From e4e7a802de824062299fa9da9adf0bdbceaff14e Mon Sep 17 00:00:00 2001 From: Peter Zhu Date: Mon, 17 Feb 2025 19:00:57 -0500 Subject: [PATCH] Replace docker build image base from Ubuntu2004 to Ubuntu2404 (#5328) Signed-off-by: Peter Zhu --- .../docker-builder.ubuntu2404.x64.dockerfile | 99 +++++++++++++++++++ .../docker-builder.ubuntu2004.x64.dockerfile | 0 2 files changed, 99 insertions(+) create mode 100644 docker/ci/dockerfiles/current/docker-builder.ubuntu2404.x64.dockerfile rename docker/ci/dockerfiles/{current => legacy}/docker-builder.ubuntu2004.x64.dockerfile (100%) diff --git a/docker/ci/dockerfiles/current/docker-builder.ubuntu2404.x64.dockerfile b/docker/ci/dockerfiles/current/docker-builder.ubuntu2404.x64.dockerfile new file mode 100644 index 0000000000..2efba7e325 --- /dev/null +++ b/docker/ci/dockerfiles/current/docker-builder.ubuntu2404.x64.dockerfile @@ -0,0 +1,99 @@ +# Copyright OpenSearch Contributors +# SPDX-License-Identifier: Apache-2.0 +# +# The OpenSearch Contributors require contributions made to +# this file be licensed under the Apache-2.0 license or a +# compatible open source license. + +# This is a docker image specifically for building docker images with single/multi-arch support +# It has binfmt_support package installed to run non-native arch binary, as well as +# qemu-user-static package to enable execution of different multi-arch containers + +# This can only be used on Ubuntu 2004 X64 version, as QEMU 5.0 is required to get buildx work properly without segfault +# https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1928075 + +# This image can be used with these arguments: -u root -v /var/run/docker.sock:/var/run/docker.sock + +FROM ubuntu:24.04 + +ARG DEBIAN_FRONTEND=noninteractive +ARG CONTAINER_USER=ci-runner +ARG CONTAINER_USER_HOME=/home/ci-runner + +# Remove ubuntu user which occupies the 1000 userid and groupid since 23.04 +# https://bugs.launchpad.net/cloud-images/+bug/2005129 +USER 0 +RUN touch /var/mail/ubuntu && chown ubuntu /var/mail/ubuntu && userdel -r ubuntu + +# Import necessary repository +RUN apt-get update -y && apt-get install -y software-properties-common && add-apt-repository ppa:deadsnakes/ppa -y + +# Install necessary packages to build multi-arch docker images +RUN apt-get update -y && apt-get upgrade -y && apt-get install -y binfmt-support qemu-system qemu-system-common qemu-user qemu-user-static docker.io=24.0.7* curl && \ + apt-get install -y debmake debhelper-compat + +# Install python, update awscli to v2 due to lib conflicts on urllib3 v1 vs v2 +RUN apt-get install -y python3.9-full && \ + update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.9 100 && \ + update-alternatives --install /usr/bin/python python /usr/bin/python3.9 100 && \ + update-alternatives --set python3 /usr/bin/python3.9 && \ + update-alternatives --set python /usr/bin/python3.9 && \ + curl -SL https://bootstrap.pypa.io/get-pip.py | python3 - && \ + pip3 install awscliv2==2.3.1 + +# Install trivy to scan the docker images +RUN apt-get install -y apt-transport-https gnupg lsb-release && \ + curl -o- https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor | tee /usr/share/keyrings/trivy.gpg > /dev/null && \ + echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main" | tee -a /etc/apt/sources.list.d/trivy.list && \ + apt-get update -y && apt-get install -y trivy && apt-get clean && trivy --version + +# Install JDK +RUN curl -SL https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.15%2B10/OpenJDK11U-jdk_x64_linux_hotspot_11.0.15_10.tar.gz -o /opt/jdk11.tar.gz && \ + mkdir -p /opt/java/openjdk-11 && \ + tar -xzf /opt/jdk11.tar.gz --strip-components 1 -C /opt/java/openjdk-11/ && \ + rm /opt/jdk11.tar.gz + +# Create user group +RUN groupadd -g 1000 $CONTAINER_USER && \ + useradd -u 1000 -g 1000 -s /bin/bash -d $CONTAINER_USER_HOME -m $CONTAINER_USER && \ + mkdir -p $CONTAINER_USER_HOME && \ + chown -R 1000:1000 $CONTAINER_USER_HOME + +# ENV JDK +ENV JAVA_HOME=/opt/java/openjdk-11 +ENV PATH=$PATH:$JAVA_HOME/bin + +# Install docker buildx +# 2023-06-20 Upgrade from 0.6.3 to 0.9.1 due to binary translation speedup in emulation mode during multi-arch image generation +# https://github.com/docker/buildx/releases/tag/v0.9.1 +# Avoid upgrading to 0.10.0+ due to this change: +# Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. +# This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). +# You can optionally disable the default provenance attestation functionality using --provenance=false. +RUN mkdir -p ~/.docker/cli-plugins && \ + curl -SL https://github.com/docker/buildx/releases/download/v0.9.1/buildx-v0.9.1.linux-amd64 -o ~/.docker/cli-plugins/docker-buildx && \ + chmod 775 ~/.docker/cli-plugins/docker-buildx && \ + docker buildx version + +# Install gcrane +# Stays on 0.15.2 due to --all-tags was introduced in 0.15.1 and several bugs are fixed in 0.15.2: https://github.com/google/go-containerregistry/pull/1682 +RUN curl -SL https://github.com/google/go-containerregistry/releases/download/v0.15.2/go-containerregistry_Linux_x86_64.tar.gz -o go-containerregistry.tar.gz && \ + tar -zxvf go-containerregistry.tar.gz && \ + chmod +x gcrane crane krane && \ + mv -v gcrane crane krane /usr/local/bin/ && \ + rm -v go-containerregistry.tar.gz && \ + gcrane version && crane version && krane version + +# Install packer +# Stays on 1.8.7 version due to 1.8.7 fixed the JSON regression: https://github.com/hashicorp/packer/issues/12281 +# As well as 1.9.0+ includes major changes. A lot of plugins are removed since 1.9.0: https://github.com/hashicorp/packer/releases/tag/v1.9.0 +RUN curl -SL -o- https://apt.releases.hashicorp.com/gpg | gpg --dearmor > /usr/share/keyrings/hashicorp-archive-keyring.gpg && \ + echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/hashicorp.list && \ + apt-get update && \ + apt-get install packer=1.8.7* && \ + packer --version && \ + apt-get clean + +# Tools setup +COPY --chown=0:0 config/yq-setup.sh config/gh-setup.sh /tmp/ +RUN apt-get install -y golang-1.22 && /tmp/yq-setup.sh && /tmp/gh-setup.sh && apt-get clean && apt-get autoremove -y diff --git a/docker/ci/dockerfiles/current/docker-builder.ubuntu2004.x64.dockerfile b/docker/ci/dockerfiles/legacy/docker-builder.ubuntu2004.x64.dockerfile similarity index 100% rename from docker/ci/dockerfiles/current/docker-builder.ubuntu2004.x64.dockerfile rename to docker/ci/dockerfiles/legacy/docker-builder.ubuntu2004.x64.dockerfile