[Ci-users] Reminder : CentOS 7 and 8s EOL soon (impact on CI workflow)

Tue Apr 2 08:16:14 UTC 2024
František Šumšal <frantisek at sumsal.cz>

Hey,

On 3/29/24 16:14, Fabian Arrotin wrote:
> Hi CI tenants !
> 
> Just a reminder that (as you know it) CentOS Stream 8 will go EOL in May and then CentOS Linux 7 itself going EOL in June (so very soon)
> 
> That would mean that we'll just remove the various pools that provide CentOS 8s and 7 for your tests.
> 
> Reason is that mirror network itself will be unavailable and so all tests would fail anyway.
> 
> Happy to discuss here but we'll send reminders about when we'll just remove the various pools in Duffy.

Already started migration of the remaining C7/C8S jobs to C9S (and already hitting multiple not-CentOS-CI-infra-related issues, as usual).

> 
> I also need to find an option for something else that you *still* all use when using Jenkins on openshift cluster : our cico-workspace image (https://quay.io/repository/centosci/cico-workspace)
> That one is "problematic" as it's based on upstream openshift jenkins agent (https://github.com/openshift/jenkins/tree/master?tab=readme-ov-file#hosted-images)
> These ones are based on UBI8 and it seems that there is (still) no momentum to move to UBI9 (don't have direct contact with them though)
> While our current images were based from the upstream ones, we could just "convert" these to 8s (https://github.com/centosci/images/blob/master/cico-workspace/Dockerfile#L1 and https://github.com/centosci/images/blob/master/cico-workspace/Dockerfile#L8)
> 
> We need to find a solution but was wondering if just using vault (archived mirror content) would be a good solution or not : tempted myself to answer "no" as that would mean running container that will *never* be updated for security reasons (CentOS Stream 8 going EOL in May)

There seems to be _some_ kind of movement to migrate it to C9S in [0]. So, we could either just wait (potentially risky if the new version is not out before C8S EOL and we'd need to tweak the container image [unlikely, but still]), temporarily pin it to Vault repos (the lazy way), or just make our own C9S version until the official one is out.

[0] https://github.com/openshift/jenkins/issues/1766

> 
> Opinions, thoughts ?
> 
> 
> _______________________________________________
> CI-users mailing list
> CI-users at centos.org
> https://lists.centos.org/mailman/listinfo/ci-users