Infrastructure Team Meeting - April 11, 2023

[dduportal (Damien Duportal)]

2023 04 11 Jenkins Infra Meeting

• @dduportal (Damien Duportal)
• @hlemeur (Hervé Le Meur)
• @MarkEWaite (Mark Waite)
• @smerle33 (Stéphane Merle)
• @kmartens27 (Kevin Martens)

Announcements

1. Weekly: 2.400 is released, packaged, incoming Docker image
2. Announcement: security advisory tomorrow (12th of April) as per https://groups.google.com/g/jenkinsci-advisories/c/ccmIF1Vs-9A
3. Announcement: Plugin Health Score is now visible on the plugin site (https://plugins.jenkins.io) thanks to a GSoc candidate who continued the work despite the project dropped of the GSoc program

Upcoming Calendar

• Next Weekly: 2.401 next week (18th of April)
• Next LTS: May 3rd - 2.387.3
  • Next baseline selection: next Wednseday (19th April)
• Next Security Release as per jenkinsci-advisories:
  • 12th of April, plugins only
  • Don’t merge anything on jenkins.io / trusted.ci.jenkins.io
• Next major event:
  • Devoxx France in Paris with @lemeurherve
  • CdCon in May 8-9 with @MarkEWaite and @notmyfault

Notes

• Done:

  • Digital Ocean: Credits are almost depleted
  • ci.jenkins.io disk almost full
  • Problem in finding an artifact from a third-party artfactory (jfrog)
    • Solved by adding another exception to the ACP’s settings.xml
    • Upcoming issue to discuss the discovery of “non mirrored artifact repositories in plugins pom.xml” to check with security team (should we mirror these repositories)
  • Out of space on a ci.jenkins.io agent in bom build
  • Can’t reset Jira account password
  • renew the signer certificate for jenkins
  • [trusted.ci.jenkins.io] alert Disk space is below 1GB
  • Update ci.jenkins.io, trusted.ci, cert.ci and release.ci to latest LTS version 2.387.2
  • GPG key expires on March the 30th

• Work In Progress:

  • Ubuntu 22.04 upgrade campaign
  • Document the code signing certificate renewal process
  • Spring 2023: Decrease AWS costs
  • Renew SSL certificate for updates.jenkins-ci.org
  • Migrate trusted.ci.jenkins.io from AWS to Azure
  • Password reset email not coming through
  • Artifact caching proxy is unreliable
  • Renew update center certificate (crawler and update-center)
  • [ci.jenkins.io] Azure billing shows huge cloud cost due to outbound bandwidth
  • Add Launchable to agents
  • Feat(Infra.ci): add Azure ARM64 VMs
  • [INFRA-2754] Realign repo.jenkins-ci.org mission

• ToDo (next milestone) (GitHub · Where software is built)