Can't update Globaleaks in GitLab

[Herkatus]

So, I was tasked to understand why Globaleaks is not being updated. My company uses GitLab and I'm fairly new to it and I can't understand what is failing because the pipeline works (or is not showing errors.

.gitlab-ci.yml

variables:

 GIT_STRATEGY: clone
 GIT_SUBMODULE_STRATEGY: recursive
 GIT_SUBMODULE_UPDATE_FLAGS: --remote

 
stages:
 - build
 - deploy

docker-build:
 image: docker:24.0.7-dind-alpine3.18
 stage: build
 variables:
   DOCKER_IMAGE_NAME: $CI_REGISTRY_IMAGE:$CI_COMMIT_REF_SLUG
 before_script:
  - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY

 script:
   - docker build --pull -t "$DOCKER_IMAGE_NAME" ./GlobaLeaks/docker
   - docker push "$DOCKER_IMAGE_NAME"
   - |
     if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
       docker tag "$DOCKER_IMAGE_NAME" "$CI_REGISTRY_IMAGE:latest"
       docker push "$CI_REGISTRY_IMAGE:latest"
     fi

deploy:
 stage: deploy
 only:
   - main
 before_script:
   - eval $(ssh-agent -s)
   - echo "$SSH_PRIVATE_KEY" | base64 -d | ssh-add -
   - mkdir -p ~/.ssh
   - chmod 700 ~/.ssh
 script:
   - ssh -o StrictHostKeyChecking=no core@$DEPLOY_HOST /usr/bin/docker compose --project-directory /opt/globaleaks up -d --pull always --force-recreate`

.gitmodules

[submodule "GlobaLeaks"]
	path = GlobaLeaks
	url = https://github.com/globaleaks/globaleaks.git
	branch = stable

As I said the pipeline doesn't fail but I'm stuck on version 5.0.45
Any ideas?

[AnXh3L0]

Hi @Herkatus, can you please share some logs so we can investigate? Currently our latest Docker image version is v5.0.50, published about 18 hours ago.

[Herkatus]

build.txt
deploy.txt

[AnXh3L0]

I checked the logs, and it's strange, because, your script has fetched the GlobaLeaks Docker version with the following SHA256
sha256:aa93deb4ad1b0d89a24411a139b6867bd175cfc69e0e8e087bfc69911f99943d

And you said that you're stuck on version 5.0.45, but that version has the following manifest
sha256:fb5dabb105d47bf56252006890f2cfa3b4dd17167406ad9713a4eea1a4285e73

and the actual GL Docker v5.0.50 has the following manifest
sha256:2fe4466165f53193adf67b8d4ae256d4e188619d46ff774a9a1d4139e603d0bd

From all these, your current version doesn't seem to be neither .45 or .50, but something else. What I am suspecting is that there may be stale cached layers, and maybe adding --no-cache to the docker build command, as below, could help

docker build --pull --no-cache -t "$DOCKER_IMAGE_NAME" ./GlobaLeaks/docker

Please give it a try and let me know if it works. If not, we will try to diagnose further.

[Herkatus]

just tried and it's still in the same version.