Skip to content

ci: pin docker buildx version to v0.9.1 #659

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 25, 2023

Conversation

willfindlay
Copy link
Contributor

Our image builder jobs were breaking due to incompaitibilies with a newer docker buildx version. Pin the version now to avoid breakages.

Original commit message from cilium/cilium:

GitHub recently rolled out Docker buildx version v0.10.0 on their
builders, which transparently changed the MediaType of docker images to
OCI v1 and added provenance attestations.

Unfortunately, various tools we use in CI like SBOM tooling and docker
manifest inspect do not properly support some aspect of the new image
formats. This resulted in breaking CI, with some messages like this:

level=fatal msg="generating doc: creating SPDX document: generating
SPDX package from image ref quay.io/cilium/docker-plugin-ci:XXX:
generating image package"
This could also lead CI to fail while waiting for image builds to
complete, because the command we use to test whether the image is
available did not support the image types.

This commit attempts to revert buildx back to v0.9.1 to prevent it from
generating the images in a format that other tooling doesn't expect.
Over time we can work on migrating to buildx v0.10, testing various
parts of our CI as we do so.

This is a quick-and-dirty hack to stabilize CI for the short term, then
we can figure out over time how to properly resolve the conflict between
these systems.

Signed-off-by: William Findlay [email protected]

Our image builder jobs were breaking due to incompaitibilies with a newer docker buildx
version. Pin the version now to avoid breakages.

Original commit message from cilium/cilium:

    GitHub recently rolled out Docker buildx version v0.10.0 on their
    builders, which transparently changed the MediaType of docker images to
    OCI v1 and added provenance attestations.

    Unfortunately, various tools we use in CI like SBOM tooling and docker
    manifest inspect do not properly support some aspect of the new image
    formats. This resulted in breaking CI, with some messages like this:

    level=fatal msg="generating doc: creating SPDX document: generating
    SPDX package from image ref quay.io/cilium/docker-plugin-ci:XXX:
    generating image package"
    This could also lead CI to fail while waiting for image builds to
    complete, because the command we use to test whether the image is
    available did not support the image types.

    This commit attempts to revert buildx back to v0.9.1 to prevent it from
    generating the images in a format that other tooling doesn't expect.
    Over time we can work on migrating to buildx v0.10, testing various
    parts of our CI as we do so.

    This is a quick-and-dirty hack to stabilize CI for the short term, then
    we can figure out over time how to properly resolve the conflict between
    these systems.

Signed-off-by: William Findlay <[email protected]>
Copy link
Member

@tixxdz tixxdz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Much appreciated @willfindlay

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants