Concourse v7.9.0 requires a version of glibc not available to ubuntu bionic 18.04 (or 20.04?) for worker updates

[tuddenham]

We ran in to problems trying to install v7.9.0 bosh release on a concourse deployment when using bionic 18.04 ubuntu stemcells. The error was encountered when a worker vm was being updated, relating to the version of glibc, requiring glibc_2.34 or above - but 18.04 has glibc_2.27 (and 20.04 has glibc_2.31). It looks like this requires Jammy 22.04.

Error from worker.stderr.log:

+ /var/gdn/assets/linux/sbin/iptables -w -F w--input
/var/gdn/assets/linux/sbin/iptables: /lib/x86_64-linux-gnu/libm.so.6: version `GLIBC_2.29' not found (required by /var/gdn/assets/linux/sbin/iptables)
/var/gdn/assets/linux/sbin/iptables: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.28' not found (required by /var/gdn/assets/linux/sbin/iptables)
/var/gdn/assets/linux/sbin/iptables: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.33' not found (required by /var/gdn/assets/linux/sbin/iptables)
/var/gdn/assets/linux/sbin/iptables: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found (required by /var/gdn/assets/linux/sbin/iptables)

error: Exit trace for group:
garden exited with error: Exit trace for group:
gdn exited with error: exit status 1

Instead we successfully installed v7.8.3 with no problems, speculating that the dependancy was introduced with the listed feature 'Bump dependencies for worker runtime to support Ubuntu Jammy Jellyfish'. Is this intended?

[xtremerui]

See cloudfoundry/garden-runc-release#233. This is not intended but a known issue.

[andrew-edgar]

@xtremerui reading the garden discussion. why is concourse using a custom version of iptables? This looks like garden changed to use the /sbin/iptables but concourse is using /var/gdn/assets/linux/sbin/iptables.

Is there some change in concourse required to make sure it uses the /sbin/iptables (so the default coming with the OS) vs the other version which is not working in bionic after the updates.

There was mention of a property in garden to specify the path to iptables. I don't think this is exposed anywhere in concourse for us to use and override.

[migruiz4]

Hi there,

We are facing this issue when running Concourse in other different OS in addition to Ubuntu 18.04, including Debian 11, Ubuntu 20.04, and others.

The only OS where Concourse 7.9.0 runs successfully is Ubuntu 22.04.