Service Request Shellbox.May 26 2021, 11:01 PM

Legoktm updated the task description. (Show Details)

Marostegui triaged this task as Medium priority.May 27 2021, 5:13 AM

Marostegui removed a project: SRE.

Joe claimed this task.May 27 2021, 9:24 AM

Joe raised the priority of this task from Medium to High.

Change 696029 had a related patch set uploaded (by Giuseppe Lavagetto; author: Giuseppe Lavagetto):

[operations/docker-images/production-images@master] httpd-fcgi: fixes to functionality and tests

https://gerrit.wikimedia.org/r/696029

gerritbot added a project: Patch-For-Review.May 27 2021, 9:29 AM

This turned out to be more issues than I thought. There were several small issues with the test.sh script, but also a larger issue with the actual apache configuration, both fixed in the patch above.

Change 696029 merged by Giuseppe Lavagetto: