Platform SIG September 24, 2024

Attending:

Agenda:

  • Container image updates for the Jenkins controller
    • No new LTS
      • 2.462.3 will be delivered on Oct 2, 2024
        • Thanks Kris Stern as release lead
      • 2.477.1 will be delivered on Oct 30, 2024
        • Thanks Mark Ware as release lead
    • Weeklies (2.477 and 2.478)
      • Bump ubi9/ubi
      • Bump ubi8/ubi
  • Container image updates for Jenkins agents
    • One new release for the SSH agent (5.48.0)
      • Bump Git version on Windows to 2.46.1.windows.1
    • One new release for docker-agent (3261.v9c670a_4748a_9-5)
      • Bump Git version on Windows to 2.46.1.windows.1
      • Bump archlinux to base-20240915.0.262934
    • Added UBI 9 agent image docker-agent
      • Thanks Adama Kaplan of Red Hat
      • Being built now, the “-6” version will include UBI-9
    • How are docker-agent releases done?
      • Maintainer creates a new GitHub release
    • Unification of agent build process will be in “-7”
      • Steps and stages that retrieve the code, create matrix of images, build them, then publish are now unified between docker-agent and docker-ssh-agent
        • Using a declarative definition of the matrix of the agents
        • Herve’ LeMeur carried that work from docker-ssh-agent to docker-agent
          • May have a few minor changes, but using same build process in both agent repositories
      • Long term view is to combine all agents into a single repository
        • Unified build process is a step towards unified repository
  • Work in progress on images:
  • The Spring project made an end of life announcement - JENKINS-68698
    • Key milestones in the Spring Security 6.x upgrade
      • File upload 2.x in Jenkins weekly 2.459 (no issues reported)
      • Require Java 17 in Jenkins weekly 2.463 June 18, 2024 (see dev list)
      • Jetty 12 + EE 8 in Jenkins weekly 2.472 August 13, 2024
      • Jetty 12 + EE 9 + Spring Security 6.x in Jenkins weekly - 2.475
      • Jetty 12 + EE 9 + Spring Security 6.x in Jenkins weekly - 2.477.1 - 30 Oct 2024
    • Platform SIG members can help
      • Second weekly release with Spring Security 6, Jetty 12 and Jakarta EE 9
      • The next LTS baseline is 4.477
      • Quickstart tutorials still allow testing of the most recent by using weekly
  • 2+2+2 Java Support Plan
  • Interesting severe bug in Ubuntu 24.04 on aarch64
    • SSL problem with key websites and curl (discussed in infra team meeting)
    • Damien saw it also happen with wget
    • This happens at TCP level during the TLS handshake
      • Have not checked the issue recently (Jenkins helpdesk has a link to official tracker)
    • No impact to Platform SIG because we don’t do downloads from inside our packages
      • Instructions tell users to download a key, not sure if we are affected
    • Two computers lent to the Jenkins project by Ampere are running Ubuntu 22.04 (unaffected
  • Docker agent image and docker controller image
    • API rate limit from the Temurin download website reached
      • Build problem that was internal to Jenkins infra
    • Applied a fix to the ssh docker agent
      • Short term fix applied with a set of retries in case of failure (with backup)
    • Accepted Hervé’s PR that embeds some script that has the fix (retry flag on curl (exponential back-off)) to get it to work for docker agent
    • Jenkins infra is thinking of caching the Temurin downloads
      • Won’t revisit the caching until higher priority items are resolved
    • Fix allows completion with a slight delay
      • If that delay is a serious problem, we can consider staging the container builds privately then promote the private build
  • Temurin asked if we were aware of anyone running Jenkins in emulation?
    • They use Solaris agents and Solaris agents cannot run Java 17 (no Java 17)
    • Any Temurin build that depends on Solaris agents with Java 11 will be end of life 30 Oct 2024