Refactor Cypress test pod build

[meissadia]

• Takes a really long time
• Each build ends results in multiple GBs worth of new layers
• I think we're building a full CentOS pod from scratch
• Can we build on the Cypress Docker images? I think security was the previous blocker there. Has anything changed?

Related:

• [Cypress] Decouple list of tests from Docker image #1627
• [Cypress] Re-evaluate image build process #1628

[meissadia]

UBI8 is missing Cypress dependencies:

# No match for argument: xorg-x11-server-Xvfb
# No match for argument: gtk2-devel
# No match for argument: gtk3-devel
# No match for argument: libnotify-devel

Options to explore:

• Adding software to a UBI container
• https://stackoverflow.com/questions/64919789/how-to-install-xvfb-on-rh8
• Check with DevOps team to see if we have a RHEL subscription, then we could login to that? Or build on a machine that is logged into that? I'm not sure how this piece works...

[meissadia]

Vulnerabilities:

• Low 19
• Medium 319
• High 42
• Critical 6

[meissadia]

Configuration

https://docs.openeuler.org/en/docs/20.03_LTS/docs/Administration/using-the-dnf-to-manage-software-packages.html#configuring-the-dnf

GPG in RPM

https://www.redhat.com/sysadmin/rpm-gpg-verify-packages

Other package repos

• https://www.tecmint.com/yum-thirdparty-repositories-for-centos-rhel/
• https://rpmfusion.org/Configuration

[meissadia]

• Got additional dependency repos configured in the UBI8 version!
• Able to avoid explicit versions for the majority of the libraries
• Smoke testing (ran Tools specs) looks good
• Going to request another vulnerability scan

[Michaeldremy]

@meissadia

After many years this ticket has finally been closed 🥳

The work surrounding the ticket has been completed by #2054