1429670 - Build docker images based on Debian wheezy to replace the Centos-based desktop-build image

Status: RESOLVED FIXED

(Firefox Build System :: Task Configuration, task)

Comment 1

[Mike Hommey [:glandium]]

Attachment: Bug 1429670 - Build docker images based on Debian wheezy to use instead of desktop-build.

At the same time, restrict the installed packages to the script
requirements to build Firefox. Toolchains have their own image so we
don't need to install packages for them.

Review commit: https://reviewboard.mozilla.org/r/212676/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/212676/

Comment 2

[Gregory Szorc [:gps]]

Comment on attachment 8942390 [details]
Bug 1429670 - Build docker images based on Debian wheezy to use instead of desktop-build.

https://reviewboard.mozilla.org/r/212676/#review218374

I'll want to perform an audit of this image when we throw the switch to move off desktop-build. But there shouldn't be any problem just introducing this image into the world.

::: taskcluster/docker/debian7-build/Dockerfile:6
(Diff revision 1)
> +    groupadd -g 500 worker && \
> +    useradd -u 500 -g 500 -d /builds/worker -s /bin/bash -m worker && \

I thought we were going to standardize on uid/gid 1000 going forward?

It's an annoying backwards incompatible change to make. But if you change run-task in the commit that switches all CentOS images to Debian, the hash component of the cache name will change and it will be safe. This could be done as a follow-up of course. Probably easier that way...

Comment 3

[Mike Hommey [:glandium]]

AIUI, we can't change it until all images can change, so we might as well wait until we're off desktop-build.

Comment 4

[Cristina Coroiu [:ccoroiu]]

https://hg.mozilla.org/mozilla-central/rev/c51cdba4c57d