From patchwork Fri Feb 24 17:29:12 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anthony PERARD X-Patchwork-Id: 13151566 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 7968DC6FA8E for ; Fri, 24 Feb 2023 17:29:39 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.501344.773056 (Exim 4.92) (envelope-from ) id 1pVbsy-0000t1-Qq; Fri, 24 Feb 2023 17:29:32 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 501344.773056; Fri, 24 Feb 2023 17:29:32 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbsy-0000ss-NT; Fri, 24 Feb 2023 17:29:32 +0000 Received: by outflank-mailman (input) for mailman id 501344; Fri, 24 Feb 2023 17:29:31 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbsx-0000bj-Bx for xen-devel@lists.xenproject.org; Fri, 24 Feb 2023 17:29:31 +0000 Received: from esa6.hc3370-68.iphmx.com (esa6.hc3370-68.iphmx.com [216.71.155.175]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id c88de6ac-b468-11ed-a82a-c9ca1d2f71af; Fri, 24 Feb 2023 18:29:28 +0100 (CET) X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: c88de6ac-b468-11ed-a82a-c9ca1d2f71af DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1677259768; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=dKjZmvLIgfgTCPTPD7KJgT13Ikz4Lhyv/yjVesUtAEg=; b=afhjV7klf2BlKyDKMxKNl0jYh1We3+k1Ss5y1DdWJ5KpKHjf6gxr1LEp 1MGt2v7r2UvXRlG+w3MW5EC+JiijO4gylvNrUsKLK3a28xX3I87TEBZKe wBlrVr5NEOLslqxS45YNTQm7HS+1X2TmQ78Q8Se1eEVoC3PmPtRJd8zs/ 0=; Authentication-Results: esa6.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none X-SBRS: 4.0 X-MesageID: 97830161 X-Ironport-Server: esa6.hc3370-68.iphmx.com X-Remote-IP: 162.221.156.123 X-Policy: $RELAYED IronPort-Data: A9a23:7XdTr6MY1mOmKNnvrR29l8FynXyQoLVcMsEvi/4bfWQNrUp0gTZVy WAaDWDSO/7cMGvxf4onPtu180JX6p7SmoRlSgto+SlhQUwRpJueD7x1DKtS0wC6dZSfER09v 63yTvGacajYm1eF/k/F3oDJ9CU6jufQAOKnUoYoAwgpLSd8UiAtlBl/rOAwh49skLCRDhiE/ Nj/uKUzAnf8s9JPGj9Suv3rRC9H5qyo42tC5ABmPpingXeF/5UrJMNHTU2OByOQrrl8RoaSW +vFxbelyWLVlz9F5gSNy+uTnuUiG9Y+DCDW4pZkc/HKbitq/0Te5p0TJvsEAXq7vh3S9zxHJ HehgrTrIeshFvWkdO3wyHC0GQkmVUFN0OevzXRSLaV/ZqAJGpfh66wGMa04AWEX0v4wGltV+ K0fERAAZS6dmLmv3bmpbsA506zPLOGzVG8eknRpzDWfBvc6W5HTBa7N4Le03h9p2JoIR6yHI ZNEN3w2Nk+ojx5nYz/7DLo3mvuogX/uNSVVsluPqYI84nTJzRw327/oWDbQUo3VFZ4NxxjBz o7A1zm6XColMJuv8yeE3lKqt8HLjH7cYI1HQdVU8dY12QbOlwT/EiY+RVa95PW0lEO6c9ZeM FAPvDojq7Ao806mRcW7WAe3yFaPtwQQXNd4GOQg5AaAjKHT5m6xHXMYRzRMbNgnss4eRjEw0 FKN2dTzClRSXKa9ECzHsO3O9HXrZHZTdDVZDcMZcecby8Gku7sog0PId/ZuG5CrkYbsBDri5 xnf+UDSmI4vpcIM0qy6+3XOjDStuoXFQ2YJ2+nHYo62xlgnPdD4PuRE/XCetK8dd9jBEjFtq VBew6CjAPYy4YZhfcBnaMEEB/mX6vmMK1UwanY/TsB6p1xBF5NOFL28AQ2Sxm8zb67omhezO ic/XD+9A7cCVEZGlYctP+qM5z0ClMAM7+jNWPHOdcZpaZNsbgKB9ywGTRfOgD+0zxd2zvxua cbznSOQ4ZEyU/kP8dZLb71Fje9DKt4WmAs/uqwXPzz4iOHDNRZ5uJ8OMUeUb/BR0U93iFy9z