[go: nahoru, domu]

Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pin dependencies in docker file. #97466

Merged
merged 4 commits into from
Feb 1, 2022
Merged

Conversation

godofredoc
Copy link
Contributor

The docker file had two dependencies that were not locked. An npm
dependency and the debian base image. This PR pins those two
dependencies.

Pre-launch Checklist

  • I read the Contributor Guide and followed the process outlined there for submitting PRs.
  • I read the Tree Hygiene wiki page, which explains my responsibilities.
  • I read and followed the Flutter Style Guide, including Features we expect every widget to implement.
  • I signed the CLA.
  • I listed at least one issue that this PR fixes in the description above.
  • I updated/added relevant documentation (doc comments with ///).
  • I added new tests to check the change I am making, or this PR is test-exempt.
  • All existing and new tests are passing.

If you need help, consider asking for advice on the #hackers-new channel on Discord.

@flutter-dashboard flutter-dashboard bot added the team Infra upgrades, team productivity, code health, technical debt. See also team: labels. label Jan 29, 2022
@flutter-dashboard
Copy link

It looks like this pull request may not have tests. Please make sure to add tests before merging. If you need an exemption to this rule, contact Hixie on the #hackers channel in Chat.

If you are not sure if you need tests, consider this rule of thumb: the purpose of a test is to make sure someone doesn't accidentally revert the fix. Ask yourself, is there anything in your PR that you feel it is important we not accidentally revert back to how it was before your fix?

Reviewers: Read the Tree Hygiene page and make sure this patch meets those guidelines before LGTMing.

@godofredoc godofredoc requested a review from Hixie January 29, 2022 02:23
@christopherfujino
Copy link
Member

I don't think pinning the image to an exact sha makes much difference since we're running an apt-get update && apt-get upgrade right after. Also, I think that pinning exact OS dependencies without also autorolling them would be a net negative security wise, as we wouldn't get routine security backports, for example to openSSL.

@godofredoc
Copy link
Contributor Author

I don't think pinning the image to an exact sha makes much difference since we're running an apt-get update && apt-get upgrade right after. Also, I think that pinning exact OS dependencies without also autorolling them would be a net negative security wise, as we wouldn't get routine security backports, for example to openSSL.

A follow up PR will enable dependabot for Dockerfiles. Ideally dependabot will be the roller for the dependencies and the updates will force to regenerate the containers with the latest changes.

@christopherfujino
Copy link
Member

I don't think pinning the image to an exact sha makes much difference since we're running an apt-get update && apt-get upgrade right after. Also, I think that pinning exact OS dependencies without also autorolling them would be a net negative security wise, as we wouldn't get routine security backports, for example to openSSL.

A follow up PR will enable dependabot for Dockerfiles. Ideally dependabot will be the roller for the dependencies and the updates will force to regenerate the containers with the latest changes.

nice

@@ -18,7 +18,7 @@ gcp_credentials: ENCRYPTED[!cc769765170bebc37e0556e2da5915ca64ee37f4ec8c966ec147
task:
gke_container:
dockerfile: "dev/ci/docker_linux/Dockerfile"
builder_image_name: docker-builder # gce vm image
builder_image_name: docker-builder-linux # gce vm image
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

was this changed in the GCE config?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, we created a new images and configurations to increase the disk size to 100GB the previous image with 10GB was running out of space.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sounds good

Copy link
Member
@christopherfujino christopherfujino left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

The docker file had two dependencies that were not locked. An npm
dependency and the debian base image. This PR pins those two
dependencies.
@godofredoc godofredoc merged commit 29fd046 into flutter:master Feb 1, 2022
@godofredoc godofredoc deleted the pin_docker_deps branch February 1, 2022 02:06
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Feb 1, 2022
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Feb 1, 2022
engine-flutter-autoroll added a commit to engine-flutter-autoroll/plugins that referenced this pull request Feb 4, 2022
NATHANIELCROSBY1 added a commit to NATHANIELCROSBY1/flutter that referenced this pull request Feb 19, 2022
@NATHANIELCROSBY1
NATHANIELCROSBY1 create
…
609e127
13 days ago
Git stats
 27,477 commits
Files
Type
Name
Latest commit message
Commit time
.github
Bump github/codeql-action from 1.0.26 to 1.0.31 (flutter#97820)
14 days ago
bin
Roll Engine from 2a4709a to 0712096 (1 revision) (flutter#9…
13 days ago
dev
Include -isysroot -arch and -miphoneos-version-min when creating dumm…
15 days ago
examples
Clean up the bindings APIs. (flutter#89451)
16 days ago
packages
Report progress on Dismissible update callback (flutter#95504)
14 days ago
.ci.yaml
Marks Linux_android opacity_peephole_fade_transition_text_perf__e2e_s…
15 days ago
.cirrus.yml
Pin dependencies in docker file. (flutter#97466)
18 days ago
.gitattributes
Add pre-stable support for create on Windows (flutter#51895)
2 years ago
.gitignore
Add macOS ephemeral to gitignore (flutter#96397)
20 days ago
AUTHORS
Mirror before scaling in _AnimatedIconPainter (flutter#93312)
24 days ago
CODEOWNERS
[codeowners] Remove *_builders.json ownership (flutter#91691)
4 months ago
CODE_OF_CONDUCT.md
Update CODE_OF_CONDUCT.md (flutter#94583)
3 months ago
CONTRIBUTING.md
Links How to contribute to Flutter YouTube video (flutter#96313)
last month
LICENSE
License update (flutter#45373)
2 years ago
PATENT_GRANT
Rename patent file (flutter#38686)
3 years ago
README.md
Update README (flutter#97271)
24 days ago
TESTOWNERS
Add benchmarks to measure impact of alpha saveLayers in DisplayLists (f…
23 days ago
analysis_options.yaml
Enable no_leading_underscores_for_local_identifiers (flutter#96422)
29 days ago
dartdoc_options.yaml
Eliminate uses of pub executable in docs publishing and sample analys…
6 months ago
flutter_console.bat
License update (flutter#45373)
2 years ago
git clone
create
13 days ago
README.md
Flutter logo
Build Status - Cirrus Discord badge Twitter handle

Flutter is Google's SDK for crafting beautiful, fast user experiences for mobile, web, and desktop from a single codebase. Flutter works with existing code, is used by developers and organizations around the world, and is free and open source.

Documentation
Install Flutter
Flutter documentation
Development wiki
Contributing to Flutter
For announcements about new releases, follow the flutter-announce@googlegroups.com mailing list. Our documentation also tracks breaking changes across releases.

Terms of service
The Flutter tool may occasionally download resources from Google servers. By downloading or using the Flutter SDK you agree to the Google Terms of Service: https://policies.google.com/terms

For example, when installed from GitHub (as opposed to from a prepackaged archive), the Flutter tool will download the Dart SDK from Google servers immediately when first run, as it is used to execute the flutter tool itself. This will also occur when Flutter is upgraded (e.g. by running the flutter upgrade command).

About Flutter
We think Flutter will help you create beautiful, fast apps, with a productive, extensible and open development model, whether you're targeting iOS or Android, web, Windows, macOS, Linux or embedding it as the UI toolkit for a platform of your choice.

Beautiful user experiences
We want to enable designers to deliver their full creative vision without being forced to water it down due to limitations of the underlying framework. Flutter's layered architecture gives you control over every pixel on the screen and its powerful compositing capabilities let you overlay and animate graphics, video, text, and controls without limitation. Flutter includes a full set of widgets that deliver pixel-perfect experiences whether you're building for iOS (Cupertino) or Android (Material), along with support for customizing or creating entirely new visual components.

Reflectly hero image

Fast results
Flutter is fast. It's powered by the same hardware-accelerated 2D graphics library that underpins Chrome and Android: Skia. We architected Flutter to support glitch-free, jank-free graphics at the native speed of your device. Flutter code is powered by the world-class Dart platform, which enables compilation to 32-bit and 64-bit ARM machine code for iOS and Android, as well as JavaScript for the web and Intel x64 for desktop devices.

Dart diagram

Productive development
Flutter offers stateful hot reload, allowing you to make changes to your code and see the results instantly without restarting your app or losing its state.

Hot reload animation

Extensible and open model
Flutter works with any development tool (or none at all), and also includes editor plug-ins for both Visual Studio Code and IntelliJ / Android Studio. Flutter provides tens of thousands of packages to speed your development, regardless of your target platform. And accessing other native code is easy, with support for both FFI and platform-specific APIs.

Flutter is a fully open-source project, and we welcome contributions. Information on how to get started can be found in our contributor guide.
clocksmith pushed a commit to clocksmith/flutter that referenced this pull request Mar 8, 2022
* Pin dependencies in docker file.

The docker file had two dependencies that were not locked. An npm
dependency and the debian base image. This PR pins those two
dependencies.

* Use the slim version of debian image.

* Use image with bigger disk to build docker images.

* remove web_engine_tests from cirrus.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
team Infra upgrades, team productivity, code health, technical debt. See also team: labels.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants