Page MenuHomePhabricator

Gitlab pipeline not working with "docker-registry.wikimedia.org/releng/" images
Closed, DuplicatePublicBUG REPORT

Description

List of steps to reproduce (step by step, including full links if applicable):

  • Select one of the images below and try to run a Gitlab pipeline
  • Gitlab job

What happens?:
When using images like:

releng/composer
releng/composer-hhvm
releng/composer-package
releng/composer-package-hhvm
releng/composer-package-php55

in the Gitlab pipeline, the following output is produced by the job:

ERROR: The "docker-registry.wikimedia.org/releng/composer-php72:0.5.0-s6" image is not present on list of allowed images:
- docker-registry.wikimedia.org/*
- centos/*:*
- debian:*
- fedora:*
- opensuse/*:*
- ubuntu:*
- python:*
- ruby:*
- rust:*
- rustlang/rust:nightly
- registry.gitlab.com/gitlab-org/*
Please check runner's configuration:
		https://docs.gitlab.com/runner/configuration/advanced-configuration.html
		#restricting-docker-images-and-services
ERROR: Failed to remove network for build
ERROR: Preparation failed: disallowed image

Event Timeline

Hey Release-Engineering-Team - guessing the releng path might need to be explicitly allow-listed as well? So: docker-registry.wikimedia.org/releng/*? And maybe docker-registry.wikimedia.org/dev/* and docker-registry.wikimedia.org/wikimedia/* as well? Assuming those are images we wish to allow within Gitlab CI.

Yes, looks like it. I just merged this task over there. Sorry about being slammed, but any idea when c805247 might get merged and deployed? Thanks.

From other task:

@sbassett: With that patch merged, this should take effect once runners are re-registered. I can probably get to that after train.