jqrDOPTk083eLSnMkHqHXs7cQhiwY4TWcqn9KS6t4erfmJbJY3WI6OOneh8I9Q4xsy4VI7gp xmAZ6OR83Kn7VWvFOlAQioLhG/HNXqnkU8GAA== IronPort-HdrOrdr: A9a23:L5dqDq17o66h+ZbCd2jvXwqjBWByeYIsimQD101hICG9Lfb0qy n+pp4mPEHP4wr5OUtQ/+xoXZPtfZqyz+8Q3WB8B8bBYOCEghrKEGgB1/qa/9SIIUSXmYA86U 4JSdkHNDSaNykcsS+V2njcLz8V+qj9zEnkv5as815dCSVRL41w5QZwDQiWVmVwWQl9HJI8UL 6R/NBOqTaMcWkeKp3TPAhxY8Hz4/nw0L72ax8PABAqrCGIkDOT8bb/VzyVxA0XXT9jyaortU LFjwv6zKO+tOzT8G6v60bjq7Bt3PfxwNpKA8KBzuATNzXXkw6tIL9sXrWT1QpF3t1GvDwR8e XkklMFBYBe+nnRdma6rV/GwA/7ygsj7Hfk1BuxnWbjidaRfkNxN+NxwaZiNjfJ4Uspu99xlI hR2XiCipZRBRTc2Azg+tnzUQ1wnEbcmwtorQcqtQ0TbWIiUs4ZkWVfxjIiLH44JlOM1GnzKp gnMCnejMwmDm9yIUqp8lWH++bcIkjbLi32P3TqhfblqQS+vEoJvnfwl/Zv7kvosqhNP6V52w == X-IronPort-AV: E=Sophos;i="5.97,325,1669093200"; d="scan'208";a="97830161" From: Anthony PERARD To: CC: Andrew Cooper , Anthony PERARD , Doug Goldstein , "Stefano Stabellini" Subject: [XEN PATCH v3 1/4] automation: Use EOL tag for Jessie container Date: Fri, 24 Feb 2023 17:29:12 +0000 Message-ID: <20230224172915.39675-2-anthony.perard@citrix.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20230224172915.39675-1-anthony.perard@citrix.com> References: <20230224172915.39675-1-anthony.perard@citrix.com> MIME-Version: 1.0 As Jessie is EOL, the official tag isn't supported anymore. Also, the GPG key for the packages on the repository on the official image are expired and it isn't possible to update or install packages. But we can use the image from "debian/eol" tag which use repositories from archive.debian.org and have workaround to ignore the validity date of the keys. There isn't a dedicated i386 tag for jessie, but we can ask docker to pull the i386 image of the "debial/eol:jessie" tag. Signed-off-by: Anthony PERARD --- Notes: v2: - new patch, this replace "automation: Ignore package authentification issue in Jessie container" workaround I've seen in the debian/eol:jessie: 'Acquire::Check-Valid-Until "false";' in /etc/apt/apt.conf.d/ And a script to replace the "gpgv" binary used by apt, which check that the only issue with a signature is that the key has expired. automation/build/debian/jessie-i386.dockerfile | 2 +- automation/build/debian/jessie.dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/automation/build/debian/jessie-i386.dockerfile b/automation/build/debian/jessie-i386.dockerfile index b152d658d3..c9ac15a3ff 100644 --- a/automation/build/debian/jessie-i386.dockerfile +++ b/automation/build/debian/jessie-i386.dockerfile @@ -1,4 +1,4 @@ -FROM i386/debian:jessie +FROM --platform=linux/i386 debian/eol:jessie LABEL maintainer.name="The Xen Project" \ maintainer.email="xen-devel@lists.xenproject.org" diff --git a/automation/build/debian/jessie.dockerfile b/automation/build/debian/jessie.dockerfile index 1e33e635d2..63b2c1e5b7 100644 --- a/automation/build/debian/jessie.dockerfile +++ b/automation/build/debian/jessie.dockerfile @@ -1,4 +1,4 @@ -FROM debian:jessie +FROM debian/eol:jessie LABEL maintainer.name="The Xen Project" \ maintainer.email="xen-devel@lists.xenproject.org" From patchwork Fri Feb 24 17:29:13 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anthony PERARD X-Patchwork-Id: 13151565 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2EEE9C7EE23 for ; Fri, 24 Feb 2023 17:29:38 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.501342.773036 (Exim 4.92) (envelope-from ) id 1pVbsu-0000L8-BZ; Fri, 24 Feb 2023 17:29:28 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 501342.773036; Fri, 24 Feb 2023 17:29:28 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbsu-0000Kx-89; Fri, 24 Feb 2023 17:29:28 +0000 Received: by outflank-mailman (input) for mailman id 501342; Fri, 24 Feb 2023 17:29:27 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbss-0008WD-RP for xen-devel@lists.xenproject.org; Fri, 24 Feb 2023 17:29:26 +0000 Received: from esa1.hc3370-68.iphmx.com (esa1.hc3370-68.iphmx.com [216.71.145.142]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id c7b10a3a-b468-11ed-88bb-e56d68cac8db; Fri, 24 Feb 2023 18:29:25 +0100 (CET) X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: c7b10a3a-b468-11ed-88bb-e56d68cac8db DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1677259765; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=zjChtf1zSIMhYiy5u8WzrbNRWG5mnbhddn5BxMoTNO4=; b=BABzUmCMWJsczGGGGxlc9SUMkl2QDKukHb9f8rxllRB+703NrlHqOMQ+ ORhMyV8fH8j1Rt/mVQOVI+1Ihi/L6eSRfrRpnssqyMamdMDpdkLCO8Dsy prkCHeR73dKGktaqfqZu+fF5YT+Ey8m6TPVGlmymxvbc+1eQtHWrjItEx M=; Authentication-Results: esa1.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none X-SBRS: 4.0 X-MesageID: 98853267 X-Ironport-Server: esa1.hc3370-68.iphmx.com X-Remote-IP: 162.221.156.123 X-Policy: $RELAYED IronPort-Data: A9a23:/UAwdKM706krZw7vrR29l8FynXyQoLVcMsEvi/4bfWQNrUoihWQOy mMWXjyFMv2CYWT1L4tyaISzpBgE65/XztRiHAto+SlhQUwRpJueD7x1DKtS0wC6dZSfER09v 63yTvGacajYm1eF/k/F3oDJ9CU6jufQAOKnUoYoAwgpLSd8UiAtlBl/rOAwh49skLCRDhiE/ Nj/uKUzAnf8s9JPGj9Suv3rRC9H5qyo42tC5ABmPpingXeF/5UrJMNHTU2OByOQrrl8RoaSW +vFxbelyWLVlz9F5gSNy+uTnuUiG9Y+DCDW4pZkc/HKbitq/0Te5p0TJvsEAXq7vh3S9zxHJ HehgrTrIeshFvWkdO3wyHC0GQkmVUFN0OevzXRSLaV/ZqAJGpfh66wGMa04AWEX0sxsX2MS1 sRCExIUMBmB2+buyqCWb+Y506zPLOGzVG8eknRpzDWfBvc6W5HTBa7N4Le03h9p2JoIR6yHI ZNEN3w2Nk+ojx5nYz/7DLo3mvuogX/uNSVVsluPqYI84nTJzRw327/oWDbQUo3aFZgOxBjHz o7A13T/XkkZZcWi8mGAqlCOj7HvgAO8Zo1HQdVU8dY12QbOlwT/EiY+RVa95PW0lEO6c9ZeM FAPvDojq7Ao806mRcW7WAe3yFaPtwQQXNd4GOQg5AaAjKHT5m6xHXMYRzRMbNgnss4eRjEw0 