CI-users February 2018

ci-users@lists.centos.org

11 participants
9 discussions

apps.ci SCC and oci-kvm-hook ?
by Colin Walters 09 Apr '18

09 Apr '18

Hi, we'd like to migrate some of our workloads into Kubernetes jobs; see for example: https://github.com/projectatomic/papr/pull/70/commits/bdaabc975b6770e2c6826… What are the available resources in apps.ci versus Duffy? A lot of our jobs want basically a "classic Docker" environment with e.g. uid 0, but not CAP_SYS_ADMIN. And with seccomp disabled, etc. I was trying to create the test pod below, but it fails. It looks like our accounts use the default SCC. Can we lift these restrictions? BTW, I'd also like oci-kvm-hook installed, with this patch: https://github.com/stefwalter/oci-kvm-hook/pull/4 apiVersion: v1 kind: DeploymentConfig metadata: labels: run: cgwalters-shell name: cgwalters-shell spec: replicas: 1 selector: run: cgwalters-shell strategy: resources: {} template: metadata: labels: run: cgwalters-shell spec: containers: - args: - sleep - 24h image: registry.fedoraproject.org/fedora:27 name: cgwalters-shell # Run as uid 0 securityContext: runAsUser: 0

6 9

Jenkins Pipeline triggered via GitHub webhook
by Christoph Goern 17 Feb '18

17 Feb '18

Hey all, its there a howto or code snippet how to trigger a pipeline run based on a GitHub webhook? Thx //G -- CHRISTOPH GÖRN Red Hat GmbH <https://www.redhat.com/> goern(a)redhat.com M: +49-171-2801345 34AF E2A7 C8E0 0ED6 6916 D95D A9FB D7DE 773B 2A34 <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted> @redhatnews <https://twitter.com/redhatnews> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243 Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Charles Peters

5 5

Zuul?
by Attila Darazs 16 Feb '18

16 Feb '18

Dear CentOS CI Team & CI users, We run quite a few jobs on the CentOS CI system and it's an essential part for testing our libvirt deployment style of TripleO Quickstart. With the recent Jenkins security update our jobs broke[1] while requesting nodes with the cico client. It was easy to fix, however it made us think about the advantage of using a single job scheduler for all our testing. Upstream OpenStack infra is now completely based on Zuul v3[2] without having Jenkins as a backend for running jobs. Soon the same thing is going to happen to our rdoproject.org instance as the new version of SoftwareFactory[3] contains the v3 version, and we're considering replacing our downstream jobs with Zuul based ones as well. It would be an obvious advantage for us in the long term if we could unify the way we handle job running and configuration through Zuul instead of Jenkins. I just wanted to test the waters with regards to the CentOS CI team's willingness to consider setting up an instance and the other users interest in it. Please let me know what you think. Best regards, Attila [1] https://bugs.launchpad.net/tripleo/+bug/1749845 [2] https://docs.openstack.org/infra/zuul/ [3] https://softwarefactory-project.io/docs/main_components.html

3 2

artifacts.ci.centos.org - delete particular directory
by Daniel Horák 15 Feb '18

15 Feb '18

Hello, Is there a way how to easily delete particular directory in artifacts.ci? I'm aware of `rsync --delete ...` command but this will need to download whole content from artifacts.ci (or at least content of parent directory), delete the particular directory and rsync it back. Is there some easier way, how to cleanup some unused directories? Or is there already some other method to access artifacts.ci beside rsync? (I've spotted some short relevant discussion on this mailing list one year back, but I'm not aware of any result.) Thanks, Daniel

2 2

Brief Jenkins Outage Completed *Security Implications - Please Read*
by Brian Stinson 14 Feb '18

14 Feb '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Folks, We just took a short full restart of Jenkins in ci.centos.org to patch against Jenkins SECURITY-705[0], a path-traversal exploit that could have caused the leak of sensitive files on the Jenkins master. If you have secrets stored with us in the Jenkins credential store, please consider contacting me directly to get these rotated. We *do not* have evidence of an active exploit at this time, but it is standard practice to rotate secrets under these circumstances. [0]: https://jenkins.io/security/advisory/2018-02-14/ Thank you for your patience while we work this through, - -- Brian Stinson CentOS CI Infrastructure Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJahJ1QAAoJEIMGvNKzCweMrUMQAIVSYK9OjSB67WuJhHq4a5ew QeQ/4C+bE6vlMRhSTlViQZ1hzzfLrvgYzEFyK6vbaepO1DpSaA0/Znz9l644Yrt7 P1DiPGI2ba4r6p81uaEdlgIiIHUfmvMv48GHUrFk6872awFf8/Xr2QJ497vDerCg SQICr+1I0WtsiLcQV5H37QUkLWw3iS71NP8H8ma11rEYYFBq9xaa14kr80299ZGD aOQ3LZd0I+k45AGbIQMowWjoUWjCW9Rgf+kSK6PbZGMJJHLvfWFtEysUmvxPGcbx 7uBWun7hNxiZutgbSJAT7X07SpUCHJ8pmhR4QjEBqQG04E+GfK0aA58puvCNbhdZ NH9lVIF7k6ILKUdr1qLR+In8ef3b36zy54P4ORPcLBZcsVCLeghmZP0raWugz63K Cxg1Yl23tvENOiAcoM+f2lP1prFvFwBgeMnLVOexdX7w4q5ne9+kLPLbQ0y6P+ZZ DidAMY1TeUyXkWyuTk9Oy2BR2UjaoDkwVDBblTYV1L4CSoNgHYiVHWU8wzIuYv6+ oDXQO8/UuJ8fZvkYMtXaZxrmYFvki39tUBKltKcBgddu9lwIZMphGqavjkx9SCZ6 E8cfEx9IF1lhPQtKm8j9fOdPHdELF2cC6InnWtjQLi0d3qZLyDDuo5fo1iBfVUNE v1GeqCHcolY4qa34JPHC =ALkV -----END PGP SIGNATURE-----

1 0

CentOS 7 - i386 machines now available in CI
by Brian Stinson 14 Feb '18

14 Feb '18

Hi Folks, I've started work on https://bugs.centos.org/view.php?id=14489 >From now on we should have a pool of i386 machines available for distro testing, and anything else that may require a 32bit C7 install. To request these, just request 'arch=i386' in your Duffy call. Cheers! -- Brian Stinson

1 0

centos-ci Github User Approval
by Eric D Helms 08 Feb '18

08 Feb '18

Howdy, I've added the centos-ci bot to a team on Github and am awaiting approval from whoever maintains to accept the invite. This also might be worth putting on the wiki page under 'Mode 2' [1] in case there is just simply a time period to wait or whether users need to request an invite be accepted through the mailing list or bug tracker. Thanks [1] https://wiki.centos.org/QaWiki/CI/GithubIntegration -- Eric D. Helms Red Hat Engineering

1 0

Integration with GitHub PR - Tendrl project
by Daniel Horák 05 Feb '18

05 Feb '18

Hi all, we have bunch of jobs configured accordingly to [1] - Mode 2: Trigger a build for each Pull Request. The jobs seems to be triggered correctly for each new or updated PR, but the status of the job is not reflected correctly back to github. One of our developers already added *centos-ci* user to the Tendrl organization as a collaborator with write access to each repo. And every triggered job starts and end with long traceback starting with: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FileNotFoundException means that the credentials Jenkins is using is probably wrong. Or the user account does not have write access to the repo. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In the *GitHub Pull Request Builder* section of the job configuration, the *GitHub API credentials* are set to: https://api.github.com : Anonymous connection Is this correct? Or should we configure it differently? We are using JJB for the job configuration, but I've omitted the *auth-id* parameter. Should I configure it somehow? Or should there be some other action from the *centos-ci* user? [1] https://wiki.centos.org/QaWiki/CI/GithubIntegration Thanks, Daniel

1 1

plot plugin
by Michal Srb 01 Feb '18

01 Feb '18

Hello, We (devtools/fabric8-analytics) would like to start using Plot plugin in some of our jobs. The question is: is the plugin available in CentOS CI and if not, how/where can we request the plugin to be installed? Thanks, Michal [1]: https://wiki.jenkins.io/display/JENKINS/Plot+Plugin

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

CI-users February 2018