[pull] master from bitnami:master - #38
Open
pull[bot] wants to merge 131 commits into
Open
Conversation
added 4 commits
June 20, 2022 11:07
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Update Debian versions
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Use buster for minideb snapshot
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Allow snapshot image to be different as the latest one
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Fix snapshot push and remove unused quay creds
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Don't build/publish minideb in GCR
Changed libvirt-bin to libvirt-daemon-system libvirt-clients as docmented in https://lists.debian.org/debian-user/2016/11/msg00518.html Signed-off-by: Bob Tanner <tanner@real-time.com>
WIP #129: Unable to build Minideb for ARM64 foreign architecture
Revert "WIP #129: Unable to build Minideb for ARM64 foreign architecture"
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
This should remove the need to install qemu from a non-LTS apt repo. Signed-off-by: Chris Banks <chris.banks@digital.cabinet-office.gov.uk>
Now that we can run GitHub Actions on Ubuntu 22.04 images, we no longer have to install qemu from a non-LTS Ubuntu repo in order to get these bugfixes: https://bugs.launchpad.net/qemu/+bug/1749393 https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1928075 Signed-off-by: Chris Banks <chris.banks@digital.cabinet-office.gov.uk>
Update CI runners to Ubuntu 22.04 and remove workaround for qemu.
…e team to review any (re)opened PR or issue Signed-off-by: Alejandro Gómez <morona@vmware.com>
Signed-off-by: Alejandro Gómez <morona@vmware.com>
[bitnami/**] Adding the ability to assign to a team member of the containers triage
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>
Remove logic to build and publish snapshot images
Bump actions/checkout version from v2 to v3
* Fix for podman usage The output of load command in docker and podman differs: - docker produces only one line of output the sha256 hash at 4th position - podman produces mulktiple lines of output with sha256 hash in the last line at third position This patch filters the line with hash and print the last argument, which is the hash. It works with docker and podman. Signed-off-by: flymarq <github@flynnux.de> * Add hints for building with podman Provide a simple command toi replace all relevant calls to docker with podman to enable a daemon less run. Signed-off-by: flymarq <github@flynnux.de> --------- Signed-off-by: flymarq <github@flynnux.de>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...330a01c) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: bitnami-bot <bitnami.bot@broadcom.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@08c6903...1af3b93) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/stale](https://github.com/actions/stale) from 10.1.0 to 10.1.1. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@5f858e3...9971854) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to 6.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@1af3b93...8e8c483) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: bitnami-bot <bitnami.bot@broadcom.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@330a01c...b7c566a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
It seems as though the `/usr/share/keyrings/debian-archive-keyring.gpg`
on Debian 13/trixie is actually a symlink to
`debian-archive-keyring.pgp` in the same directory. This means that the
`cp -a` in `mkimage` copies the symlink and not the actual keyring,
resulting in the following error:
E: specified keyring file (/<tmpdir>/debian-archive-keyring.gpg) not found
Using `cp -aL` ensures the file that is symlink source actually gets
copied.
Signed-off-by: John Kristensen <john@jerrykan.com>
Signed-off-by: bitnami-bot <bitnami.bot@broadcom.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update emoji for repo's alert ai-assisted=no Signed-off-by: David Gomez <david.gomez@broadcom.com>
Bumps [actions/stale](https://github.com/actions/stale) from 10.1.1 to 10.2.0. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@9971854...b5d41d4) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@b7c566a...bbbca2d) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: bitnami-bot <bitnami.bot@broadcom.com>
Signed-off-by: bitnami-bot <bitnami.bot@broadcom.com>
Remove logic to push image to AWS public ECR. More information [here](https://community.broadcom.com/tanzu/blogs/beltran-rueda-borrego/2026/05/20/important-update-transitioning-bitnami-offerings-o). Signed-off-by: Jota Martos <jota.martos@broadcom.com>
Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@b5d41d4...eb5cf3a) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...df4cb1c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/stale](https://github.com/actions/stale) from 10.3.0 to 10.4.0. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@eb5cf3a...1e223db) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@9c091bb...3d3c42e) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Move build and push operations to GitHub Enterprise to avoid storing credentials in the public repo. CI workflow has been updated to also trigger on pushes to master. Signed-off-by: Dan Goriaynov <dan.goriaynov@broadcom.com>
Bumps [actions/stale](https://github.com/actions/stale) from 10.4.0 to 11.0.0. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@1e223db...4391f3d) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: bitnami-bot <bitnami.bot@broadcom.com>
Summary - Replaces deprecated Docker Content Trust (Notary v1) signing logic with Cosign. - Modern Docker clients (26+) no longer support docker trust. - pushone, pushall, and pushmanifest now look for COSIGN_PRIVATE_KEY and COSIGN_PASSWORD environment variables to sign the pushed images via cosign sign. ai-assisted=yes
- Updates pushall to use DOCKER_REGISTRY and --password-stdin - Ensures all push scripts use the same authentication and tagging logic Signed-off-by: Dan Goriaynov <dan.goriaynov@broadcom.com>
…t hardcoding arm64 (#242) use_qemu_static (mkimage) and the equivalent QEMU-install/setup checks in `test` and .github/actions/build/action.yml only ever triggered QEMU when building arm64 on a non-arm64 host. Building amd64 on an arm64 host (e.g. the manual-push workaround run from an Apple Silicon machine) silently skipped `debootstrap --arch amd64` and produced a native arm64 rootfs mislabeled and pushed as amd64, causing "exec format error" on real amd64 hosts (#240, #241). Comparing the requested platform against `dpkg --print-architecture` makes the check symmetric for either cross-build direction. ai-assisted=no
Replace default-mysql-server with lighttpd in integration tests (#16) to avoid heavy database engine setup overhead during QEMU emulation. Batch the dpkg-query package dependency check into a single apt-get invocation rather than spawning apt-get 80+ times sequentially. ai-assisted=yes Signed-off-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com> Co-authored-by: Cursor <cursoragent@cursor.com>
#244) Debian 11 reached full end-of-life on 2026-08-31; security.debian.org is mid-decommissioning its bullseye archives (package index and pool already inconsistent), so daily builds started failing and will only get worse. Removes bullseye from the build matrix, buildall, README, and mkimage's per-dist apt source logic. The debootstrap/bullseye script was actually shared content for all three dists (bookworm and trixie were symlinks to it, not bullseye- specific), so it's renamed to debootstrap/common with both symlinks repointed, rather than deleted. Also removes pushall: unused by any workflow (the public repo's CI never pushed, and the actual publish pipeline in tac-toolbox calls pushone/pushmanifest directly), undocumented, and stale (missing trixie, wrong LATEST pointer). Ref: TNZ-144660 ai-assisted=yes Signed-off-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
19 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot]
Can you help keep this open source service alive? 💖 Please sponsor : )