all: children: zuul_unreachable: hosts: {} hosts: {} vars: builder_hostname: image-builder.softwarefactory-project.io builder_pubkey: image-builder.softwarefactory-project.io ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB1jSSaIjfKD0nQPZJwVFLag46XfCl+jRaXTibgY00SJ caches: - baseImage: registry.fedoraproject.org/fedora:42 containerPath: /var/cache/dnf hostPath: ~/.cache/f42 updateCommand: dnf check-update container_file: '# Copyright (C) 2020 Red Hat # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. # # This file is maintained with the ../containers.dhall configuration FROM registry.fedoraproject.org/fedora:42 ENV HOME=/workspace ENV XDG_CACHE_HOME=/workspace/.cache ENV PATH=/workspace/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin # OpenShift container might run as any user, so we need to make sure the workspace is writable: # https://docs.openshift.com/container-platform/4.2/openshift_images/create-images.html#images-create-guide-openshift_create-images WORKDIR /workspace RUN mkdir -p /workspace/.local /workspace/.cache && chgrp -R 0 /workspace && chmod -R g=u /workspace RUN dnf update -y && dnf install -y iproute rsync git traceroute unzip bzip2 make curl wget tar procps-ng which sudo unzip findutils grep python3-pip python3-pyyaml dhall dhall-json && dnf clean all RUN git clone https://github.com/dhall-lang/dhall-lang/ /tmp/dhall-lang && cd /tmp/dhall-lang && git checkout v17.0.0 && echo ./Prelude/package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-lang RUN git clone https://github.com/dhall-lang/dhall-kubernetes/ /tmp/dhall-kubernetes && cd /tmp/dhall-kubernetes && git checkout v4.0.0 && echo ./package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-kubernetes RUN git clone https://opendev.org/zuul/zuul-operator/ /tmp/zuul-operator && cd /tmp/zuul-operator && git checkout 2c367363e80a670a9b1690c27445a57be14da2f1 && echo ./conf/zuul/resources.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/zuul-operator RUN git clone https://github.com/TristanCacqueray/dhall-openshift/ /tmp/dhall-openshift && cd /tmp/dhall-openshift && git checkout 4105f811eed92d1c535350c373782107b2e61953 && echo ./mini-package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-openshift RUN git clone https://github.com/softwarefactory-project/dhall-ansible-collection-openstack-cloud/ /tmp/dhall-ansible-collection-openstack-cloud && cd /tmp/dhall-ansible-collection-openstack-cloud && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-ansible-collection-openstack-cloud RUN git clone https://github.com/softwarefactory-project/dhall-ansible-collection-ansible-posix/ /tmp/dhall-ansible-collection-ansible-posix && cd /tmp/dhall-ansible-collection-ansible-posix && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-ansible-collection-ansible-posix RUN git clone https://github.com/softwarefactory-project/dhall-ansible-collection-containers-podman/ /tmp/dhall-ansible-collection-containers-podman && cd /tmp/dhall-ansible-collection-containers-podman && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-ansible-collection-containers-podman RUN git clone https://github.com/softwarefactory-project/dhall-npm-package/ /tmp/dhall-npm-package && cd /tmp/dhall-npm-package && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-npm-package RUN git clone https://github.com/softwarefactory-project/dhall-openstacksdk/ /tmp/dhall-openstacksdk && cd /tmp/dhall-openstacksdk && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-openstacksdk RUN git clone https://github.com/softwarefactory-project/dhall-prometheus/ /tmp/dhall-prometheus && cd /tmp/dhall-prometheus && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-prometheus RUN git clone https://github.com/softwarefactory-project/dhall-containerfile/ /tmp/dhall-containerfile && cd /tmp/dhall-containerfile && git checkout 0.3.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-containerfile RUN git clone https://github.com/softwarefactory-project/dhall-ansible/ /tmp/dhall-ansible && cd /tmp/dhall-ansible && git checkout 0.1.0 && echo ././package.dhall | dhall freeze --all > /dev/null && git checkout 0.2.1 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-ansible RUN git clone https://github.com/softwarefactory-project/dhall-zuul/ /tmp/dhall-zuul && cd /tmp/dhall-zuul && git checkout 0.5.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-zuul RUN git clone https://github.com/softwarefactory-project/dhall-nodepool/ /tmp/dhall-nodepool && cd /tmp/dhall-nodepool && git checkout 0.4.0 && echo ././package.dhall | dhall freeze --all > /dev/null && cd / && rm -Rf /tmp/dhall-nodepool RUN git clone --depth 1 https://softwarefactory-project.io/r/zuul-images-jobs /tmp/zuul-images-jobs && git clone --depth 1 https://softwarefactory-project.io/r/software-factory/sf-infra /tmp/tmp-make && cd /tmp/tmp-make && sed -e ''/zuulfmt/d'' -i Makefile && make && cd / && rm -Rf /tmp/tmp-make && rm -Rf /tmp/zuul-images-jobs RUN git clone --depth 1 https://softwarefactory-project.io/r/zuul-images-jobs /tmp/zuul-images-jobs && git clone --depth 1 https://softwarefactory-project.io/r/containers /tmp/tmp-make && cd /tmp/tmp-make && sed -e ''/zuulfmt/d'' -i Makefile && make && cd / && rm -Rf /tmp/tmp-make && rm -Rf /tmp/zuul-images-jobs # In openshift, the uid is different, so we need to make sure the group can write to the cache: RUN chmod -R 00775 $XDG_CACHE_HOME # This run create a sudo configuration so that when a container running as root delete /etc/sudoers.d/zuul, # then it can no longer run sudo, satisfying the revoke-sudo zuul jobs role. RUN echo ''zuul:x:0:0:root:/workspace:/bin/bash'' >> /etc/passwd && mv /etc/sudoers /etc/sudoers.d/zuul && grep includedir /etc/sudoers.d/zuul > /etc/sudoers && sed -e ''s/.*includedir.*//'' -i /etc/sudoers.d/zuul && chmod 440 /etc/sudoers # Workaround for k1s RUN ln -s /workspace/src /root/src && ln -s /workspace/.local /root/.local && ln -s /workspace/.cache /root/.cache && chmod 00777 /workspace/.local /workspace/.cache ' image_frozen: false image_name: zuul-worker-dhall image_tag: latest org_name: quay.io/software-factory test_command: dhall --version update_file: none zuul: _inheritance_path: - '' - '' - '' - '' ansible_version: '9' artifacts: - branch: master change: '35221' job: dnf-f42-update metadata: type: zuul_manifest name: Zuul Manifest patchset: '3' project: containers url: https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/logs/68d/containers-update/68def2a7286a41f9b43818fdee590ab8/zuul-manifest.json attempts: 1 branch: master build: 4799dec4119945ddaf34c4c0e791b9ea build_refs: - branch: master change: '35221' change_message: 'freeze httpd-auth-gateway container image Change-Id: I9e77a93fd523288fb01ec6b9583bbf1073480358 ' change_url: https://softwarefactory-project.io/r/c/containers/+/35221 commit_id: 291a149ff48b4e24b1b079d7d0007acc2488eba5 patchset: '3' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/containers name: containers short_name: containers src_dir: src/softwarefactory-project.io/containers src_dir: src/softwarefactory-project.io/containers topic: null buildset: a027d4a1280a41e891bbda6fc7da7a98 buildset_refs: - branch: master change: '35221' change_message: 'freeze httpd-auth-gateway container image Change-Id: I9e77a93fd523288fb01ec6b9583bbf1073480358 ' change_url: https://softwarefactory-project.io/r/c/containers/+/35221 commit_id: 291a149ff48b4e24b1b079d7d0007acc2488eba5 patchset: '3' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/containers name: containers short_name: containers src_dir: src/softwarefactory-project.io/containers src_dir: src/softwarefactory-project.io/containers topic: null change: '35221' change_message: 'freeze httpd-auth-gateway container image Change-Id: I9e77a93fd523288fb01ec6b9583bbf1073480358 ' change_url: https://softwarefactory-project.io/r/c/containers/+/35221 child_jobs: - zuul-worker-dhall-latest-test commit_id: 291a149ff48b4e24b1b079d7d0007acc2488eba5 event_id: 19a54423181d4685a663df106704efb9 executor: hostname: 38.102.83.51 inventory_file: /var/lib/zuul/builds/4799dec4119945ddaf34c4c0e791b9ea/ansible/inventory.yaml log_root: /var/lib/zuul/builds/4799dec4119945ddaf34c4c0e791b9ea/work/logs result_data_file: /var/lib/zuul/builds/4799dec4119945ddaf34c4c0e791b9ea/work/results.json src_root: /var/lib/zuul/builds/4799dec4119945ddaf34c4c0e791b9ea/work/src work_root: /var/lib/zuul/builds/4799dec4119945ddaf34c4c0e791b9ea/work include_vars: [] items: - branch: master change: '35221' change_message: 'freeze httpd-auth-gateway container image Change-Id: I9e77a93fd523288fb01ec6b9583bbf1073480358 ' change_url: https://softwarefactory-project.io/r/c/containers/+/35221 commit_id: 291a149ff48b4e24b1b079d7d0007acc2488eba5 patchset: '3' project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/containers name: containers short_name: containers src_dir: src/softwarefactory-project.io/containers topic: null job: zuul-worker-dhall-latest-update jobtags: [] max_attempts: 1 message: ZnJlZXplIGh0dHBkLWF1dGgtZ2F0ZXdheSBjb250YWluZXIgaW1hZ2UKCkNoYW5nZS1JZDogSTllNzdhOTNmZDUyMzI4OGZiMDFlYzZiOTU4M2JiZjEwNzM0ODAzNTgK patchset: '3' pipeline: hub-update playbook_context: playbook_projects: trusted/project_0/gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config: canonical_name: gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config checkout: main commit: 3b968a3c02f04c4eabd875b7c51d51df721f0ec2 trusted/project_1/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 untrusted/project_0/softwarefactory-project.io/zuul-images-jobs: canonical_name: softwarefactory-project.io/zuul-images-jobs checkout: master commit: 2972b4dfd58b4e49fa23492a6ffa40def2ce6256 untrusted/project_1/gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config: canonical_name: gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config checkout: main commit: 3b968a3c02f04c4eabd875b7c51d51df721f0ec2 untrusted/project_2/opendev.org/zuul/zuul-jobs: canonical_name: opendev.org/zuul/zuul-jobs checkout: master commit: 82e3e8b1292a25e38235bb92b157992d326531d1 playbooks: - path: untrusted/project_0/softwarefactory-project.io/zuul-images-jobs/playbooks/image/update.yaml roles: - checkout: master checkout_description: playbook branch link_name: ansible/playbook_0/role_0/zuul-images-jobs link_target: untrusted/project_0/softwarefactory-project.io/zuul-images-jobs role_path: ansible/playbook_0/role_0/zuul-images-jobs/roles - checkout: master checkout_description: zuul branch link_name: ansible/playbook_0/role_2/zuul-jobs link_target: untrusted/project_2/opendev.org/zuul/zuul-jobs role_path: ansible/playbook_0/role_2/zuul-jobs/roles post_playbooks: - path: trusted/project_0/gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config/playbooks/post.yaml roles: - checkout: master checkout_description: zuul branch link_name: ansible/post_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/post_playbook_0/role_1/zuul-jobs/roles pre_playbooks: - path: trusted/project_0/gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config/playbooks/pre.yaml roles: - checkout: master checkout_description: zuul branch link_name: ansible/pre_playbook_0/role_1/zuul-jobs link_target: trusted/project_1/opendev.org/zuul/zuul-jobs role_path: ansible/pre_playbook_0/role_1/zuul-jobs/roles post_review: true post_timeout: null pre_timeout: null project: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/containers name: containers short_name: containers src_dir: src/softwarefactory-project.io/containers projects: gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config: canonical_hostname: gitlab.com canonical_name: gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config checkout: main checkout_description: project override ref commit: 3b968a3c02f04c4eabd875b7c51d51df721f0ec2 name: softwarefactory-project/centosinfra-prod/containers-update-config required: true short_name: containers-update-config src_dir: src/gitlab.com/softwarefactory-project/centosinfra-prod/containers-update-config softwarefactory-project.io/containers: canonical_hostname: softwarefactory-project.io canonical_name: softwarefactory-project.io/containers checkout: master checkout_description: zuul branch commit: 291a149ff48b4e24b1b079d7d0007acc2488eba5 name: containers required: false short_name: containers src_dir: src/softwarefactory-project.io/containers ref: refs/changes/21/35221/3 resources: {} tenant: containers-update timeout: 10800 topic: null voting: true