FKN2dTzClRSXKa9ECzHsO3O9HXrZHZTdDVZDcMZcecby/P4/oNvrSqVdfR6Tqe30tmtEyPd5 j/f+UDSmI4vpcIM0qy6+3XOjDStuoXFQ2YJ2+nHYo62xlgnPdD4PuRE/XCetK8dd9jBEjFtq VBew6CjAPYy4YZhfcBnaMEEB/mX6vmMK1UwanY/TsB6p1xBF5NOFL28AQ2Sxm8zb67omhezO ic/XD+9A7cCVEZGlYctP+qM5z0ClMAM7+jNWPHOdcZpaZNsbgKB9ywGTRfOgD+0zxd2zvxua cbznSOQ4ZEyU/kP8dZLb71Fje9DKt4WmAs/uqwXPzz4iOHDNRZ5uJ8OMUeUb/BR0U93iFy9z jqrDOPTk083eLSnMkHqHXs7cQhiwY4TWcqn9KS6t4erfmJbJY3WI6OOneh8I9Q4xsy4VI7gp xmAZ6OR83Kn7VWvFOlAQioLhG/HNXqnkU8GAA== IronPort-HdrOrdr: A9a23:MaOqz653dHIKE+YmgAPXwdeCI+orL9Y04lQ7vn2ZFiY5TiXIra qTdaogviMc0AxhI03Jmbi7Scq9qADnhORICOgqTP+ftWzd1FdAQ7sSircKrweAJ8S6zJ8k6U 4CSdk0NDSTNykdsS+S2mDRfLgdKZu8gdmVbIzlvhVQpHRRGsVdBnBCe2Om+yNNJDVuNN4cLt 6x98BHrz2vdTA+adm6PGAMW6zutsDGj5XvZD8BHloC5BOVhT2lxbbmG1zAty1uHg9n8PMHyy zoggb57qKsv7WSzQLd7Xba69B7icbs0dxKAe2Lk4wwJi/3ggilSYx9U/mpvSwzosuo9FE2+e O86SsIDoBW0Tf8b2u1qRzi103LyzA18ULvzleenD/KvdH5bChSMbsPuatpNj/ir2YwttB116 xGm0iDsYBMMB/GlCPho/DVShBRkFauq3ZKq59cs5Ufa/peVFZil/1dwKpnKuZDIMs80vFjLA BaNrCd2B+RSyLfU5mWhBgp/DXmZAVPIv7PeDl/hiXS6UkboJkx9Tpm+OUP2ngH754zUJ9C+q DNNblpjqhHSosMYbt6H/ppe7rBNoXhe2O4DIupGyWSKIgXf3bW75Ln6rQ84++nPJQO0ZspgZ zEFFdVr3Q7dU7iAdCHmMQjyGGFfEytGTD2js1O7ZlwvbPxALLtLC2YUVgr18+tue8WDMHXU+ u6fJhWH/jgJ23zHpsh5XyJZ7BCbX0FFMEFsNcyXFyD5srNN43xr+TeNO3eIbL8eAxUKF8Xwk FzLwQbCP8wnnxDAEWI/iQ5c0mdC3DCwQ== X-IronPort-AV: E=Sophos;i="5.97,325,1669093200"; d="scan'208";a="98853267" From: Anthony PERARD To: CC: Andrew Cooper , Anthony PERARD , Doug Goldstein , "Stefano Stabellini" Subject: [XEN PATCH v3 2/4] automation: Remove testing on Debian Jessie Date: Fri, 24 Feb 2023 17:29:13 +0000 Message-ID: <20230224172915.39675-3-anthony.perard@citrix.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20230224172915.39675-1-anthony.perard@citrix.com> References: <20230224172915.39675-1-anthony.perard@citrix.com> MIME-Version: 1.0 Jessie as rearch EOL in 2020. Even if we update the containers, we would still not be able to reach HTTPS webside with Let's Encrypt certificates and thus would need more change to the container. Signed-off-by: Anthony PERARD --- Notes: While we remove some x86_32 testing, there's still debian-stretch-32-* and debian-unstable-32-*. automation/gitlab-ci/build.yaml | 40 --------------------------------- 1 file changed, 40 deletions(-) diff --git a/automation/gitlab-ci/build.yaml b/automation/gitlab-ci/build.yaml index 22ce1c45e7..2be1b05d5c 100644 --- a/automation/gitlab-ci/build.yaml +++ b/automation/gitlab-ci/build.yaml @@ -221,46 +221,6 @@ centos-7-gcc-debug: variables: CONTAINER: centos:7 -debian-jessie-clang: - extends: .clang-x86-64-build - variables: - CONTAINER: debian:jessie - -debian-jessie-clang-debug: - extends: .clang-x86-64-build-debug - variables: - CONTAINER: debian:jessie - -debian-jessie-gcc: - extends: .gcc-x86-64-build - variables: - CONTAINER: debian:jessie - -debian-jessie-gcc-debug: - extends: .gcc-x86-64-build-debug - variables: - CONTAINER: debian:jessie - -debian-jessie-32-clang: - extends: .clang-x86-32-build - variables: - CONTAINER: debian:jessie-i386 - -debian-jessie-32-clang-debug: - extends: .clang-x86-32-build-debug - variables: - CONTAINER: debian:jessie-i386 - -debian-jessie-32-gcc: - extends: .gcc-x86-32-build - variables: - CONTAINER: debian:jessie-i386 - -debian-jessie-32-gcc-debug: - extends: .gcc-x86-32-build-debug - variables: - CONTAINER: debian:jessie-i386 - debian-stretch-clang: extends: .clang-x86-64-build variables: From patchwork Fri Feb 24 17:29:14 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anthony PERARD X-Patchwork-Id: 13151568 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id E3A61C7EE2D for ; Fri, 24 Feb 2023 17:29:40 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.501345.773066 (Exim 4.92) (envelope-from ) id 1pVbt0-0001Ad-5H; Fri, 24 Feb 2023 17:29:34 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 501345.773066; Fri, 24 Feb 2023 17:29:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbt0-0001AU-28; Fri, 24 Feb 2023 17:29:34 +0000 Received: by outflank-mailman (input) for mailman id 501345; Fri, 24 Feb 2023 17:29:32 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbsy-0000bj-1s for xen-devel@lists.xenproject.org; Fri, 24 Feb 2023 17:29:32 +0000 Received: from esa2.hc3370-68.iphmx.com (esa2.hc3370-68.iphmx.com [216.71.145.153]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id c8f907a6-b468-11ed-a82a-c9ca1d2f71af; Fri, 24 Feb 2023 18:29:29 +0100 (CET) X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: c8f907a6-b468-11ed-a82a-c9ca1d2f71af DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1677259769; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=1ZVP9ILrNhbusIRgE8ATcFEGu4Gjie58ccJgoiV0r98=; b=X0Vij8GE+XKzqzP8iINDyFxUbYiR63g9uOezhfy10fmFZrm2YMI0TimO fH/+AToj+WTO/zySdXxKMQWDP8awDaliWlkfTNg17na/JbfNtdiyRmuRX KlqbQzyItX+erRR8oS6V+xV6rkCjOF3oGs8z6oUujQtwzvbtX8p+FtJdK E=; Authentication-Results: esa2.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none X-SBRS: 4.0 X-MesageID: 98354844 X-Ironport-Server: esa2.hc3370-68.iphmx.com X-Remote-IP: 162.221.156.123 X-Policy: $RELAYED IronPort-Data: A9a23:6RPR6qlcfYMDshxa1vzFXybo5gyZJkRdPkR7XQ2eYbSJt1+Wr1Gzt xJMDzqDM/vYMWSjKNskO97l9BhTvcLdy9VnT1RurCk8ECMWpZLJC+rCIxarNUt+DCFhoGFPt JxCN4aafKjYaleG+39B55C49SEUOZmgH+a6U6icfHgqH2eIcQ954Tp7gek1n4V0ttawBgKJq LvartbWfVSowFaYCEpNg064gE4p7auaVA8w5ARkPqgR5gOGzBH5MbpETU2PByqgKmVrNrbSq 