-
Notifications
You must be signed in to change notification settings - Fork 241
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Converge cloudserver images #5716
base: development/9.0
Are you sure you want to change the base?
Conversation
Benefit is to avoid duplicating image, make sure we actually run the build we tested, and reduce dependency on federation. Additionally, switched to `ochinchina/supervisord`, so we can fully remove the python dependency and reduce image size. Differences are very few: - Run as `scality` user - Run supervisord as entrypoint Issue: CLDSRV-597
Remove redundant shell command (implicit from using shell form of `CMD`) and use exec to run supervisord. Issue: CLDSRV-597
Hello francoisferrand,My role is to assist you with the merge of this Available options
Available commands
Status report is not available. |
Waiting for approvalThe following approvals are needed before I can proceed with the merge:
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## development/9.0 #5716 +/- ##
================================================
Coverage 60.55% 60.55%
================================================
Files 185 185
Lines 11617 11617
================================================
Hits 7035 7035
Misses 4582 4582
Flags with carried forward coverage won't be shown. Click here to find out more. |
images/federation/Dockerfile
Outdated
@@ -0,0 +1,42 @@ | |||
ARG BACKBEAT_VERSION=latest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ARG CLOUDSERVER_VERSION=latest
images/federation/Dockerfile
Outdated
WORKDIR ${HOME_DIR}/s3 | ||
|
||
# Keep same output as chown command without group (use group 0) | ||
COPY --chown=${USER}:0 --from=builder /usr/src/app ${HOME_DIR}/backbeat |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
COPY --chown=${USER}:0 --from=builder /usr/src/app ${HOME_DIR}/cloudserver
Build federation image as additional layers on top of "standard" cloudserver image, to avoid duplication and ensure the image we tested is used in production.
There are still some differences at the moment (e.g. name of user, path) which should be further converged to minimize differences, may be done over time after considering all things.
This allows us to fully control (and minimize) what gets into the image, relying on any official node image. Also, now switch from python-based supervisord to a golang reimplementation [1], to minimize dependencies and CVEs.
Finally, took the change to fix startup command of the image, to ensure it properly propagates OS signals.
[1] ochinchina/supervisord
Issue: CLDSRV-597