[19:35:26] cwhite: hi, should build that logstash-filter veirfier image for CI? https://gerrit.wikimedia.org/r/c/integration/config/+/755816 [19:35:39] and maybe we can run both images in parallel [19:40:18] hashar: I'm not sure by what you mean by run both images in parallel. Getting a built image into the repo would be great though. [19:40:27] I am not sure either :D [19:40:55] I'd like to pull it down and run it. We'll eventually want to use it in CI as well. [19:41:06] we could potentially have a job running with the image that uses 7.10 elasticsearch [19:41:21] and another job that use that new image and thus run with 7.16 from opensearch [19:41:30] so you might know that filters work with both versions [19:43:25] We're one step away from deploying 7.16 in production. For the verifier, maybe there is no need for 7.10. [19:44:00] 7.16 seems to be functional in beta so far. [19:46:04] great [19:46:15] and it failed to build [19:46:27] Hmmm... [19:46:57] https://www.irccloud.com/pastebin/kD3FcN8f/ [19:47:17] let me paste the build [19:48:09] https://phabricator.wikimedia.org/P19523 [19:48:31] looks like ca-certificates-java is unhappy [19:48:52] that sounds familiar [19:49:50] I suspect https://gerrit.wikimedia.org/r/plugins/gitiles/operations/docker-images/toollabs-images/+/refs/heads/master/jdk17-sssd/base/Dockerfile.template#6 is working around this exact bug [19:50:49] looks the same to me [19:51:03] oh gosh toollabs has its own docker build system ( https://gerrit.wikimedia.org/r/plugins/gitiles/operations/docker-images/toollabs-images/+/refs/heads/master/build.py ) :D [19:51:55] yeah I suspect that predates docker-pkg [19:52:03] the thing is the base image should have an option for dpkg to ignore creating the man pages [19:52:14] but looks like update-alternatives does not take that in account [19:52:32] afaik docker-pkg is deployed via scap and no-one has bothered to either package it as a deb or set up a scap master in tools yet [19:52:51] so yeah what taavi said `RUN mkdir -p /usr/share/man/man1` [19:52:56] since the current system Works Fine (at least for some definition of fine) [19:53:11] and add a comment refering to the update-alternatives issue due to openjdk [19:53:44] taavi: I have no complaint about that build.py , it looks like a simple well contained script [19:54:00] we can probably create a debian package for docker-pkg indeed [19:54:12] I am jumping in a meeting [19:54:47] cwhite: may you craft the ci config change and poke me once done? I will trigger the build while in the meeting [19:55:01] hashar: sure thing [19:57:00] I might want to remember about it to aks moritz about it [20:05:32] it seems hnowlan encountered this issue before: https://phabricator.wikimedia.org/P17082 [20:12:02] +2 ed the patch [20:17:52] Created https://phabricator.wikimedia.org/T300300 for this issue [20:21:42] building [20:21:53] ah thank you for the task! [20:22:15] I am sure one of our debian developers can sink some time in it :D [20:26:51] cwhite: Successfully published image docker-registry.discovery.wmnet/releng/logstash-filter-verifier:0.0.2 [20:27:28] \o/ thanks! [20:28:23] thank you taavi [20:30:29] I am off for the night [20:49:55] New verifier version works on my box. If not already configured for CI, it's probably good to go. [20:59:43] cwhite: ahh good [20:59:51] cwhite: want me to switch the ci job to it ? [21:00:32] hashar: Please do, when you're ready :) [21:03:05] cwhite: done! :) [21:03:55] Thanks again! [21:05:29] I am really off now. If something fails or need a rollback releng can assit :] [21:05:32] assist