Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding VersionStream for gitlab-runner-17.7 #38369

Merged
merged 3 commits into from
Dec 30, 2024
Merged

Adding VersionStream for gitlab-runner-17.7 #38369

merged 3 commits into from
Dec 30, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Dec 26, 2024

No description provided.

Copy link
Contributor Author

octo-sts bot commented Dec 26, 2024

Gen AI suggestions to solve the build error:

• Detected Error: "Expected commit 374d34fda25904c34e29770b2027cef3c2cebc21 for v17.7.0, found 3153ccc6dafba6dd4aef53cd2261ebcc996f5caa"

• Error Category: Version/Commit

• Failure Point: Git checkout step in pipeline

• Root Cause Analysis: The expected commit hash in the melange YAML doesn't match the actual commit hash for the tag v17.7.0 in the GitLab runner repository

• Suggested Fix: Update the expected-commit hash in the git-checkout step:

  - uses: git-checkout
    with:
      repository: https://gitlab.com/gitlab-org/gitlab-runner
      tag: v${{package.version}}
      expected-commit: 3153ccc6dafba6dd4aef53cd2261ebcc996f5caa

• Explanation: The build is failing because Melange's security check requires the commit hash to match exactly. The current hash in the YAML (374d34f...) is incorrect for v17.7.0. The actual commit hash for this tag is 3153ccc6dafba6dd4aef53cd2261ebcc996f5caa.

• Additional Notes:

  • This is a security feature of Melange to ensure reproducible builds
  • You can verify the correct commit hash using:
    git ls-remote https://gitlab.com/gitlab-org/gitlab-runner refs/tags/v17.7.0
  • Always verify commit hashes when updating package versions

• References:

Signed-off-by: Jason Hall <jason@chainguard.dev>
@imjasonh imjasonh enabled auto-merge (squash) December 30, 2024 18:44
@octo-sts octo-sts bot added the bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. label Dec 30, 2024
@imjasonh imjasonh merged commit 2ce1957 into main Dec 30, 2024
13 of 14 checks passed
@imjasonh imjasonh deleted the gitlab-runner-17.7 branch December 30, 2024 18:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. service:version-stream
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants