Bug 1956483: Bump boot images for RHCOS fixes #4961

miabbott · 2021-05-26T15:43:34Z

This brings in the following fixes:

BZ 1956489 - CVE-2021-3114 ignition: golang: crypto/elliptic: incorrect operations on the P-224 curve
BZ 1960748 - RHCOS PXE deployment script coreos-livepxe-rootfs randomly fails to download and verify the image with bonding LACP active-active

Changes generated with:

$ hack/update-rhcos-bootimage.py https://releases-art-rhcos.svc.ci.openshift.org/art/storage/releases/rhcos-4.7/47.83.202105220305-0/x86_64/meta.json amd64
$ hack/update-rhcos-bootimage.py https://releases-art-rhcos.svc.ci.openshift.org/art/storage/releases/rhcos-4.7-ppc64le/47.83.202105211710-0/ppc64le/meta.json ppc64le
$ hack/update-rhcos-bootimage.py https://releases-art-rhcos.svc.ci.openshift.org/art/storage/releases/rhcos-4.7-s390x/47.83.202105211211-0/s390x/meta.json s390x

This brings in the following fixes: BZ 1956489 - CVE-2021-3114 ignition: golang: crypto/elliptic: incorrect operations on the P-224 curve BZ 1960748 - RHCOS PXE deployment script coreos-livepxe-rootfs randomly fails to download and verify the image with bonding LACP active-active Changes generated with: ``` $ hack/update-rhcos-bootimage.py https://releases-art-rhcos.svc.ci.openshift.org/art/storage/releases/rhcos-4.7/47.83.202105220305-0/x86_64/meta.json amd64 $ hack/update-rhcos-bootimage.py https://releases-art-rhcos.svc.ci.openshift.org/art/storage/releases/rhcos-4.7-ppc64le/47.83.202105211710-0/ppc64le/meta.json ppc64le $ hack/update-rhcos-bootimage.py https://releases-art-rhcos.svc.ci.openshift.org/art/storage/releases/rhcos-4.7-s390x/47.83.202105211211-0/s390x/meta.json s390x ```

openshift-ci · 2021-05-26T15:43:43Z

@miabbott: This pull request references Bugzilla bug 1956483, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker.

6 validation(s) were run on this bug

bug is open, matching expected state (open)
bug target release (4.7.z) matches configured target release for branch (4.7.z)
bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, ON_DEV, POST, POST)
dependent bug Bugzilla bug 1956480 is in the state VERIFIED, which is one of the valid states (VERIFIED, RELEASE_PENDING, CLOSED (ERRATA), CLOSED (CURRENTRELEASE))
dependent Bugzilla bug 1956480 targets the "4.8.0" release, which is one of the valid target releases: 4.8.0
bug has dependents

Requesting review from QA contact:
/cc @mike-nguyen

In response to this:

Bug 1956483: Bump boot images for RHCOS fixes

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

miabbott · 2021-05-26T18:46:32Z

/retest

miabbott · 2021-05-27T13:20:38Z

e2e-openstack shows that bootstrap/master nodes were created in OpenStack, but they are all spinning on fetching the Ignition config:

[0m] A start job is running for Ignition (fetch) (22min 55s / no limit)

The logs appear to be missing any larger context for why this is occurring but it suspect there is some kind of networking issue preventing the fetch from succeeding. Without additional context, I can't understand what is going on.

e2e-crc has been perma-red in the most recent history. On this PR, it looks like a bunch of operators never succeeded; perhaps the masters never succeeded. I forget the topology of the CRC install...

staebler

This is missing changes to rhcos-stream.json and rhcos-aarch64.json.

miabbott · 2021-05-28T12:17:49Z

This is missing changes to rhcos-stream.json and rhcos-aarch64.json.

Those files don't exist on the release-4.7 branch; I don't even think we have aarch64 builds for 4.7.

mandre · 2021-05-31T06:49:32Z

e2e-openstack shows that bootstrap/master nodes were created in OpenStack, but they are all spinning on fetching the Ignition config:

[0m] A start job is running for Ignition (fetch) (22min 55s / no limit)

The logs appear to be missing any larger context for why this is occurring but it suspect there is some kind of networking issue preventing the fetch from succeeding. Without additional context, I can't understand what is going on.

The infra where this job ran had an issue with their metadata service. This should be fixed now, ref https://bugzilla.redhat.com/show_bug.cgi?id=1963932.

/retest

mandre · 2021-05-31T09:10:00Z

/retest

staebler · 2021-05-31T17:42:40Z

This is missing changes to rhcos-stream.json and rhcos-aarch64.json.

Those files don't exist on the release-4.7 branch; I don't even think we have aarch64 builds for 4.7.

Doh! Sorry, I missed that this for 4.7.

staebler · 2021-06-01T02:38:27Z

/approve

openshift-ci · 2021-06-01T02:38:55Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: staebler

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [staebler]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

miabbott · 2021-06-07T14:44:09Z

@staebler should I get someone else from RHCOS to give the /lgtm?

staebler · 2021-06-07T14:50:13Z

@staebler should I get someone else from RHCOS to give the /lgtm?

Yes, please.

travier · 2021-06-07T15:42:52Z

/lgtm

openshift-bot · 2021-06-07T16:40:43Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-07T17:06:53Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-07T18:31:45Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-07T20:09:33Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-08T00:23:40Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-08T00:59:40Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-08T01:11:46Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-08T04:03:58Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-09T19:22:33Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-09T20:00:41Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T01:24:32Z

/retest

Please review the full test history for this PR and help us cut down flakes.

gbraad · 2021-06-10T02:36:00Z

@praveenkumar INFO[2021-06-10T02:31:56Z] scp: /home/packer/snc/*.crcbundle: No such file or directory

msg=EnvVarControllerDegraded: can't update etcd pod configurations because scaling is currently unsafe: 3 nodes are required, but only 1 are available

openshift-bot · 2021-06-10T02:41:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

praveenkumar · 2021-06-10T05:15:32Z

/retest

praveenkumar · 2021-06-10T05:52:45Z

Please ignore the failure for 4.7 branch, we need to update the CI job for it.

openshift-bot · 2021-06-10T07:38:57Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T08:27:00Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T10:14:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T13:14:58Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T14:38:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T17:51:00Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T19:27:08Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-10T22:04:03Z

/retest

Please review the full test history for this PR and help us cut down flakes.

travier · 2021-06-10T23:40:16Z

Can we get a CI override for this one? Thanks!

openshift-bot · 2021-06-11T01:46:00Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T03:03:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T04:34:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T06:06:02Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T07:50:07Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T08:55:02Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T10:22:00Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T12:21:58Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T14:57:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2021-06-11T19:58:59Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-ci · 2021-06-11T21:13:58Z

@miabbott: The following test failed, say /retest to rerun all failed tests:

Test name	Commit	Details	Rerun command
ci/prow/e2e-crc	`5e28207`	link	`/test e2e-crc`

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

openshift-ci · 2021-06-11T21:29:49Z

@miabbott: All pull requests linked via external trackers have merged:

openshift/installer#4961

Bugzilla bug 1956483 has been moved to the MODIFIED state.

In response to this:

Bug 1956483: Bump boot images for RHCOS fixes

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-ci bot added bugzilla/severity-medium Referenced Bugzilla bug's severity is medium for the branch this PR is targeting. bugzilla/valid-bug Indicates that a referenced Bugzilla bug is valid for the branch this PR is targeting. labels May 26, 2021

openshift-ci bot requested review from mike-nguyen, jhixson74 and jstuever May 26, 2021 15:43

staebler reviewed May 28, 2021

View reviewed changes

openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 1, 2021

openshift-ci bot assigned travier Jun 7, 2021

openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Jun 7, 2021

ecordell added the cherry-pick-approved Indicates a cherry-pick PR into a release branch has been approved by the release branch manager. label Jun 11, 2021

openshift-merge-robot merged commit 7d940d5 into openshift:release-4.7 Jun 11, 2021

Bug 1956483: Bump boot images for RHCOS fixes #4961

Bug 1956483: Bump boot images for RHCOS fixes #4961

Conversation

miabbott commented May 26, 2021

openshift-ci bot commented May 26, 2021

miabbott commented May 26, 2021

miabbott commented May 27, 2021

staebler left a comment

Choose a reason for hiding this comment

miabbott commented May 28, 2021

mandre commented May 31, 2021 • edited

mandre commented May 31, 2021

staebler commented May 31, 2021

staebler commented Jun 1, 2021

openshift-ci bot commented Jun 1, 2021

miabbott commented Jun 7, 2021

staebler commented Jun 7, 2021

travier commented Jun 7, 2021

openshift-bot commented Jun 7, 2021

openshift-bot commented Jun 7, 2021

openshift-bot commented Jun 7, 2021

openshift-bot commented Jun 7, 2021

openshift-bot commented Jun 8, 2021

openshift-bot commented Jun 8, 2021

openshift-bot commented Jun 8, 2021

openshift-bot commented Jun 8, 2021

openshift-bot commented Jun 9, 2021

openshift-bot commented Jun 9, 2021

openshift-bot commented Jun 10, 2021

gbraad commented Jun 10, 2021 • edited

openshift-bot commented Jun 10, 2021

praveenkumar commented Jun 10, 2021

praveenkumar commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

openshift-bot commented Jun 10, 2021

travier commented Jun 10, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-bot commented Jun 11, 2021

openshift-ci bot commented Jun 11, 2021 • edited

openshift-ci bot commented Jun 11, 2021

mandre commented May 31, 2021 •

edited

gbraad commented Jun 10, 2021 •

edited

openshift-ci bot commented Jun 11, 2021 •

edited