Commit Graph

60 Commits

Author SHA1 Message Date
Jingfang Liu 8c1630a774
Fix CVE-2022-2068 2022-07-06 11:49:56 -07:00
Tim Hockin 518b0d9baf Bring some Makefile cleanups from k/k 2022-07-03 16:51:20 -07:00
Tim Hockin 28951b5b2f Don't run apt-get in e2e build if we can avoid 2022-07-03 11:16:34 -07:00
Tim Hockin 54b207fe56 e2e: rebuild container less often 2022-07-03 11:16:34 -07:00
Kubernetes Prow Robot da0c0fae6b
Merge pull request #559 from thockin/v3-bump-build-go_1_18
v3: Bump build image to go 1.18
2022-07-02 13:07:24 -07:00
Tim Hockin 91ab6f2eee Bump build image to go 1.18 2022-07-02 11:05:07 -07:00
Your 5f59ea331d upgrade base image to address vulnerabilities 2022-07-02 11:03:19 -07:00
Tim Hockin 0f768cb436 Fix inconsistency with build dotfile names 2022-06-24 08:23:46 -07:00
Tim Hockin 9d813ba4a1 Fix Makefile to run tools on host OS/ARCH 2022-06-06 14:24:12 -07:00
Tim Hockin 2c8e4aff26 Only build test-tools when needed 2022-03-17 12:06:36 -07:00
Jingfang Liu 4622c69235 update the base image to fix vulnerabilities
It fixes the critical vulnerabilities: CVE-2021-45960
2022-03-10 16:18:56 -08:00
Tim Hockin a2f4f2446e Bump go to 1.17 2022-01-28 20:05:50 -08:00
Adrian McCague d1a773f818
Update Makefile
Use the latest promoted debian base image: https://github.com/kubernetes/k8s.io/pull/2256

Overcomes 2 critical vulnerabilities:
* https://nvd.nist.gov/vuln/detail/CVE-2021-20231
* https://nvd.nist.gov/vuln/detail/CVE-2021-20232

My organisation cares about published and fixed vulnerabilities and we use this tool extensively, thank you for it :)
2021-06-30 13:37:04 +01:00
Tim Hockin e92d277745 Makefile: plain output when building container 2021-05-27 09:58:01 -07:00
Tim Hockin e9a9d91601 Fix licenses for other arch'es 2021-04-16 08:22:00 -07:00
Adrian McCague a07a87e0e6
Update to latest base image
Uses to the latest promoted debian base image: https://github.com/kubernetes/k8s.io/pull/1891

Overcomes two published vulnerabilities:
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24032
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24031

My organisation cares about published and fixed vulnerabilities and we use this tool extensively.
2021-04-15 00:05:06 +01:00
Tim Hockin 258248aadc Copy all licenses into the container image 2021-03-29 16:41:57 -07:00
Tim Hockin 68f8497ad5 Don't require a TTY to build/test 2021-03-17 21:59:39 -07:00
Tim Hockin 1f1e2369b1 Build container without cache 2021-03-11 19:26:53 -08:00
Tim Hockin 05a099a964 Update debian base and golang images 2021-02-12 11:39:09 -08:00
Tim Hockin a524d5eacd Use docker to run helper servers in e2e
Reliably cleaning up leftover things like nc processes is surprisingly
difficult in pure shell. e2e passes on the 3.x branch now.
2021-01-23 15:56:08 -08:00
Tim Hockin 7d89f343be Use new staging GCR 2020-09-07 17:28:57 -07:00
Tim Hockin 8f87fd8397 Fix multi-arch build support
Buildx seems to do what we need.
2020-09-04 23:01:45 -07:00
Tim Hockin 7b25906ff7 Build updates
Move to go 1.14

Explicitly apt-get update when building
2020-05-01 14:22:06 -07:00
Tim Hockin ef8f5cf703 Bump to debian-base 2.0.0 (buster)
This changed `git fetch` to require a `-f` the way we use it.

Also fix a flaky test case for SSH.
2020-01-31 09:20:54 -08:00
Tim Hockin 1a1dd1cbe0 e2e: Add test for SSH
This requires having a docker image for git-over-ssh.
2020-01-07 08:25:36 -08:00
Tim Hockin 4f9273b91c Bump Go to 1.13 2019-11-21 08:39:08 -08:00
Tim Hockin 42e6d691fa Fix multi-platform build in Makefile 2019-07-26 14:08:27 -07:00
Sandy Jensen 22b8036ab8 Rebase against more recent k8s.gcr.io/debian-base image.
This addresses several high-severity vulnerabilities that have been fixed:

CVE-2016-9841
CVE-2016-9843
CVE-2017-15670
CVE-2017-15804
CVE-2017-16997
CVE-2017-18269
CVE-2017-1000408
CVE-2018-11236
CVE-2018-20843
CVE-2019-3855
2019-07-26 11:16:30 -07:00
Tim Hockin 15d53f3b99 Simplify for Go modules 2019-03-25 08:54:44 -07:00
Tim Hockin 59af7bf5a8 Bump go to 1.12 2019-03-25 08:54:44 -07:00
Tim Hockin 653bd85fc6 Use debian-base as base image
All of the main Kubernetes components are switching to it, since we can
maintain it more easily.
2019-03-11 17:16:53 -07:00
Tim Hockin f7546fc17f Fix bad perms on make 2019-02-01 08:23:54 -08:00
Tim Hockin dbfa625b4e Sync to latest go-build-template Makefile 2019-01-28 11:42:28 -08:00
Tim Hockin 1c374dab1f Update Makefile to not repeat build when possible 2019-01-28 10:53:16 -08:00
Tim Hockin 497c7df123 Clean up / document build and release
In writing better RELEASING docs, I realized the build was repeating
steps.  In fixing that I fixed some make deps, but realized I *still*
can't make the build ideal.

At least it is written down now...
2019-01-25 10:45:09 -08:00
chris060986 e37fa08e74 Fix docker build arg for https proxy 2019-01-23 07:35:13 +01:00
chris060986 59f5554348 Fix intention of makefile 2019-01-16 09:15:34 +01:00
chris060986 ea7c288dc3 Add proxy support to build 2018-12-20 14:41:06 +01:00
Tim Hockin ada75e9c6c Build a manifest list
Retool some of the build/test to produce a manifest-list rather than a
single image.
2018-11-09 14:20:23 -08:00
Tim Hockin 76bda81e0f bump go to 1.11 2018-11-09 10:20:30 -08:00
Tim Hockin 44c11c4390 Update alpine and golang images 2018-07-03 15:00:11 -07:00
Sebastian Mandrean 86b15b1c2a Run Go build-image without TTY 2018-03-29 20:55:21 -07:00
Tim Hockin 802aa4604d add -- to gcloud CLI 2018-02-06 21:19:43 -08:00
Tim Hockin 2e07112602 Pushes go to staging-k8s.gcr.io 2018-01-17 14:20:38 -08:00
jorianvo 517179fa2f Improve e2e tests
Change the use of pkill with 'docker rm' as this will work more reliably (at least on MacOS). Trap the EXIT signal so we can perform a clean-up even if a test fails, so we don't pollute the system with a bunch of stopped containers. Increase the timeout from two to three seconds in order for the tests to work reliably on MacOS (the two second waiting period was consistenly to short for all tests to work). Update the Makefile so when we run the container in order to compile the package we make sure the (stopped) container is removed.
2017-09-21 22:02:13 +02:00
Tim Hockin c90faaee2d Update to golang-1.9 2017-09-15 10:25:48 -07:00
Michael Grosser cb9851e1b5 Revert "Update copyright notice"
This reverts commit b647219b69.
2017-03-22 04:25:39 +00:00
Michael Grosser b647219b69 Update copyright notice 2017-03-22 04:23:08 +00:00
TerraTech 26c5a26565 Makefile: Fix bashism when building on Ubuntu + dash
Reference: https://wiki.ubuntu.com/DashAsBinSh#A.5B

 Ubuntu's /bin/sh is /bin/dash and '==' triggers an error:
 >> /bin/sh: 1: [: amd64: unexpected operator
2016-11-13 09:05:10 -05:00