•  
      request #23451 Build the "additional" packages in the main build process
    Infos
    #23451
    Thomas Gerbet (tgerbet)
    2021-11-03 16:19
    2021-10-18 16:57
    24996
    Details
    Build the "additional" packages in the main build process

    Currently some packages are built and signed manually and then pushed to one of our CI server to be published.

    This is not great for multiple reasons:

    • this require a lot of manual operations that are not that obvious
    • from a supply chain POV building those packages outside of a script and a controlled environment come with risks
    • it is hard to know which version contains a fix made in one of the additional packages (especially for Tuleap Enterprise)

    The following packages are concerned:

    • [X] php-mediawiki-tuleap-123
    • [X] mediawiki-math-tuleap
    • [X] sha1collisiondetector
    • [~] cvs-tuleap/cvs-tuleap-debuginfo
    • [~] mailman-tuleap/mailman-tuleap-debuginfo
    • [X] viewvc-theme-tuleap
    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2021-11-03
    Attachments
    Empty
    References
    Referencing request #23451

    Git commit

    tuleap/deps/3rdparty/sha1collisiondetector

    Add possibility to set nixpkgs pin epoch in the release field master 66dc87cf8a

    tuleap/deps/3rdparty/viewvc-theme-tuleap

    Add possibility to set nixpkgs pin epoch in the release field master 2d3dc5b627

    tuleap/deps/tuleap/mediawiki-math-tuleap

    Add possibility to set nixpkgs pin epoch in the release field master b4a2ddae96

    tuleap/tools/release-manifest

    Drop "stable" pipeline master 4f90138bc6

    tuleap/tuleap/stable

    Build php-mediawiki-tuleap-123 package in the main build pipeline 45b9d4647b
    Make sure the additional packages can be rewritten 300d516f4d
    Build the mediawiki-math-tuleap package in the main build pipeline 7db3878de8
    Build the sha1collisiondetector package in the main build pipeline c09490b6cd
    Drop support of Mediawiki MLAB extensions 8b840790ce
    Add nixpkgs pinned commit date in the Release file of the RPMs 839bc18ce3
    Build the viewvc-theme-tuleap package in the main build pipeline b44bdfa17b
    Fetch the cvs-tuleap and mailman-tuleap packages into the main build pipeline 1b4b82a9f6
    Test that the repository build in the main build pipeline is self-sufficient 12c1115216
    Enable repository metadata GPG check 5d07ef4541

    tuleap/u/tgerbet/tools/release-manifest

    Drop "stable" pipeline 4f90138bc6

    Follow-ups

    User avatar
    Thomas Gerbet (tgerbet)2021-11-03 16:19

    Closing this. While we had to not rebuilt from scratch all the packages the initial objectives have been achieved.


    • Status changed from Under implementation to Closed
    • Close date set to 2021-11-03
    User avatar

    gerrit #24365 (Fetch the cvs-tuleap and mailman-tuleap packages into the main build pipeline) integrated in Tuleap 13.1.99.78


    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    User avatar

    gerrit #24339 (Build the sha1collisiondetector package in the main build pipeline) Integrated in Tuleap 13.1.99.52


    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes
    User avatar

    gerrit #24328 (Build the mediawiki-math-tuleap package in the main build pipeline) integrated in Tuleap 13.1.99.47


    • Original Submission
      Something went wrong, the follow up content couldn't be loaded
      Only formatting have been changed, you should switch to markup to see the changes