[openshift-4.17] ART-17441: Build ose-machine-os-images hermetically#11119
[openshift-4.17] ART-17441: Build ose-machine-os-images hermetically#11119adobes1 wants to merge 1 commit into
Conversation
Switch to rpm-lockfile-prototype backend for automatic transitive RPM dependency resolution. Add RHCOS ISO URLs as Cachi2 generic artifacts so they are prefetched instead of downloaded at build time. Remove network_mode: open. ISO URLs sourced from the installer image's embedded stream JSON (build 417.94.202601272318-0). Temporary url_pull added for testing. rh-pre-commit.version: 2.3.2 rh-pre-commit.check-secrets: ENABLED
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
/hold Requires openshift/machine-os-images#101 to be merged first |
|
@adobes1: This pull request references ART-17441 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.17.z" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
Summary
ose-machine-os-imagescan't be built hermetically by default becausefetch_image.shdownloads RHCOS ISO images at build time from an internal mirror.This adds support for Cachi2 generic artifact prefetching. When the Cachi2 prefetch directory (
/cachi2/output/deps/generic/) exists,fetch_image.shcopies ISOs from there instead of downloading them.Changes
rpm-lockfile-prototypeartifact_lockfile.resourceswith RHCOS ISO URLs matching the installer imagenetwork_mode: open