Bug 1862114: bump RHCOS images for CVE-2020-10713 #3987
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
openshift-ci-robot
added
bugzilla/severity-medium
|
@miabbott: This pull request references Bugzilla bug 1862114, which is invalid:
Comment In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
|
This update also includes RHEL 8.2 |
|
/hold While we've tested that booting this RHCOS version via qemu using Secure Boot is successful, there are reports of problems booting with the grub2 mitigation in place - https://bugzilla.redhat.com/show_bug.cgi?id=1861977 I'm going to tentatively hold this until we have more confidence |
openshift-ci-robot
added
the
do-not-merge/hold
The mitigation path for OCP customers is to reprovision nodes, so we should bump the boot images on the installer as well.
|
/unhold The latest RHCOS builds include the fixed Notably we also get a new |
openshift-ci-robot
removed
the
do-not-merge/hold
|
/retest |
|
/retest
|
|
Interestingly, I was able to get cluster-bot to do Though that looks like it didn't actually test the upgrade path.... 🤔 |
|
/test e2e-azure |
|
@abhinavdahiya @sdodson The final boot image bump in the series for Boot Hole. |
sdodson
added
bugzilla/valid-bug
|
/retest openstack, gcp, metal, azure, vsphere failed during build of the installer with:
|
|
/test e2e-azure |
|
/test e2e-gcp |
|
CI registry flakes everywhere |
|
/test e2e-gcp |
|
/bugzilla refresh |
openshift-ci-robot
removed
the
bugzilla/valid-bug
|
@miabbott: This pull request references Bugzilla bug 1862114, which is invalid:
Comment In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
@sdodson: This pull request references Bugzilla bug 1862114, which is valid. The bug has been moved to the POST state. The bug has been updated to refer to the pull request using the external bug tracker. 6 validation(s) were run on this bug
In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
openshift-ci-robot
added
bugzilla/valid-bug
|
@sdodson Understood. This bump brings in RHEL 8.2 as well as the mitigations for Boot Hole CVE. We are using the same RHEL 8.2 content in 4.5 + 4.4, so it is puzzling why the tests are failing in this branch. |
|
In the |
|
|
|
|
|
For the
|
|
/test e2e-aws |
|
Opened a dummy PR to see if similar failures are observed - #4035 |
|
Well, the dummy PR (#4035) is failing some of the same tests as this PR, but in different ways. We continue to see golang panics/stacks in |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: sdodson The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-ci-robot
added
lgtm
sdodson
added
the
cherry-pick-approved
|
/retest Please review the full test history for this PR and help us cut down flakes. |
7 similar comments
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
@miabbott: The following test failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
@miabbott: All pull requests linked via external trackers have merged: openshift/installer#3987. Bugzilla bug 1862114 has been moved to the MODIFIED state. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The mitigation path for OCP customers is to reprovision nodes, so we
should bump the boot images on the installer as well.