Skip to content

Conversation

@thatguyinabeanie
Copy link
Collaborator

@thatguyinabeanie thatguyinabeanie commented Jul 22, 2025

Associated PRs

Description

Required: Please provide a brief description of what this pull request is trying to accomplish.

Context, Consequences, & Considerations

Required: Please step through the following list, pausing at each item to consider your change in relation to the item's context.
Check the box to mark that it applies, and enter your relevant notes under the item.

  • Security: This has security implications. This includes (but not limited to) adding users, modifying user/app permissions, network rules/policies, changing a system interconnection, or changing an authorization strategy.
    • This PR does not require security review. These changes are part of a project plan that has already undergone security review. The link is provided below.
    • This PR requires security review. Add the security label to this PR then request a review from the Security Code Reviewers Team.
  • Execution: This change requires commands to be run outside of the normal merge.
  • Impact: This change may cause service interruptions.
  • Testing: How did you test this change (unit tests, acceptance tests, etc.)? Did you do any manual testing?

manual

  • Testing: How will you confirm this change once it's merged?
  • Documentation: Documentation to reflect this change has been added to Confluence or Zendesk.
  • All items of the checklist have been considered and this PR description is complete.

thatguyinabeanie and others added 13 commits July 21, 2025 22:41
- Use consistent 2-space indentation throughout
- Remove unnecessary comment blocks
- Better organize ARG declarations
- Improve line continuation formatting

🤖 Generated with [opencode](https://opencode.ai)

Co-Authored-By: opencode <noreply@opencode.ai>
- Add docker-compose.yml with build args for VERSION and CODE_RELEASE
- Add .env.example with configurable environment variables
- Update .gitignore and .dockerignore to exclude .env files
- Set CODE_RELEASE default to 4.102.1 for stable builds
- Configure image name: gabemendoza1/codecloud-code-server

🤖 Generated with [opencode](https://opencode.ai)

Co-Authored-By: opencode <noreply@opencode.ai>
Copy link

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for opening this pull request! Be sure to follow the pull request template!

@thatguyinabeanie thatguyinabeanie marked this pull request as draft July 22, 2025 13:30
@thatguyinabeanie thatguyinabeanie requested a review from Copilot July 22, 2025 13:31
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This pull request creates an Ubuntu FIPS variant of the docker-code-server project. The PR removes the standard LinuxServer.io configuration files and replaces them with a custom FIPS-compliant base image, while adding a Docker Compose configuration for local development.

Key changes:

  • Removes LinuxServer.io templated files and Jenkins CI configuration
  • Switches base image to a FIPS-compliant Ubuntu variant
  • Adds Docker Compose setup for development workflow

Reviewed Changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated 5 comments.

Show a summary per file
File Description
readme-vars.yml Removes LinuxServer.io readme configuration
package_versions.txt Removes package version tracking file
jenkins-vars.yml Removes Jenkins pipeline configuration
docker-compose.yml Adds Docker Compose configuration for local development
Jenkinsfile Removes LinuxServer.io Jenkins pipeline
Dockerfile.aarch64 Removes ARM64 Dockerfile variant
Dockerfile Updates to use FIPS-compliant base image and modifies configuration
.github/PULL_REQUEST_TEMPLATE.md Updates PR template to use civisanalytics standards
.dockerignore Adds .env file to ignore list

@thatguyinabeanie thatguyinabeanie changed the title Ubuntu fips [CIVIS-11019] Jul 22, 2025
@thatguyinabeanie thatguyinabeanie changed the title [CIVIS-11019] [CIVIS-11019] update to use ubuntu 22.04 fips enabled base image Jul 22, 2025
@thatguyinabeanie thatguyinabeanie marked this pull request as ready for review July 22, 2025 22:13
thatguyinabeanie and others added 3 commits July 24, 2025 15:43
🤖 Generated with [opencode](https://opencode.ai)

Co-Authored-By: opencode <noreply@opencode.ai>
Copy link

@leanne73 leanne73 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One question for my own curiosity (I assume it's something to do with python 3.12 though). LGTM

Comment on lines +19 to +20
curl -fsSL https://keyserver.ubuntu.com/pks/lookup?op=get\&search=0xF23C5A6CF475977595C89F51BA6932366A755776 | apt-key add - && \
echo "deb https://ppa.launchpadcontent.net/deadsnakes/ppa/ubuntu jammy main" > /etc/apt/sources.list.d/deadsnakes.list && \

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What's this bit doing?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

so ubuntu 22 doesnt know where to install python 3.12 from. this tells apt-get where to install python 3.12 from

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

love that python lives in deadsnakes 😆

@thatguyinabeanie thatguyinabeanie merged commit c8a8ee9 into master Jul 25, 2025
1 check passed
@civis-robot
Copy link

Pull Request Merged!!! This build is running now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants