Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security release & Jenkins update on August 15th #1442

Closed
rvagg opened this issue Aug 13, 2018 · 6 comments
Closed

Security release & Jenkins update on August 15th #1442

rvagg opened this issue Aug 13, 2018 · 6 comments

Comments

@rvagg
Copy link
Member

rvagg commented Aug 13, 2018

@nodejs/collaborators we're going to have to block off access to ci.nodejs.org to a limited group for testing in preparation for the security releases some time on the 14th UTC so we can run embargoed commits through CI. There is also a Jenkins update due out on the 15th, the day of our release, so I'll be queuing up a Jenkins update after the releases go out before we open it all back up again. Hopefully it'll all be done before the 16th hits us! Will update in this issue when it's all wrapped up and we're back to normal.

@benjamingr
Copy link
Member

Thanks for taking care of this and for the update! The hard work of the build team in dealing with security releases is much appreciated.

@maclover7
Copy link
Contributor

Access should now be disabled for nodejs/collaborators on the public CI

@Trott
Copy link
Member

Trott commented Aug 15, 2018

Is CI still locked? Should this be closed?

@richardlau
Copy link
Member

Yes, the CI is still locked.

@refack
Copy link
Contributor

refack commented Aug 16, 2018

  1. For those who are wondering how come some PRs got CI tests during this lockdown. For several teams who facilitate these security releases (@nodejs/releasers and @nodejs/build), access was kept.

  2. As a result of the openSSL upgrade in our infrastructure, CI will fail for existing PRs until they are rebased (or tested with rebasing) - ansible: upgrade to OpenSSL 1.1.0i & 1.0.2p in sharedlibs #1451

  3. CI should be back to normal very soon.

@rvagg
Copy link
Member Author

rvagg commented Aug 16, 2018

OK, all done, Jenkins upgraded while we had it locked too, there was a security release there too.

@nodejs/collaborators ci.nodejs.org is back and ready to take your jobs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants