-
Notifications
You must be signed in to change notification settings - Fork 114
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Better building and testing of deployable zipfile artifacts #8706
Conversation
This is very cool, all the additions seem sensible and pointed in the right direction. Do you plan on getting the whole migration squash process in to main before merging this? |
See changes to docs/deployment.md for usage.
No need to specify pull_request types, as these are already the defaults, see: https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#pull_request
eec1667
to
c08cf7f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks good to me. Sonarcloud is complaining about the container running as root which imo is less important for this specific image, but could probably be fixed with adding a USER
and chown
/chmod
ing some things.
Thanks @wpears. I took a quick look at implementing a non-root user but it gets complicated because of necessary permissions on the mounted volume used for the cf.gov artifact. I'm going to merge this to try it out and we can add in future if desired. |
This PR modifies the way that we build the "deployable zipfile" artifact that gets installed on EC2 servers running cf.gov.
Currently we don't have any automated testing around the built artifact. The only way we know it works properly is when we test its deployment onto a real EC2 instance. This PR adds automated testing of the image by deploying it to a CentOS 7-based container (to mimic our current RHEL7 EC2 instances). These changes are intended to provide a framework for pending changes to our EC2 workflows around both Apache and upgrading to RHEL9.
These changes don't modify the deployable zipfile at all but only modify how it gets built. There are now two Docker images -
cfgov-artifact-builder
andcfgov-artifact-tester
- that are used to build and test the artifact, respectively.Note that this PR includes some manual surgery of migration files that will be unnecessary once the migration squash process started in #8701 is completed; this surgery was necessary to remove incompatibilities with SQLite which is used when testing the deployable zipfile.
Screenshots
New documentation about the modified process: