Skip to content

Conversation

markgoddard
Copy link
Contributor

  • CI: Run container image build job on ARC cluster
  • Add package repository credentials to container image build
  • Don't verify Apt repo CA initially when using HTTPS in container build

The Actions Runner Controller (ARC) cluster runs GitHub Actions jobs on
a Kubernetes cluster. This allows us to dynamically provision resources
for our CI workflows.

This change switches the container image build jobs to use the ARC
cluster. The job now runs in a container, with access to a Docker in
Docker container for building images. This allows us to skip the host
configuration part of the workflow.

See https://github.com/stackhpc/ARC-Installer/
This is necessary to access package repositories hosted on Ark.
The Ubuntu base image doesn't contain the ca-certificates package, so we
can't verify an HTTPS package mirror to download the ca-certificates
package. Using the upstream repos may result in a version conflict when
we switch to another mirror.
@markgoddard markgoddard requested a review from a team as a code owner February 8, 2024 13:55
@markgoddard markgoddard self-assigned this Feb 8, 2024
cityofships
cityofships previously approved these changes Feb 9, 2024
Base automatically changed from CleanAiOChanges to stackhpc/yoga February 9, 2024 08:54
@markgoddard markgoddard dismissed cityofships’s stale review February 9, 2024 08:54

The base branch was changed.

@markgoddard markgoddard merged commit 75c38d2 into stackhpc/yoga Feb 9, 2024
@markgoddard markgoddard deleted the yoga-container-build-on-arc branch February 9, 2024 08:54

# FIXME: Failed in kolla-ansible : Ensure the latest version of pip is installed
- name: Install dependencies
- name: Make sure dockerd is running and test Docker
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this always required or just for testing?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not required, but has been useful for checking that the dind configuration for the runner is working. It seems to run very quickly - it's a tiny image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants