Skip to content

Commit 85ebfd8

Browse files
devspacesbuilddevspacesbuild
committed
chore: [prodsec] Update product security manifests for 3.20.0
Signed-off-by: devspacesbuild <[email protected]>
1 parent 3485cd3 commit 85ebfd8

23 files changed

+26922
-0
lines changed

‎product/manifest/3.20.0/manifest-all.txt

+6,123
Large diffs are not rendered by default.

‎product/manifest/3.20.0/manifest-containers-base-images-only.txt

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
containers/devspaces-idea-rhel9-container:3.20.0/registry.redhat.io/ubi9:9.5-1742918310 as ubi-builder
2+
containers/devspaces-idea-rhel9-container:3.20.0/registry.redhat.io/ubi9-minimal:9.5-1742914212
3+
containers/devspaces-machineexec-rhel9-container:3.20.0/registry.redhat.io/ubi9/go-toolset:9.5-1742197705 as builder
4+
containers/devspaces-machineexec-rhel9-container:3.20.0/registry.redhat.io/ubi9-minimal:9.5-1741850109 as runtime
5+
containers/devspaces-operator-bundle-rhel9-container:3.20.0/scratch
6+
containers/devspaces-pluginregistry-rhel9-container:3.20.0/registry.redhat.io/rhel9-2-els/rhel:9.2-1535 as builder
7+
containers/devspaces-pluginregistry-rhel9-container:3.20.0/registry.redhat.io/rhel9-2-els/rhel:9.2-1535
8+
containers/devspaces-server-rhel9-container:3.20.0/registry.redhat.io/ubi9-minimal:9.5-1731593028

‎product/manifest/3.20.0/manifest-containers-binaries-extras.txt

+60
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
containers/devspaces-idea-rhel9-container:3.20.0/registry.redhat.io/ubi9:9.5-1742918310 as ubi-builder
2+
containers/devspaces-idea-rhel9-container:3.20.0/registry.redhat.io/ubi9-minimal:9.5-1742914212
3+
FROM registry.redhat.io/ubi9:9.5-1742918310 as ubi-builder
4+
COPY --chown=0:0 asset-required-rpms.txt /tmp/asset-required-rpms.txt
5+
RUN yum install unzip -y --nodocs && \
6+
yum install --installroot /mnt/rootfs \
7+
--releasever 9 --setopt install_weak_deps=false --nodocs -y && \
8+
yum --installroot /mnt/rootfs clean all
9+
RUN rm -rf /mnt/rootfs/var/cache/* /mnt/rootfs/var/log/dnf* /mnt/rootfs/var/log/yum.*
10+
COPY --chown=0:0 asset-ide-packaging.tar.gz .
11+
COPY --chown=0:0 asset-projector-server-assembly.zip .
12+
COPY --chown=0:0 asset-static-assembly.tar.gz .
13+
COPY --chown=0:0 asset-che-plugin-assembly.zip .
14+
COPY --chown=0:0 asset-machine-exec ide/bin/machine-exec
15+
FROM registry.redhat.io/ubi9-minimal:9.5-1742914212
16+
COPY --from=ubi-builder /mnt/rootfs/ /
17+
18+
containers/devspaces-machineexec-rhel9-container:3.20.0/registry.redhat.io/ubi9/go-toolset:9.5-1742197705 as builder
19+
containers/devspaces-machineexec-rhel9-container:3.20.0/registry.redhat.io/ubi9-minimal:9.5-1741850109 as runtime
20+
FROM registry.redhat.io/ubi9/go-toolset:9.5-1742197705 as builder
21+
COPY . .
22+
RUN adduser unprivilegeduser && \
23+
GOOS=linux go build -mod=vendor -a -ldflags '-w -s' -a -installsuffix cgo -o che-machine-exec . && \
24+
FROM registry.redhat.io/ubi9-minimal:9.5-1741850109 as runtime
25+
COPY --from=builder /rootfs /
26+
RUN microdnf install -y openssl && \
27+
28+
containers/devspaces-operator-bundle-rhel9-container:3.20.0/scratch
29+
FROM scratch
30+
COPY manifests /manifests/
31+
COPY metadata /metadata/
32+
33+
containers/devspaces-pluginregistry-rhel9-container:3.20.0/registry.redhat.io/rhel9-2-els/rhel:9.2-1535 as builder
34+
containers/devspaces-pluginregistry-rhel9-container:3.20.0/registry.redhat.io/rhel9-2-els/rhel:9.2-1535
35+
FROM registry.redhat.io/rhel9-2-els/rhel:9.2-1535 as builder
36+
RUN dnf install -y make
37+
RUN dnf module install -y nodejs:18/development
38+
COPY $REMOTE_SOURCES $REMOTE_SOURCES_DIR
39+
&& npm install \
40+
FROM registry.redhat.io/rhel9-2-els/rhel:9.2-1535
41+
COPY root-local.tgz /tmp/root-local.tgz
42+
COPY ./build/dockerfiles/content_sets_rhel9.repo /etc/yum.repos.d/
43+
COPY ./build/dockerfiles/rhel.install.sh /tmp
44+
RUN /tmp/rhel.install.sh && rm -f /tmp/rhel.install.sh
45+
dnf module install postgresql:15/server nodejs:18/development -y
46+
COPY --chown=0:0 /openvsx-server.tar.gz .
47+
COPY /build/dockerfiles/application.yaml /openvsx-server/config/
48+
COPY --from=builder --chown=0:0 /tmp/opt/ovsx /tmp/opt/ovsx
49+
COPY /build/scripts/import_vsix.sh /usr/local/bin
50+
COPY /build/scripts/start_services.sh /usr/local/bin/
51+
COPY /build/dockerfiles/openvsx.conf /etc/httpd/conf.d/
52+
COPY /build/scripts/*.sh /build/
53+
54+
containers/devspaces-server-rhel9-container:3.20.0/registry.redhat.io/ubi9-minimal:9.5-1731593028
55+
FROM registry.redhat.io/ubi9-minimal:9.5-1731593028
56+
RUN microdnf -y install java-17-openjdk-headless tar gzip shadow-utils findutils && \
57+
microdnf -y clean all && rm -rf /var/cache/yum && echo "Installed Packages" && rpm -qa | sort -V && echo "End Of Installed Packages" && \
58+
adduser -G root user && mkdir -p /home/user/devspaces
59+
COPY artifacts/assembly-main.tar.gz /tmp/assembly-main.tar.gz
60+

‎product/manifest/3.20.0/manifest.txt

+3,062
Large diffs are not rendered by default.

‎product/manifest/3.20.0/manifest_log.txt

+37
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
1a. Check out 3rd party language server dependencies builder repo (will collect variables later)
2+
3+
1b. Define list of upstream containers & RPMs pulled into them from https://pkgs.devel.redhat.com/cgit/?q=devspaces
4+
5+
== devspaces-idea (devspaces-3.20-rhel-9) ==
6+
7+
== devspaces-machineexec (devspaces-3.20-rhel-9) ==
8+
9+
== devspaces-operator-bundle (devspaces-3.20-rhel-9) ==
10+
11+
== devspaces-pluginregistry (devspaces-3.20-rhel-9) ==
12+
13+
== devspaces-server (devspaces-3.20-rhel-9) ==
14+
15+
Short container list (base images only): /mnt/hudson_workspace/workspace/DS_CI/Releng/get-3rd-party-deps-manifests/3.20.0/manifest-containers-base-images-only.txt
16+
Long container list (with dockerfile snippets): /mnt/hudson_workspace/workspace/DS_CI/Releng/get-3rd-party-deps-manifests/3.20.0/manifest-containers-binaries-extras.txt
17+
18+
1c. Other than the above, all artifacts used in Red Hat OpenShift Dev Spaces (formerly
19+
Red Hat CodeReady Workspaces) Workspaces are now built in RH Central CI Jenkins:
20+
https://main-jenkins-csb-crwqe.apps.ocp-c1.prod.psi.redhat.com/
21+
22+
See also latest build architecture diagram & development documentation:
23+
https://docs.google.com/presentation/d/1R9tr67pDMk3UVUbvN7vBJbJCYGlUsO2ZPcXbdaoOvTs/edit#slide=id.g4ac34a3cdd_0_0
24+
https://github.com/redhat-developer/devtools-productization/tree/main/codeready-workspaces
25+
26+
6. Collect RPM deps
27+
28+
7. Collect MVN deps
29+
30+
31+
8. Collect NPM deps
32+
33+
Short manifest is in file: /mnt/hudson_workspace/workspace/DS_CI/Releng/get-3rd-party-deps-manifests/3.20.0/manifest.txt
34+
Long log is in file: /mnt/hudson_workspace/workspace/DS_CI/Releng/get-3rd-party-deps-manifests/3.20.0/manifest_log.txt
35+
36+
Overall manifest is in file: /mnt/hudson_workspace/workspace/DS_CI/Releng/get-3rd-party-deps-manifests/3.20.0/manifest-all.txt
37+

‎product/manifest/3.20.0/mvn/che-dev_log.txt

+40
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
[INFO] Scanning for projects...
2+
[INFO] ------------------------------------------------------------------------
3+
[INFO] Reactor Build Order:
4+
[INFO]
5+
[INFO] Development Resources for Eclipse Che projects [pom]
6+
[INFO] Eclipse license codestyle [jar]
7+
[INFO] Che codestyle resources [jar]
8+
[INFO]
9+
[INFO] ------------< org.eclipse.che.dev:che-dev-resources-parent >------------
10+
[INFO] Building Development Resources for Eclipse Che projects 20 [1/3]
11+
[INFO] --------------------------------[ pom ]---------------------------------
12+
[INFO]
13+
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ che-dev-resources-parent ---
14+
[INFO] org.eclipse.che.dev:che-dev-resources-parent:pom:20
15+
[INFO]
16+
[INFO] ------< org.eclipse.che.dev:che-eclipse-license-resource-bundle >-------
17+
[INFO] Building Eclipse license codestyle 20 [2/3]
18+
[INFO] --------------------------------[ jar ]---------------------------------
19+
[INFO]
20+
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ che-eclipse-license-resource-bundle ---
21+
[INFO] org.eclipse.che.dev:che-eclipse-license-resource-bundle:jar:20
22+
[INFO]
23+
[INFO] -----------------< org.eclipse.che.dev:che-codestyle >------------------
24+
[INFO] Building Che codestyle resources 20 [3/3]
25+
[INFO] --------------------------------[ jar ]---------------------------------
26+
[INFO]
27+
[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ che-codestyle ---
28+
[INFO] org.eclipse.che.dev:che-codestyle:jar:20
29+
[INFO] ------------------------------------------------------------------------
30+
[INFO] Reactor Summary for Development Resources for Eclipse Che projects 20:
31+
[INFO]
32+
[INFO] Development Resources for Eclipse Che projects ..... SUCCESS [ 1.185 s]
33+
[INFO] Eclipse license codestyle .......................... SUCCESS [ 0.033 s]
34+
[INFO] Che codestyle resources ............................ SUCCESS [ 0.002 s]
35+
[INFO] ------------------------------------------------------------------------
36+
[INFO] BUILD SUCCESS
37+
[INFO] ------------------------------------------------------------------------
38+
[INFO] Total time: 1.490 s
39+
[INFO] Finished at: 2025-04-16T16:47:12-04:00
40+
[INFO] ------------------------------------------------------------------------

0 commit comments

Comments
 (0)