Platform SIG April 09,2024

Community
, , ,
1

Attending:

Agenda:

  • Agenda-related items
    • Could we schedule this meeting one hour earlier?
      • Mark will update the calendar
    • Bruno is not available on the 23rd, should we cancel or does anyone want to host this meeting?
      • Mark will host the meeting
  • Java 21 support - 2+2+2 Java Support Plan
    • Jenkins enhancement proposal by Mark Waite submitted and being reviewed
      • Needs more details before it is merged
      • Basil may propose another proposal that would compete/replace Mark’s proposal, and that’s ok. Mark and Basil will discuss it further.
    • The Spring project made an announcement - JENKINS-68698
      • The last public build of Spring security framework 5.8.x is August 2024
        • Spring security 6.x requires Jetty 11 with Jakarta EE 9 (jakartaee.servlet), not Jetty 10 with Jakarta EE 8 (javax.servlet)
        • August 31, 2024 date seems likely to stick
      • The last public build of Spring framework 5.3.x is August 2024
        • Spring framework 6.1 and later require Java 17
      • Alternatives:
        • Accept that if there is a security vulnerability reported in Spring security 5.8.x between August 2024 and the end Oct 2024, we may need to fork Spring Security and fix it ourselves
        • Mark to start discussions in the mailing list to find alternatives
  • DockerHub Download Statistics (2024)
  • Would we have too many docker images?
  • DockerHub keeps sending HTTP/429 errors. It failed the deployment of the Windows images but Linux is ok.
    • Action items are on us
    • Using Temurin binaries and not Temurin Docker images could help reduce the number of layers, thus putting less stress on our Docker Hub account.
  • Released work on agent and controller images
    • Controller Weekly 2.452 and 2.453
      • Update to Jenkins 2.452 and 2.453
        • Bump Debian Bookworm Linux Version to 20240311
        • Remove ConvertFrom-Json issue by simplifying tags management
    • Docker-agent: one version bump leading to 1 new release (3206.vb_15dcf73f6a_9-9)
      • Move bats to v1.11.0
    • Ssh-agent: lots of version bumps and refactoring, leading to five new releases: 5.27.0, 5.28.0, 5.29.0, 5.30.0, and 5.31.0
      • refactor docker-ssh-agent build process like docker-agent
      • Windows
        • Windows ltsc2019 images now use ltsc2019 base images instead of 1809 ones
        • Windows images are now multi-stages as they aren’t built on top of eclipse-temurin anymore (more control of what’s inside)
        • Bump bats version to v1.11.0
        • Windows: add JDK17 as default and JDK21
        • Add Windows LTSC 2022 support
        • Correct git-lfs installation and bump of its version to 3.5.1
      • JDK
        • Re-enable JDK updates
        • Bring back Debian JDK17 images
        • Bump JDK17 version to 17.0.10_7
        • Bump JDK11 version to 11.0.22_7, even for Windows
        • updatecli/jdk21: only update Docker Bake file but not Dockerfiles as JDK17 is still the default
        • Bump JDK21 version to 21.0.2_13
        • Use official Temurin build for linux/s390x
      • Add OpenSSH updatecli manifest
  • Work in progress on images:
  • Docker-based quickstart tutorials
    • The tutorials ceased to work when docker compose reached version 2.4.27
      • Fixed by #181, and the new commands are now available in the tutorials.
    • Back to working on the main Jenkins installation thanks to docker.
  • The Ampere server ran its first job
    • Relocated, and still working correctly