[openshift-4.12] ART-17441: Build ose-machine-os-images hermetically#11124
[openshift-4.12] ART-17441: Build ose-machine-os-images hermetically#11124adobes1 wants to merge 1 commit into
Conversation
Use Cachi2 artifact lockfile to prefetch RHCOS ISO before the build, removing the need for network_mode: open. Installer build: ose-installer-container-v4.12.0-202605291140.p2.gb86064a.assembly.stream.el8 Note: url_pull is temporary for testing and should be removed before merging. rh-pre-commit.version: 2.3.2 rh-pre-commit.check-secrets: ENABLED
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
/hold Requires openshift/machine-os-images#106 to be merged first |
openshift-ci
Bot
added
the
do-not-merge/hold
adobes1
changed the title
openshift-ci-robot
added
the
jira/valid-reference
|
@adobes1: This pull request references ART-17441 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the task to target the "4.12.z" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
2 participants
Summary
ose-machine-os-imagescan't be built hermetically by default becausefetch_image.shdownloads RHCOS ISO images at build time from an internal mirror.This adds support for Cachi2 generic artifact prefetching. When the Cachi2 prefetch directory (
/cachi2/output/deps/generic/) exists,fetch_image.shcopies ISOs from there instead of downloading them.Changes
rpm-lockfile-prototypeartifact_lockfile.resourceswith RHCOS ISO URLs matching the installer imagenetwork_mode: open