Page MenuHomePhabricator
Create Task
Maniphest T423622

New base images without mirrors.wikimedia.org
Closed, ResolvedPublic
Actions

Description

We'll need to rebuild docker images without mirrors.wikimedia.org in their apt sources.

To do that and still use our base images, we'll need new base images for debian:

  • docker-registry.wikimedia.org/trixie
  • docker-registry.wikimedia.org/bookworm
  • docker-registry.wikimedia.org/bullseye

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
jjb: Bump ci-bullseye/-bookworm/-trixie images for mirrors.wm.org removalJforresterintegration/configmaster+185 -185
Docker: Bump ci-bullseye/-bookworm/-trixie for mirrors.wm.org removalJforresterintegration/configmaster+563 -1
Switch the base images to deb.debian.orgMuehlenhoffoperations/puppetproduction+3 -3
Customize query in gerrit

Related Objects
Search...

Event Timeline

thcipriani created this task.Apr 16 2026, 4:10 PM
Jdforrester-WMF subscribed.Apr 16 2026, 4:19 PM

To confirm, specifically is this task talking about SRE's base Debian distro images, whose sourceslist is configured by: https://gerrit.wikimedia.org/g/operations/puppet/+/HEAD/modules/docker/templates/images/sourceslist.base.erb ?

Happy to cascade for integration/config.git images once the Wikimedia base images are updated.

thcipriani updated the task description. (Show Details)Apr 16 2026, 5:25 PM
thcipriani added a comment.Apr 16 2026, 5:30 PM
In T423622#11830659, @Jdforrester-WMF wrote:

To confirm, specifically is this task talking about SRE's base Debian distro images, whose sourceslist is configured by: https://gerrit.wikimedia.org/g/operations/puppet/+/HEAD/modules/docker/templates/images/sourceslist.base.erb ?

Happy to cascade for integration/config.git images once the Wikimedia base images are updated.

Updated task description to clarify, yes, the SRE debian base images.

Existing images should still work fine at run time. But having mirrors.wikimedia.org in the base images may cause problems at build time for new services (and future updates of runtime images).

MoritzMuehlenhoff added a comment.Apr 16 2026, 5:37 PM

I'll take care of this tomorrow.

gerritbot added a comment.Apr 17 2026, 6:58 AM

Change #1273453 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Switch the base images to deb.debian.org

https://gerrit.wikimedia.org/r/1273453

gerritbot added a project: Patch-For-Review.Apr 17 2026, 6:58 AM
gerritbot added a comment.Apr 17 2026, 10:45 AM

Change #1273453 merged by Muehlenhoff:

[operations/puppet@production] Switch the base images to deb.debian.org

https://gerrit.wikimedia.org/r/1273453

MoritzMuehlenhoff added a comment.Apr 17 2026, 10:46 AM
In T423622#11830895, @thcipriani wrote:

Updated task description to clarify, yes, the SRE debian base images.

Existing images should still work fine at run time. But having mirrors.wikimedia.org in the base images may cause problems at build time for new services (and future updates of runtime images).

I've just deployed a config change, the next rebuild of the base images in the night from Sunday to Monday will switch them to deb.debian.org

MoritzMuehlenhoff triaged this task as High priority.Apr 17 2026, 10:47 AM
Maintenance_bot removed a project: Patch-For-Review.Apr 17 2026, 11:31 AM
Jdforrester-WMF changed the task status from Open to In Progress.Apr 20 2026, 2:51 PM
Jdforrester-WMF claimed this task.
gerritbot added a comment.Apr 20 2026, 2:56 PM

Change #1275432 had a related patch set uploaded (by Jforrester; author: Jforrester):

[integration/config@master] Docker: Bump ci-bullseye/-bookworm/-trixie for mirrors.wm.org removal

https://gerrit.wikimedia.org/r/1275432

gerritbot added a project: Patch-For-Review.Apr 20 2026, 2:56 PM
gerritbot added a comment.Apr 20 2026, 3:01 PM

Change #1275432 merged by jenkins-bot:

[integration/config@master] Docker: Bump ci-bullseye/-bookworm/-trixie for mirrors.wm.org removal

https://gerrit.wikimedia.org/r/1275432

Stashbot added a comment.Apr 20 2026, 3:03 PM

Mentioned in SAL (#wikimedia-releng) [2026-04-20T15:03:14Z] <James_F> Docker: Bump ci-bullseye/-bookworm/-trixie for mirrors.wm.org removal, T423622

Maintenance_bot removed a project: Patch-For-Review.Apr 20 2026, 3:32 PM
gerritbot added a comment.Apr 20 2026, 5:56 PM

Change #1275486 had a related patch set uploaded (by Jforrester; author: Jforrester):

[integration/config@master] jjb: Bump ci-bullseye/-bookworm/-trixie images for mirrors.wm.org removal

https://gerrit.wikimedia.org/r/1275486

gerritbot added a project: Patch-For-Review.Apr 20 2026, 5:56 PM
Stashbot added a comment.Apr 20 2026, 6:19 PM

Mentioned in SAL (#wikimedia-releng) [2026-04-20T18:19:03Z] <James_F> jjb: All 486 (!) jobs now updated for T423622

gerritbot added a comment.Apr 20 2026, 6:22 PM

Change #1275486 merged by jenkins-bot:

[integration/config@master] jjb: Bump ci-bullseye/-bookworm/-trixie images for mirrors.wm.org removal

https://gerrit.wikimedia.org/r/1275486

Maintenance_bot removed a project: Patch-For-Review.Apr 20 2026, 6:31 PM
Jdforrester-WMF closed this task as Resolved.Apr 20 2026, 6:42 PM

OK, this should now be Resolved. Hopefully.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits