[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [XEN PATCH v3 0/4] automation: Update containers to allow HTTPS access to xenbits


  • To: Anthony PERARD <anthony.perard@xxxxxxxxxx>, xen-devel@xxxxxxxxxxxxxxxxxxxx
  • From: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  • Date: Fri, 24 Feb 2023 17:37:44 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=U9S+T7vv4d8pPJuPKqLn8ORHt1uiw2csfSfb5GMXDCY=; b=UiYrUR4Vbu3gaB7q2WKrRMTwNDtkDO9kJUqJRGO31I6NuMVLhKaaT2X4L7AUqZ6ao4wX8BmGRvjulv4/YhOPy/niNVUHFaPTQ9l6WMBlKJEfCganRXt2ry6oQxhvpppqwuzO6kf/sZ2cGw7x27kStWL+jlXKz08xQeOtHiwWWB2c7Vcjs8eXG9CFs0xGkQdxUSNX/YPJLaABm4tQK7SruXx9LiprAl+N73I4oPciFoWn/ZBdhwNmFZRYdOLGgYT7H2rb3mNVTZz5DSGZmJm11mGRm/lklT4FuoW8k9iyRG4YrUunWTdQIo1m4skskJ9oESas3yeWddRcqpZmCbA36w==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=T8sx/MnLB62MgGgdr5iz5jUbFhcJLDn6AV+Uf1cuJ0vS12xwPUnVJDW9ARUyfaAAE6BQzWB0l/jmyX6/Px4atyd0GnuhHlGK9aVwCjKS/8l99oGqgCLyvfVeZengzOPYtTfce8Kh/4zjk0aiPGmFXQztcGzPnRDCb/oDnSg/gswfGWzJ704XYvK4Wwxz6X0Ky3XRmXNDOoPpFpiGlGz66d6tc6GIPABatvpCHG3HSkOgzY13uOgwTgtAQ3WY1YqjB6QaRPaKCGn2u9GHTEbzxq70ITjP61sqggGcqTx2io0ohaEtD3Dk2O2ZV4VDtlYuxiq7UNBJPFSqDVGfRlz2mA==
  • Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=citrix.com;
  • Cc: Doug Goldstein <cardoe@xxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>
  • Delivery-date: Fri, 24 Feb 2023 17:38:05 +0000
  • Ironport-data: A9a23:UMLinK64QQTScKiohPHKAQxRtA/GchMFZxGqfqrLsTDasY5as4F+v mMcUW/TPv6JYmqnedEgaYy/9EkF65fdyoRiSFFs/C0zHi5G8cbLO4+Ufxz6V8+wwm8vb2o8t plDNYOQRCwQZiWBzvt4GuG59RGQ7YnRGvynTraCYnsrLeNdYH9JoQp5nOIkiZJfj9G8Agec0 fv/uMSaM1K+s9JOGjt8B5mr9VU+45wehBtC5gZlPaoR4AeF/5UoJMl3yZ+ZfiOQrrZ8RoZWd 86bpJml82XQ+QsaC9/Nut4XpWVTH9Y+lSDX4pZnc/DKbipq/0Te4Y5iXBYoUm9Fii3hojxE4 I4lWapc6+seFvakdOw1C3G0GszlVEFM0OevzXOX6aR/w6BaGpdFLjoH4EweZOUlFuhL7W5mx fMqMwAQXCC5mbzu47KpZNlHvpkSM5y+VG8fkikIITDxK98DGMqGZpqQoNhS0XE3m9xEGuvYa 4wBcz1zYR/cYhpJfFAKFJY5m+TujX76G9FagAvN+exrvC6Nkkotj9ABM/KMEjCObexTklyVu STt+GPhDwtBHNee1SCE4jSngeqncSbTCdJOSO3oq6YCbFu77S8MDTIzeACB5sa91l/uUIl/C nU75X97xUQ13AnxJjXnZDWorXjBshMCVt54F+wh9BrL2qfS+xyeBGUPUnhGctNOnMQ/XzAt2 3eClsnlAjEpu7qQIVqG7audpz62PSkTLEcBaDUCQA9D5MPsyLzflTrKR9dnVauq1Nv8HGiqx yjQ9HRhwbIOkcQMyqO3u0jdhC6hrYTISQhz4RjLWmWi7UVyY4vNi5GU1GU3JM1odO6xJmRtd lBd8yRCxIji1a2wqRE=
  • Ironport-hdrordr: A9a23:JnVzbqh++V/SiL3wIhcYUjdta3BQXt4ji2hC6mlwRA09TyXPrb HLoB1773/JYVkqM03I9errBEDiexLhHPxOjrX5Zo3SOTUO0VHARL2Ki7GO/9SKIUPDH4BmuZ uJ3MJFebrN5fQRt7eY3OEYeexQouW6zA==
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On 24/02/2023 5:29 pm, Anthony PERARD wrote:
> Patch series available in this git branch:
> https://xenbits.xen.org/git-http/people/aperard/xen-unstable.git 
> br.gitlab-containers-update-v3
>
> v3:
> - new patch which remove non-debug x86_32 builds
> - don't fix root certificates in jessie containers as those won't be used
>   anymore on the main branch.
>
> v2:
> - Remove CentOS 7.2
> - Remove Debian Jessie test, but update container recipe for the benefit of
>   older branches.
> - Fix CentOS 7 containner recipe to update all packages. (Fix missing update 
> of
>   HTTPS root certificates)
>
> There is work in progress [1] to update urls in our repo to use https, but
> those https urls to xenbits don't work in our containers, due to an expired
> root certificate. So we need to update those containers.
>
> This series update the dockerfile where just rebuilding the container isn't 
> enough.

LGTM.

Acked-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>

I'll add this to my commit sweep, and rebuild the remaining containers.

But on that note, I noticed that the debian unstable container was 2.3G
when I last rebuilt it.  Which I think is obscenely large for what we're
doing.

Can we see about switching to slim/tiny container bases?

~Andrew



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.