TingYao Huang created YUNIKORN-3466:
---------------------------------------
Summary: Reproducible build fails under podman due to unqualified
golang image
Key: YUNIKORN-3466
URL: https://issues.apache.org/jira/browse/YUNIKORN-3466
Project: Apache YuniKorn
Issue Type: Bug
Components: shim - kubernetes
Reporter: TingYao Huang
Assignee: weichen lai
h3. Problem
The reproducible build path in the k8shim Makefile runs a golang container
using an unqualified short name: {code} $(DOCKER) run -t --rm=true --volume
"$(DOCKER_BUILDROOT):/buildroot" \ "golang:$(GO_REPRO_VERSION)" sh -c "..."
{code} Docker's daemon transparently prepends "docker.io/library/" to
unqualified image names, so this has worked historically. Podman does not do
this: with short-name-mode=enforcing (the default on Fedora, RHEL, and recent
Ubuntu releases) and no TTY, short-name resolution fails and the build aborts.
h3. Why this surfaces now
The reproducible build path is only entered when REPRO=1. The existing
consumers do not set it: * {{make kind-e2e}} (covered by YUNIKORN-3441) uses
the non-repro branch, so podman support merged there without hitting this. *
However, {{build-image.py}} in yunikorn-release (YUNIKORN-3443) hard-codes
REPRODUCIBLE_BUILDS=1. Once that PR is merged, podman-based release builds will
always trigger this path and fail.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
