diff mbox series

[isar-cip-core,3/3] .gitlab-ci.yml: Update debian-cve-checker image reference and runner tag

Message ID 20240812070303.1206167-4-Sai.Sathujoda@toshiba-tsip.com (mailing list archive)
State Superseded
Headers show
Series Updates to sync with latest debian-cve-checker | expand

Commit Message

Sai.Sathujoda@toshiba-tsip.com Aug. 12, 2024, 7:03 a.m. UTC
From: sai ashrith sathujoda <sai.sathujoda@toshiba-tsip.com>

This commit updates image reference of debian-cve-checker project.

The reason to change the runner tag to large is because cve-checks job is
being stuck in the middle after generating cve-reports for dpkg status files
of very few targets. This behavior is observed in several attempts.
After changing th tag to large, the job ran successfully in minimal
time.

Signed-off-by: sai ashrith sathujoda <sai.sathujoda@toshiba-tsip.com>
---
 .gitlab-ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Comments

Jan Kiszka Aug. 12, 2024, 8:19 a.m. UTC | #1
On 12.08.24 09:03, Sai.Sathujoda@toshiba-tsip.com wrote:
> From: sai ashrith sathujoda <sai.sathujoda@toshiba-tsip.com>
> 
> This commit updates image reference of debian-cve-checker project.
> 
> The reason to change the runner tag to large is because cve-checks job is
> being stuck in the middle after generating cve-reports for dpkg status files
> of very few targets. This behavior is observed in several attempts.
> After changing th tag to large, the job ran successfully in minimal
> time.

But that is not yet an explanation, just a mitigation. Conceptually, we
don't need a lot of CI power to run this job, do we?

Jan

> 
> Signed-off-by: sai ashrith sathujoda <sai.sathujoda@toshiba-tsip.com>
> ---
>  .gitlab-ci.yml | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
> index ab1835a..6c92927 100644
> --- a/.gitlab-ci.yml
> +++ b/.gitlab-ci.yml
> @@ -456,9 +456,9 @@ test:qemu-arm-IEC:
>  cve-checks:
>    stage: cve-check
>    needs: []
> -  image: registry.gitlab.com/cip-playground/debian-cve-checker:latest
> +  image: registry.gitlab.com/cip-project/cip-core/debian-cve-checker:build-latest
>    tags:
> -    - small
> +    - large
>    script:
>      - scripts/run-cve-checks.sh
>    when: manual
Sai.Sathujoda@toshiba-tsip.com Aug. 12, 2024, 11:10 a.m. UTC | #2
Hi Jan,

There might have been an issue with the runners on the day I tried to verify with small runners. Now I tried with 'small' runners again, report generation is successful. Let me drop this change and send v2 series.

Thanks and regards,
Sai Ashrith Sathujoda (T S I P)


-----Original Message-----
From: cip-dev@lists.cip-project.org <cip-dev@lists.cip-project.org> On Behalf Of Jan Kiszka via lists.cip-project.org
Sent: Monday, August 12, 2024 1:50 PM
To: ashrith sai(TSIP) <Sai.Sathujoda@toshiba-tsip.com>; cip-dev@lists.cip-project.org
Cc: dinesh kumar(TSIP TMIEC ODG Porting) <dinesh.kumar@toshiba-tsip.com>; hayashi kazuhiro(林 和宏 DME ○DIG□MPS○MP4) <kazuhiro3.hayashi@toshiba.co.jp>
Subject: Re: [cip-dev] [isar-cip-core 3/3] .gitlab-ci.yml: Update debian-cve-checker image reference and runner tag

On 12.08.24 09:03, Sai.Sathujoda@toshiba-tsip.com wrote:
> From: sai ashrith sathujoda <sai.sathujoda@toshiba-tsip.com>
> 
> This commit updates image reference of debian-cve-checker project.
> 
> The reason to change the runner tag to large is because cve-checks job 
> is being stuck in the middle after generating cve-reports for dpkg 
> status files of very few targets. This behavior is observed in several attempts.
> After changing th tag to large, the job ran successfully in minimal 
> time.

But that is not yet an explanation, just a mitigation. Conceptually, we don't need a lot of CI power to run this job, do we?

Jan

> 
> Signed-off-by: sai ashrith sathujoda <sai.sathujoda@toshiba-tsip.com>
> ---
>  .gitlab-ci.yml | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index ab1835a..6c92927 
> 100644
> --- a/.gitlab-ci.yml
> +++ b/.gitlab-ci.yml
> @@ -456,9 +456,9 @@ test:qemu-arm-IEC:
>  cve-checks:
>    stage: cve-check
>    needs: []
> -  image: registry.gitlab.com/cip-playground/debian-cve-checker:latest
> +  image: 
> + registry.gitlab.com/cip-project/cip-core/debian-cve-checker:build-la
> + test
>    tags:
> -    - small
> +    - large
>    script:
>      - scripts/run-cve-checks.sh
>    when: manual

--
Siemens AG, Technology
Linux Expert Center
diff mbox series

Patch

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index ab1835a..6c92927 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -456,9 +456,9 @@  test:qemu-arm-IEC:
 cve-checks:
   stage: cve-check
   needs: []
-  image: registry.gitlab.com/cip-playground/debian-cve-checker:latest
+  image: registry.gitlab.com/cip-project/cip-core/debian-cve-checker:build-latest
   tags:
-    - small
+    - large
   script:
     - scripts/run-cve-checks.sh
   when: manual