Skip to content

ci: add optional vlab job#147

Merged
qmonnet merged 1 commit intomainfrom
dev/frostman/ci-vlab
Jul 18, 2025
Merged

ci: add optional vlab job#147
qmonnet merged 1 commit intomainfrom
dev/frostman/ci-vlab

Conversation

@Frostman
Copy link
Member

@Frostman Frostman commented Jul 18, 2025

Somewaht matching what we agreed on the dataplane. The main goal here is to be able to check FRR images earlier.
No new jobs will run by default as we don't have stable, meaningful tests for the frr.

Use the following labels to enable some jobs/tests:

ci:+vlab - enable fully virtual VLAB jobs (2 of them - one with l2vni and one with l3vni vpcs)
ci:+hlab - enable hubrid VLAB job (using env with physical switches and control/gw/servers in VMs - just a single run with l2vni)
ci:+release - enable release tests on all enabled VLAB jobs (controlled by 2 prev labels) - it runs all the tests we have and takes about 1h on vlab and 3.5 hours on hlab, doesn't contain ANY jobs for the gw yet

You would need to close and reopen PR after adding labels for them to take effect.

Same as in the dataplane repo it relies on image built in a previous steps.

Fixes #144

@Frostman Frostman added the ci:-vlab Disable VLAB tests label Jul 18, 2025
@Frostman Frostman force-pushed the dev/frostman/ci-vlab branch from 293a08b to fdd8626 Compare July 18, 2025 01:37
@github-actions
Copy link
Contributor

Outdated packages (gnu64):

priority nix_package version_local version_nixpkgs version_upstream
13 glibc 2.40-66 2.40-66 2.41
12 libffi 3.4.8 3.4.8 3.5.1
12 gcc 14.3.0 14.3.0 15.1.0;15.1
11 llvm 20.1.6 17.0.6 20.1.8
11 llvm 20.1.6 20.1.6 20.1.8
10 bash 5.2p37 5.2p37 5.3
10 isl 0.20 0.24 0.27
10 pcre2 10.44 10.44 10.45
5 perl 5.40.0 5.40.0 5.42.0
5 sqlite 3.50.1 3.50.1 3.50.3
4 kmod 31 31 34.2
4 readline 8.2p13 8.2p13 8.3p1;8.3p001;8.3_p1
4 numactl 2.0.18 2.0.18 2.0.19

@github-actions
Copy link
Contributor

Vulnerable packages (gnu64):

vuln_id url package severity version_local version_nixpkgs version_upstream package_repology sortcol classify
CVE-2025-49796 https://nvd.nist.gov/vuln/detail/CVE-2025-49796 libxml2 9.1 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049796 err_not_vulnerable_based_on_repology
CVE-2025-49795 https://nvd.nist.gov/vuln/detail/CVE-2025-49795 libxml2 7.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049795 err_not_vulnerable_based_on_repology
CVE-2025-49794 https://nvd.nist.gov/vuln/detail/CVE-2025-49794 libxml2 9.1 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049794 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-29088 https://osv.dev/BIT-sqlite-2025-29088 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000029088 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-29087 https://osv.dev/BIT-sqlite-2025-29087 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000029087 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-6965 https://osv.dev/BIT-sqlite-2025-6965 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000006965 err_not_vulnerable_based_on_repology
CVE-2025-6965 https://nvd.nist.gov/vuln/detail/CVE-2025-6965 sqlite 7.2 3.50.1 3.50.1 3.50.3 sqlite 2025A0000006965 err_not_vulnerable_based_on_repology
CVE-2025-6170 https://nvd.nist.gov/vuln/detail/CVE-2025-6170 libxml2 2.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000006170 err_not_vulnerable_based_on_repology
CVE-2025-6021 https://nvd.nist.gov/vuln/detail/CVE-2025-6021 libxml2 7.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000006021 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-3277 https://osv.dev/BIT-sqlite-2025-3277 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000003277 err_not_vulnerable_based_on_repology
CVE-2025-3198 https://nvd.nist.gov/vuln/detail/CVE-2025-3198 binutils 5.5 2.44 2.44 2.44 binutils 2025A0000003198 fix_not_available
CVE-2025-1153 https://nvd.nist.gov/vuln/detail/CVE-2025-1153 binutils 5.9 2.44 2.44 2.44 binutils 2025A0000001153 fix_not_available
OSV-2024-817 https://osv.dev/OSV-2024-817 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000817 err_not_vulnerable_based_on_repology
OSV-2024-395 https://osv.dev/OSV-2024-395 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000395 err_not_vulnerable_based_on_repology
BIT-sqlite-2024-0232 https://osv.dev/BIT-sqlite-2024-0232 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2024A0000000232 err_not_vulnerable_based_on_repology
CVE-2023-6992 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 zlib 5.5 1.3.1 1.3.1 1.3.1 zlib 2023A0000006992 err_not_vulnerable_based_on_repology
CVE-2023-4039 https://nvd.nist.gov/vuln/detail/CVE-2023-4039 gcc 4.8 14.3.0 14.3.0 15.1.0 gcc 2023A0000004039 fix_not_available
MAL-2022-4301 https://osv.dev/MAL-2022-4301 libidn2 2.3.8 2.3.8 2.3.8 libidn2 2022A0000004301 err_not_vulnerable_based_on_repology

Signed-off-by: Sergei Lukianov <me@slukjanov.name>
@Frostman Frostman force-pushed the dev/frostman/ci-vlab branch from fdd8626 to 1809f27 Compare July 18, 2025 02:43
@github-actions
Copy link
Contributor

Outdated packages (gnu64):

priority nix_package version_local version_nixpkgs version_upstream
13 glibc 2.40-66 2.40-66 2.41
12 gcc 14.3.0 14.3.0 15.1.0;15.1
12 libffi 3.4.8 3.4.8 3.5.1
11 llvm 20.1.6 17.0.6 20.1.8
11 llvm 20.1.6 20.1.6 20.1.8
10 isl 0.20 0.24 0.27
10 pcre2 10.44 10.44 10.45
10 bash 5.2p37 5.2p37 5.3
5 sqlite 3.50.1 3.50.1 3.50.3
5 perl 5.40.0 5.40.0 5.42.0
4 readline 8.2p13 8.2p13 8.3p1;8.3p001;8.3_p1
4 kmod 31 31 34.2
4 numactl 2.0.18 2.0.18 2.0.19

@github-actions
Copy link
Contributor

Vulnerable packages (gnu64):

vuln_id url package severity version_local version_nixpkgs version_upstream package_repology sortcol classify
CVE-2025-49796 https://nvd.nist.gov/vuln/detail/CVE-2025-49796 libxml2 9.1 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049796 err_not_vulnerable_based_on_repology
CVE-2025-49795 https://nvd.nist.gov/vuln/detail/CVE-2025-49795 libxml2 7.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049795 err_not_vulnerable_based_on_repology
CVE-2025-49794 https://nvd.nist.gov/vuln/detail/CVE-2025-49794 libxml2 9.1 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049794 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-29088 https://osv.dev/BIT-sqlite-2025-29088 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000029088 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-29087 https://osv.dev/BIT-sqlite-2025-29087 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000029087 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-6965 https://osv.dev/BIT-sqlite-2025-6965 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000006965 err_not_vulnerable_based_on_repology
CVE-2025-6965 https://nvd.nist.gov/vuln/detail/CVE-2025-6965 sqlite 7.2 3.50.1 3.50.1 3.50.3 sqlite 2025A0000006965 err_not_vulnerable_based_on_repology
CVE-2025-6170 https://nvd.nist.gov/vuln/detail/CVE-2025-6170 libxml2 2.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000006170 err_not_vulnerable_based_on_repology
CVE-2025-6021 https://nvd.nist.gov/vuln/detail/CVE-2025-6021 libxml2 7.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000006021 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-3277 https://osv.dev/BIT-sqlite-2025-3277 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000003277 err_not_vulnerable_based_on_repology
CVE-2025-3198 https://nvd.nist.gov/vuln/detail/CVE-2025-3198 binutils 5.5 2.44 2.44 2.44 binutils 2025A0000003198 fix_not_available
CVE-2025-1153 https://nvd.nist.gov/vuln/detail/CVE-2025-1153 binutils 5.9 2.44 2.44 2.44 binutils 2025A0000001153 fix_not_available
OSV-2024-817 https://osv.dev/OSV-2024-817 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000817 err_not_vulnerable_based_on_repology
OSV-2024-395 https://osv.dev/OSV-2024-395 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000395 err_not_vulnerable_based_on_repology
BIT-sqlite-2024-0232 https://osv.dev/BIT-sqlite-2024-0232 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2024A0000000232 err_not_vulnerable_based_on_repology
CVE-2023-6992 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 zlib 5.5 1.3.1 1.3.1 1.3.1 zlib 2023A0000006992 err_not_vulnerable_based_on_repology
CVE-2023-4039 https://nvd.nist.gov/vuln/detail/CVE-2023-4039 gcc 4.8 14.3.0 14.3.0 15.1.0 gcc 2023A0000004039 fix_not_available
MAL-2022-4301 https://osv.dev/MAL-2022-4301 libidn2 2.3.8 2.3.8 2.3.8 libidn2 2022A0000004301 err_not_vulnerable_based_on_repology

@Frostman Frostman closed this Jul 18, 2025
@Frostman Frostman reopened this Jul 18, 2025
@github-actions
Copy link
Contributor

Outdated packages (gnu64):

priority nix_package version_local version_nixpkgs version_upstream
13 glibc 2.40-66 2.40-66 2.41
12 gcc 14.3.0 14.3.0 15.1.0;15.1
12 libffi 3.4.8 3.4.8 3.5.1
11 llvm 20.1.6 17.0.6 20.1.8
11 llvm 20.1.6 20.1.6 20.1.8
10 bash 5.2p37 5.2p37 5.3
10 pcre2 10.44 10.44 10.45
10 isl 0.20 0.24 0.27
5 perl 5.40.0 5.40.0 5.42.0
5 sqlite 3.50.1 3.50.1 3.50.3
4 kmod 31 31 34.2
4 numactl 2.0.18 2.0.18 2.0.19
4 readline 8.2p13 8.2p13 8.3p1;8.3p001;8.3_p1

@github-actions
Copy link
Contributor

Vulnerable packages (gnu64):

vuln_id url package severity version_local version_nixpkgs version_upstream package_repology sortcol classify
CVE-2025-49796 https://nvd.nist.gov/vuln/detail/CVE-2025-49796 libxml2 9.1 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049796 err_not_vulnerable_based_on_repology
CVE-2025-49795 https://nvd.nist.gov/vuln/detail/CVE-2025-49795 libxml2 7.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049795 err_not_vulnerable_based_on_repology
CVE-2025-49794 https://nvd.nist.gov/vuln/detail/CVE-2025-49794 libxml2 9.1 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000049794 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-29088 https://osv.dev/BIT-sqlite-2025-29088 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000029088 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-29087 https://osv.dev/BIT-sqlite-2025-29087 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000029087 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-6965 https://osv.dev/BIT-sqlite-2025-6965 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000006965 err_not_vulnerable_based_on_repology
CVE-2025-6965 https://nvd.nist.gov/vuln/detail/CVE-2025-6965 sqlite 7.2 3.50.1 3.50.1 3.50.3 sqlite 2025A0000006965 err_not_vulnerable_based_on_repology
CVE-2025-6170 https://nvd.nist.gov/vuln/detail/CVE-2025-6170 libxml2 2.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000006170 err_not_vulnerable_based_on_repology
CVE-2025-6021 https://nvd.nist.gov/vuln/detail/CVE-2025-6021 libxml2 7.5 2.14.4-unstable-2025-06-20 2.14.4-unstable-2025-06-20 2.14.5 libxml2 2025A0000006021 err_not_vulnerable_based_on_repology
BIT-sqlite-2025-3277 https://osv.dev/BIT-sqlite-2025-3277 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2025A0000003277 err_not_vulnerable_based_on_repology
CVE-2025-3198 https://nvd.nist.gov/vuln/detail/CVE-2025-3198 binutils 5.5 2.44 2.44 2.44 binutils 2025A0000003198 fix_not_available
CVE-2025-1153 https://nvd.nist.gov/vuln/detail/CVE-2025-1153 binutils 5.9 2.44 2.44 2.44 binutils 2025A0000001153 fix_not_available
OSV-2024-817 https://osv.dev/OSV-2024-817 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000817 err_not_vulnerable_based_on_repology
OSV-2024-395 https://osv.dev/OSV-2024-395 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000395 err_not_vulnerable_based_on_repology
BIT-sqlite-2024-0232 https://osv.dev/BIT-sqlite-2024-0232 sqlite 3.50.1 3.50.1 3.50.3 sqlite 2024A0000000232 err_not_vulnerable_based_on_repology
CVE-2023-6992 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 zlib 5.5 1.3.1 1.3.1 1.3.1 zlib 2023A0000006992 err_not_vulnerable_based_on_repology
CVE-2023-4039 https://nvd.nist.gov/vuln/detail/CVE-2023-4039 gcc 4.8 14.3.0 14.3.0 15.1.0 gcc 2023A0000004039 fix_not_available
MAL-2022-4301 https://osv.dev/MAL-2022-4301 libidn2 2.3.8 2.3.8 2.3.8 libidn2 2022A0000004301 err_not_vulnerable_based_on_repology

Copy link
Member

@qmonnet qmonnet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me, thank you!

@qmonnet qmonnet merged commit 2637abc into main Jul 18, 2025
10 of 13 checks passed
@qmonnet qmonnet deleted the dev/frostman/ci-vlab branch July 18, 2025 09:43
@Frostman Frostman requested a review from daniel-noland July 18, 2025 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:-vlab Disable VLAB tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add VLAB tests to FRR CI

2 participants