Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: dnsmasq: pin versions, switch to debian #64

Merged
merged 2 commits into from
Apr 23, 2024

Conversation

skrobul
Copy link
Collaborator

@skrobul skrobul commented Apr 23, 2024

Turns out the Alpine project does not follow semver and changes the versioned upstream images after the fact, so we have to pin them to a specific sha256 to keep stable builds.

Closes PUC-241. Fixes build failures like this one

@skrobul skrobul added the bug Something isn't working label Apr 23, 2024
@skrobul skrobul changed the title dnsmasq: pin upstream base images fix: dnsmasq: pin upstream base images Apr 23, 2024
Copy link
Contributor

@cardoe cardoe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is pinning the images going to fix it when the issue is they bumped package versions in their repo that this is installing from?

@skrobul skrobul marked this pull request as draft April 23, 2024 12:19
@skrobul skrobul changed the title fix: dnsmasq: pin upstream base images fix: dnsmasq: pin versions, switch to debian Apr 23, 2024
Turns out Alpine project does not really follow semver and removes any
outdated packages from their repositories as soon as the new versions
are released. This results in a non-reproducible builds.

See https://gitlab.alpinelinux.org/alpine/abuild/-/issues/9996 for more
details.

This commit switches the base image to a slimmed down version of Debian,
which allows us to use more stable package versioning at the cost of
increasing image size from ~75MB to ~120MB.

Closes PUC-241.
@skrobul skrobul marked this pull request as ready for review April 23, 2024 14:03
@skrobul
Copy link
Collaborator Author

skrobul commented Apr 23, 2024

Is pinning the images going to fix it when the issue is they bumped package versions in their repo that this is installing from?

As discussed on Teams, Alpine does not offer any sensible way to pin the repository and retain old packages, so I have switched the dnsmasq container to use Debian base image.

@skrobul skrobul requested a review from cardoe April 23, 2024 14:04
@cardoe cardoe merged commit 1d6902b into rackerlabs:main Apr 23, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants