1203158 - Insert a "yum update" layer into the desktop-build docker image

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

The idea is that the desktop-build image is composed of:

 centos6 -- from RedHat (200M)
 centos6-builder -- lots of packages installed (1.2G)
 centos6-builder-upd -- yum update run on top of centos6-builder (small)
 desktop-build -- shell scripts to run tasks (negligible)

We can then apply new upstream updates by just bumping the version number on centos6-builder-upd.  Since there are very few updates for this ancient distro, the layer won't ever get very big, and it will be easy for devs with limited bandwidth to download them.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Attachment: MozReview Request: Bug 1203158: add a centos6-build-upd layer to include frequent yum updates; r?ted.mielczarek

Bug 1203158: add a centos6-build-upd layer to include frequent yum updates; r?ted.mielczarek

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

The new images are already pushed, by the way

Comment 3

[(not currently active) Ted Mielczarek]

Comment on attachment 8667954 [details]
MozReview Request: Bug 1203158: add a centos6-build-upd layer to include frequent yum updates; r?ted.mielczarek

https://reviewboard.mozilla.org/r/20863/#review18737

This additional non-determinism is going to make gps even sadder, but the base image is already non-deterministic.

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Right -- and this has the advantage of keeping us up to date with whatever patches are available from upstream.  There was a dev.build thread about this on which gps chimed in, but I'll add an r? to see if he anything else to add.

Comment 5

[Gregory Szorc [:gps]]

Comment on attachment 8667954 [details]
MozReview Request: Bug 1203158: add a centos6-build-upd layer to include frequent yum updates; r?ted.mielczarek

https://reviewboard.mozilla.org/r/20863/#review18753

Adding determinism to base image building will be a PITA. We're already not deterministic, so I don't think this change matters much. It does slightly increase our exposure to unwanted changes. But various people want us building with the latest versions of packages. So why not.

Comment 6

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/cfcf7111e5b1

Comment 7

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/cfcf7111e5b1