HIVE-2984: Switch BASE_IMAGE to ubi9-minimal #2789
Conversation
openshift-ci-robot
added
the
jira/valid-reference
|
@dlom: This pull request references HIVE-2984 which is a valid jira issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
1 similar comment
|
@dlom: This pull request references HIVE-2984 which is a valid jira issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-ci
bot
added
the
approved
dlom
force-pushed
the
HIVE-2984
branch
2 times, most recently
from
de90042 to
3d63662
Compare
openshift-merge-robot
added
the
needs-rebase
openshift-merge-robot
removed
the
needs-rebase
| ARG DNF=dnf | ||
|
|
||
| # CVE-2023-6597 | ||
| RUN ${DNF} upgrade -y python3 |
There was a problem hiding this comment.
ubi9-minimal (with microdnf) has no python3 dependency at all, this package is not present anymore
There was a problem hiding this comment.
Oh, that might cause a problem with our makefile, which currently uses python on load to try to compute the semver. Time to resurrect HIVE-2862 / #2692 ...
There was a problem hiding this comment.
This is only for the final image, not the builder images
|
@dlom: This pull request references HIVE-2984 which is a valid jira issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
dlom
force-pushed
the
HIVE-2984
branch
2 times, most recently
from
d668be4 to
7550caf
Compare
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: 2uasimojo, dlom The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
| contentOrigin: | ||
| repofiles: | ||
| - ./redhat.repo | ||
| packages: [openssh-clients, libvirt-libs, tar, krb5-libs, krb5-devel] # this should be kept in sync with the Dockerfile |
There was a problem hiding this comment.
The latest version of krb5 included in ubi9-minimal is high enough that CVE-2023-39975 is not present
|
@dlom: all tests passed! Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
4 participants
This PR also removes the installation of the libvirt-libs package. We'll see if that breaks anything!No it doesn't! I love konflux when it worksxref: HIVE-2984