9brlNmR4m7f9hExPdKp+p6TnpoiG+O60aCm0xK6aoD66vRwjnVaPpUTbZLwXXx/mTSR9+2d/ f0W3XCGpaXFCYWX8AgVe0Ew/yiTpsSq8pefSZS0mZT7I0Er7xIAahihZa07FdRwxwp5PY1B3 e0cORogSi6EvsP18eOKUedhv54CC+C+aevzulk4pd3YJfMvQJSFSKTW/95Imjw3g6iiH96HO ZBfM2A2Kk2dPVsWYAx/5JEWxY9EglH2dSFYr1SE47I6+WHJwCR60aT3McqTcduPLSlQthfI/ T+arzilav0cHMaF8hWCr2qdv7PwgHL3cqspHaT7+sc/1TV/wURMUUZLBDNXu8KRmkO4Ht5SN UEQ0i4vtrQpslymSMHnWB+1q2LCuQQTM/JbGvc27wylwaPO7wGUQGMDS1Zpc8c6vcU7QTgr0 F6hnN7zAzFr9rqPRhqgGqy89G3of3JPdClbOHFCFFFeizX+nG0tpgPLX/xONJCyt/y2KGDB2 D6HlXIfoJxG2KbnyJ6H1VzAhjutoL3AQQg0+hjbUwqZ0+9pWGK2T9f2sAaGtJ6sOK7cFwDc5 yZcx6By+chUVfmweDqxrPLh9V1Dz9KMK3XijFFmBPHNHBz9qif4Lei8DNyTTXqF0/romxezP Sc/WisLvve/2UdGiocmC79d8+xwkcDd+S3ND5g4lOZmbJlrbxOg9ypzf0OW1G2FuBFyzv5mZ sjBLpv9XSdy5UFbIN2eHbp17FPW7npmmTO7qW7TknxLLoZylFbKEOxYYTNin8gy7b+eoRW9z jqsH5Li9vmra8WnOnO/2ddKfTg3wY0TWcieRzp/KrTSfWKL2QgJV5fs/F/WU9A6w/8Izr+Vp xlQmCZwkTLCuJEOEi3SAlgLVV8ldc8XQa4TVcD0AWuV5g== IronPort-HdrOrdr: A9a23:FZq3Zq6fLKauuWrWPwPXwM7XdLJyesId70hD6qhwISY7TiX+rb HIoB17726MtN9/YhAdcLy7VZVoBEmsl6KdgrNhWYtKPjOHhILAFugLhuHfKn/bakjDH4ZmpM FdmsNFZuEYY2IXsS+D2njaL+od X-IronPort-AV: E=Sophos;i="5.97,325,1669093200"; d="scan'208";a="98354844" From: Anthony PERARD To: CC: Andrew Cooper , Anthony PERARD , Doug Goldstein , "Stefano Stabellini" Subject: [XEN PATCH v3 3/4] automation: Remove expired root certificates used to be used by let's encrypt Date: Fri, 24 Feb 2023 17:29:14 +0000 Message-ID: <20230224172915.39675-4-anthony.perard@citrix.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20230224172915.39675-1-anthony.perard@citrix.com> References: <20230224172915.39675-1-anthony.perard@citrix.com> MIME-Version: 1.0 While the Let's Encrypt root certificate ISRG_Root_X1.crt is already present, openssl seems to still check for the root certificate DST_Root_CA_X3.crt which has expired. This prevent https connections. Removing DST_Root_CA_X3 fix the issue. Signed-off-by: Anthony PERARD --- Notes: v3: - remove change to Debian Jessie containers, as we won't use them with HTTPS urls. v2: - remove unneeded changes to CentOS containers automation/build/ubuntu/trusty.dockerfile | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/automation/build/ubuntu/trusty.dockerfile b/automation/build/ubuntu/trusty.dockerfile index b298a515c6..22e294c20c 100644 --- a/automation/build/ubuntu/trusty.dockerfile +++ b/automation/build/ubuntu/trusty.dockerfile @@ -47,3 +47,8 @@ RUN apt-get update && \ apt-get autoremove -y && \ apt-get clean && \ rm -rf /var/lib/apt/lists* /tmp/* /var/tmp/* + +# Remove expired certificate that Let's Encrypt certificates used to relie on. +# (Not needed anymore) +RUN sed -i 's#mozilla/DST_Root_CA_X3\.crt#!\0#' /etc/ca-certificates.conf && \ + update-ca-certificates From patchwork Fri Feb 24 17:29:15 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Anthony PERARD X-Patchwork-Id: 13151569 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id EF326C7EE23 for ; Fri, 24 Feb 2023 17:29:40 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.501343.773046 (Exim 4.92) (envelope-from ) id 1pVbsx-0000cQ-It; Fri, 24 Feb 2023 17:29:31 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 501343.773046; Fri, 24 Feb 2023 17:29:31 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbsx-0000cJ-Eg; Fri, 24 Feb 2023 17:29:31 +0000 Received: by outflank-mailman (input) for mailman id 501343; Fri, 24 Feb 2023 17:29:30 +0000 Received: from se1-gles-sth1-in.inumbo.com ([159.253.27.254] helo=se1-gles-sth1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1pVbsw-0008WD-IK for xen-devel@lists.xenproject.org; Fri, 24 Feb 2023 17:29:30 +0000 Received: from esa3.hc3370-68.iphmx.com (esa3.hc3370-68.iphmx.com [216.71.145.155]) by se1-gles-sth1.inumbo.com (Halon) with ESMTPS id ca4721db-b468-11ed-88bb-e56d68cac8db; Fri, 24 Feb 2023 18:29:29 +0100 (CET) X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: ca4721db-b468-11ed-88bb-e56d68cac8db DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=citrix.com; s=securemail; t=1677259769; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=vL1+kixkoAxqRCdE4M2Z2BxIpHTnvKCzyD7h58x79y8=; b=Ep+ljSti8Mf9h+4aAjrV9jqFiH1r7V7cdbvW+9G3fRphFhqCLL7bfB5C D9AXeNFDHK/8qD6YWMvUlu2kS0i1U+URpqdScXiWiezpWkuwWkHtRsx/P SZjWvageT+Se3XHdmbl/UTk7/guP6WKPXGrzK41Sl24MwDNY4XGhlfJEW o=; Authentication-Results: esa3.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none X-SBRS: 4.0 X-MesageID: 98447619 X-Ironport-Server: esa3.hc3370-68.iphmx.com X-Remote-IP: 162.221.156.123 X-Policy: $RELAYED IronPort-Data: A9a23:b8167KKB5VLYO1kfFE+R8pUlxSXFcZb7ZxGr2PjKsXjdYENSg2ECm mIYWD2CaK6OZTPzc91/Ptm19UkOu5fRyNRlG1FlqX01Q3x08seUXt7xwmUcnc+xBpaaEB84t ZV2hv3odp1coqr0/0/1WlTZhSAgk/rOHvykU7Ss1hlZHWdMUD0mhQ9oh9k3i4tphcnRKw6Ws Jb5rta31GWNglaYCUpJrfPcwP9TlK6q4mhA5AZiPasjUGL2zBH5MrpOfcldEFOgKmVkNrbSb /rOyri/4lTY838FYj9yuu+mGqGiaue60Tmm0hK6aYD76vRxjnVaPpIAHOgdcS9qZwChxLid/ jnvWauYEm/FNoWU8AgUvoIx/ytWZcWq85efSZSzXFD6I+QrvBIAzt03ZHzaM7H09c5OMH9Ty 78EJAwgcwibt+a84JCcCctj05FLwMnDZOvzu1llxDDdS/0nXYrCU+PB4towMDUY354UW6yEP oxANGQpNU6bC/FMEg5/5JYWleG0hn75YntApUicv6Yf6GnP1g1hlrPqNbI5f/TbFZkJwRjB9 woq+UzhCB86C/6i5gC71VPzntPpgyrLcaA7QejQGvlC3wTImz175ActfUu2p7y1h1CzX/pbK lcI4Ww+oK4q7kupQ9LhGRqirxastRcGV91dO+Yz8g2Kx+zf5APxLnMfUjdLZdgitck3bT8nz FmEm5XuHzMHjVGOYSvDrPHO92r0YHVLazZYPkfoUDfp/fHakZ8usFHTQupODbatvtn/ORPXg BKF+X1Wa6ooseYH0KCy/Fbiij2qp4TUQgNd2jg7Tl5J/SsiOtf7OtXABUzzqK8Zcd3HFgXpU G0swZD20QwYMX2aeMVhqs0pFarh2fuKOSa0bbVHT8h4rGTFF5JOkOltDNBCyKVBaJtsldzBO hW7VeZtCHh7bROXgVdfOd7ZNijQ8YDuFM7+StffZcdUb556eWevpX8xOhfPgDqyzRl8wMnT3 Kt3lu72UB4n5VlPlmLqF4/xL5d2rszB+Y8jbc+ilEn2uVZvTHWUVa0EIDOzghMRtcu5TPHu2 48HbaOikkwPONASlwGLqeY7N04RF3EnCPje8ooPHgJ1ClY8ST5J5j646e9JRrGJaIwJybuTo ynlBxYwJZiWrSSvFDhmo0tLMNvHNauTZ1phVcDwFT5EA0QeXLs= IronPort-HdrOrdr: A9a23:jRoZzKme+6NaJg1U6sX0NZsprLjpDfKX3DAbv31ZSRFFG/FwWf rOoB19726TtN9xYgBGpTnkAsO9qBznmKKdjbN8AV7mZniEhINHRLsSkbcKgAeQZhEXz4ZmpN hdmtFFeaPN5DpB7foSkTPId+rIm+P3iZxA7N22pxxQpENRGsNdBmFCZTpzeXcGITWua6BWKH O03Ls3mxOQPVoWc+WmDT0/U+DYodqjruOdXTc2QzAm9SiThneS5LT7ChiV2Qp2aUI1/Z4StU bEji3k7eGZv/u60x/R0HKWx5lag9f60LJ4dbyxo/lQBDXwqxqiIL5sXLCPp1kO0ZmS1Go= X-IronPort-AV: E=Sophos;i="5.97,325,1669093200"; d="scan'208";a="98447619" From: Anthony PERARD To: CC: Andrew Cooper , Anthony PERARD , Doug Goldstein , "Stefano Stabellini" Subject: [XEN PATCH v3 4/4] automation: Remove non-debug x86_32 build jobs Date: Fri, 24 Feb 2023 17:29:15 +0000 Message-ID: <20230224172915.39675-5-anthony.perard@citrix.com> X-Mailer: git-send-email 2.30.2 In-Reply-To: <20230224172915.39675-1-anthony.perard@citrix.com> References: <20230224172915.39675-1-anthony.perard@citrix.com> MIME-Version: 1.0 In the interest of having less jobs, we remove the x86_32 build jobs that do release build. Debug build is very likely to be enough to find 32bit build issues. Signed-off-by: Anthony PERARD --- Notes: v3: - new patch Proposed here: https://lore.kernel.org/r/7ec61260-0fec-25e2-6fa7-ec1d86e8067d@citrix.com automation/gitlab-ci/build.yaml | 20 -------------------- 1 file changed, 20 deletions(-) diff --git a/automation/gitlab-ci/build.yaml b/automation/gitlab-ci/build.yaml index 2be1b05d5c..a2891c5937 100644 --- a/automation/gitlab-ci/build.yaml +++ b/automation/gitlab-ci/build.yaml @@ -251,21 +251,11 @@ debian-stretch-gcc-debug: variables: CONTAINER: debian:stretch -debian-stretch-32-clang: - extends: .clang-x86-32-build - variables: - CONTAINER: debian:stretch-i386 - debian-stretch-32-clang-debug: extends: .clang-x86-32-build-debug variables: CONTAINER: debian:stretch-i386 -debian-stretch-32-gcc: - extends: .gcc-x86-32-build - variables: - CONTAINER: debian:stretch-i386 - debian-stretch-32-gcc-debug: extends: .gcc-x86-32-build-debug variables: @@ -311,21 +301,11 @@ debian-unstable-gcc-debug-randconfig: CONTAINER: debian:unstable RANDCONFIG: y -debian-unstable-32-clang: - extends: .clang-x86-32-build - variables: - CONTAINER: debian:unstable-i386 - debian-unstable-32-clang-debug: extends: .clang-x86-32-build-debug variables: CONTAINER: debian:unstable-i386 -debian-unstable-32-gcc: - extends: .gcc-x86-32-build - variables: - CONTAINER: debian:unstable-i386 - debian-unstable-32-gcc-debug: extends: .gcc-x86-32-build-debug variables: