This repository was archived by the owner on Jun 16, 2026. It is now read-only.
build: pin envoy-build-ubuntu to upstream v1.38.2 image#9
Merged
Conversation
The build stage compiles envoy from source via do_ci.sh inside the envoy-build-ubuntu toolchain image, so it must match the build image upstream uses for the release we ship (v1.38.2). The Dockerfile pinned tag f4a881a1 (digest b10346fe), which does not correspond to any 1.38.x release. Upstream v1.38.0/1/2 all use build tag 86873047 (per .github/config.yml build-image.tag). Repin to that tag and its multi-arch digest 1b3c82ca so we build with the correct toolchain. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This was referenced Jun 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The build stage in
Dockerfilecompiles Envoy from source (./ci/do_ci.sh release.server_only) inside theenvoyproxy/envoy-build-ubuntutoolchain image. That image must match the build image upstream uses for the release we ship (v1.38.2).It was pinned to tag
f4a881a1205e8e6db1a57162faf3df7aed88eae8(digestsha256:b10346fe…), which does not correspond to any 1.38.x release.Verification
The authoritative source is the
build-image.tagfield in upstreamenvoyproxy/envoy.github/config.yml(the image is tagged by git SHA; thesha:fields are content digests used for verification). Checked across the 1.38.x line:build-image.tag86873047235e9b8232df989a5999b9bebf9db69c86873047235e9b8232df989a5999b9bebf9db69c86873047235e9b8232df989a5999b9bebf9db69cChange
Repin to upstream v1.38.2's build image:
86873047235e9b8232df989a5999b9bebf9db69csha256:1b3c82ca34c505c4951918b2e0a0c3db88cf266ebbf4196e4b0fba8fa137ada3(multi-arch: amd64, arm64)🤖 Generated with Claude Code