-
Notifications
You must be signed in to change notification settings - Fork 242
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Converge cloudserver images #5716
base: development/9.0
Are you sure you want to change the base?
Conversation
Hello francoisferrand,My role is to assist you with the merge of this Available options
Available commands
Status report is not available. |
Waiting for approvalThe following approvals are needed before I can proceed with the merge:
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
✅ All tests successful. No failed tests found. Additional details and impacted files@@ Coverage Diff @@
## development/9.0 #5716 +/- ##
================================================
Coverage 60.55% 60.55%
================================================
Files 185 185
Lines 11617 11617
================================================
Hits 7035 7035
Misses 4582 4582
Flags with carried forward coverage won't be shown. Click here to find out more. |
Benefit is to avoid duplicating image, make sure we actually run the build we tested, and reduce dependency on federation. Additionally, switched to `ochinchina/supervisord`, so we can fully remove the python dependency and reduce image size. Differences are very few: - Run as `scality` user - Run supervisord as entrypoint Issue: CLDSRV-597
Remove redundant shell command (implicit from using shell form of `CMD`) and use exec to run supervisord. Issue: CLDSRV-597
6f7f399
to
1114fa3
Compare
Build federation image as additional layers on top of "standard" cloudserver image, to avoid duplication and ensure the image we tested is used in production.
There are still some differences at the moment (e.g. name of user, path) which should be further converged to minimize differences, may be done over time after considering all things.
This allows us to fully control (and minimize) what gets into the image, relying on any official node image. Also, now switch from python-based supervisord to a golang reimplementation [1], to minimize dependencies and CVEs.
Finally, took the change to fix startup command of the image, to ensure it properly propagates OS signals.
[1] ochinchina/supervisord
Issue: CLDSRV-597