potiuk edited a comment on pull request #11903: URL: https://github.com/apache/airflow/pull/11903#issuecomment-717899114
@turbaszek -> here the problem is slightly more complex. Explanation: when we build the image we replace all the "scripts/ci" scripts with the master scripts for security reasons (those scripts are running with WRITE token). In old version of the image we used the entrypoint scripts that were in that "ci" folder but those scripts should actually come from the PR so they needed to be moved outside. This is already done in master and cherry-picked to v1-10-test but not yet in stable. What you need to do is two things: 1) In Dockerfile.ci: * move `scripts/ci/in_container/entrypoint_ci.sh` to `scripts/in_container/` * replace the failing COPY line in `Dockerfile.ci` with ``` COPY scripts/in_container/entrypoint_ci.sh /entrypoint ``` UPDATE! -> I think the below change is not needed. It should work without it because 1-10-stable uses `scripts/docker` and not `scripts/ci` ~2) In Dockerfile~ ~* move `scripts/ci/in_container/entrypoint_prod.sh` and `scripts/in_container/clean-logs.sh`, to `scripts/in_container/prod`~ ~* Replace the two lines in `Dockerfile` to:~ ``` COPY --chown=airflow:root scripts/in_container/prod/entrypoint_prod.sh /entrypoint COPY --chown=airflow:root scripts/in_container/prod/clean-logs.sh /clean-logs ``` That should fix the current failure. Sorry for that, but the opitimization of workflow_run and keeping it secure makes it rather difficult to avoid such problems from time to time. It's just bad timing. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
