Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

percona-server-8.4/8.4.0.1 package update #30143

Merged
merged 4 commits into from
Oct 8, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Oct 6, 2024

The last part of the melange version number needs replaced with a dash before attempting a git clone. i.e 8.4.0.1 needs to be transformed back to 8.0.4-1. We had created 'vars.mangled-package-version' for this purpose, but we were not (yet) using it in the git clone. This addresses that. Additionally, expands the melange test coverage.

The CVEs look to be items we've recorded as false positives for percona-server v8.3 which we may need to copy over the advisories for - will do in separate PR.


Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Oct 6, 2024
Copy link
Contributor Author

octo-sts bot commented Oct 6, 2024

Open AI suggestions to solve the build error:

The error log indicates a failure in building the package "percona-server-8.4" with an exit status of 128. Here are some steps to address the issue:

1. **Check Build Logs**: Look into the detailed logs to understand why the exit status 128 occurred.
2. **Dependencies**: Ensure all necessary dependencies for the build are installed.
3. **Makefile Verification**: Verify the paths and targets in the Makefile are correct.
4. **Permissions**: Check the permissions in the workspace and guest directories to ensure they are set correctly.
5. **Manual Build**: Try running the build process manually to pinpoint the exact error.
6. **Package Updates**: Update any outdated packages that might be causing conflicts.
7. **Documentation**: Consult the Percona Server documentation for any specific build instructions or known issues.

These steps should help in diagnosing and resolving the build failure.

…ion'. Additionally, expands melange tests

Signed-off-by: Mark McCormick <mark.mccormick@chainguard.dev>
Copy link
Contributor

github-actions bot commented Oct 7, 2024

Package percona-server-8.4: Click to expand/collapse

Package percona-server-8.4:
Modified: /usr/bin/ldb
Modified: /usr/bin/sst_dump
Modified: /usr/lib/percona-server-8.4/plugin/ha_rocksdb.so
Modified: /usr/share/doc/percona-server-8.4/INFO_BIN
Modified: /usr/share/doc/percona-server-8.4/INFO_SRC

Package percona-server-8.4-dev: Click to expand/collapse

Package percona-server-8.4-dev:
Unchanged

Package percona-server-8.4-oci-entrypoint: Click to expand/collapse

Package percona-server-8.4-oci-entrypoint:
Unchanged

malcontent found differences: Click to expand/collapse

Deleted: percona-server-8.4/var/lib/db/sbom/percona-server-8.4-8.4.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/96933d7a3deebd5b2adae193e400

Deleted: percona-server-8.4-oci-entrypoint/var/lib/db/sbom/percona-server-8.4-oci-entrypoint-8.4.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/a7b15687e7efee82005e2d5f014d

Added: percona-server-8.4-oci-entrypoint/var/lib/db/sbom/percona-server-8.4-oci-entrypoint-8.4.0.1-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/8110bc6e0a7b6951386e1b7a81de

Changed: /tmp/wolfictl-apk-2090257076/percona-server-8.4/usr/bin/ps-admin

Changed: /tmp/wolfictl-apk-2090257076/percona-server-8.4/usr/bin/mysqld_safe

Changed: /tmp/wolfictl-apk-2090257076/percona-server-8.4/usr/bin/mysqld

Changed: /tmp/wolfictl-apk-2090257076/percona-server-8.4/usr/lib/percona-server-8.4/plugin/ha_rocksdb.so

Changed: /tmp/wolfictl-apk-2090257076/percona-server-8.4-dev/usr/include/kmip.h

Moved: percona-server-8.4-dev/var/lib/db/sbom/percona-server-8.4-dev-8.4.0-r0.spdx.json -> /tmp/wolfictl-apk-2090257076/percona-server-8.4/var/lib/db/sbom/percona-server-8.4-8.4.0.1-r0.spdx.json (similarity: 0.93)

Moved: percona-server-8.4-dev/var/lib/db/sbom/percona-server-8.4-dev-8.4.0-r0.spdx.json -> /tmp/wolfictl-apk-2090257076/percona-server-8.4-dev/var/lib/db/sbom/percona-server-8.4-dev-8.4.0.1-r0.spdx.json (similarity: 0.99)

Copy link
Contributor Author

octo-sts bot commented Oct 7, 2024

Open AI suggestions to solve the build error:

The error message indicates a warning about creating a MySQL root user with an empty password due to the use of the `--initialize-insecure` option. To resolve this, avoid using `--initialize-insecure` and instead use `mysqld --initialize` to set a secure root password. After initialization, ensure to set a strong password for the root user.

@octo-sts octo-sts bot added bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed labels Oct 7, 2024
Signed-off-by: Mark McCormick <mark.mccormick@chainguard.dev>
Copy link
Contributor Author

octo-sts bot commented Oct 7, 2024

Open AI suggestions to solve the build error:

The error log indicates that the MySQL server initialization failed because the data directory `/var/lib/mysql/` already contains files. To resolve this issue, you should:

1. Stop the MySQL server.
2. Backup any necessary data from `/var/lib/mysql/`.
3. Remove all files in `/var/lib/mysql/` using the command `rm -rf /var/lib/mysql/*`.
4. Re-run the initialization command.
5. Start the MySQL server again.

Signed-off-by: Mark McCormick <mark.mccormick@chainguard.dev>
Copy link
Contributor

github-actions bot commented Oct 8, 2024

Package percona-server-8.4: Click to expand/collapse

Package percona-server-8.4:
Modified: /usr/bin/ldb
Modified: /usr/bin/sst_dump
Modified: /usr/lib/percona-server-8.4/plugin/ha_rocksdb.so
Modified: /usr/share/doc/percona-server-8.4/INFO_BIN
Modified: /usr/share/doc/percona-server-8.4/INFO_SRC

Package percona-server-8.4-dev: Click to expand/collapse

Package percona-server-8.4-dev:
Unchanged

Package percona-server-8.4-oci-entrypoint: Click to expand/collapse

Package percona-server-8.4-oci-entrypoint:
Unchanged

malcontent found differences: Click to expand/collapse

Deleted: percona-server-8.4-oci-entrypoint/var/lib/db/sbom/percona-server-8.4-oci-entrypoint-8.4.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/a7b15687e7efee82005e2d5f014d

Deleted: percona-server-8.4/var/lib/db/sbom/percona-server-8.4-8.4.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/96933d7a3deebd5b2adae193e400

Added: percona-server-8.4-oci-entrypoint/var/lib/db/sbom/percona-server-8.4-oci-entrypoint-8.4.0.1-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/8110bc6e0a7b6951386e1b7a81de

Changed: /tmp/wolfictl-apk-404957323/percona-server-8.4/usr/lib/percona-server-8.4/plugin/ha_rocksdb.so

Changed: /tmp/wolfictl-apk-404957323/percona-server-8.4-dev/usr/include/kmip.h

Changed: /tmp/wolfictl-apk-404957323/percona-server-8.4/usr/bin/mysqld

Changed: /tmp/wolfictl-apk-404957323/percona-server-8.4/usr/bin/mysqld_safe

Changed: /tmp/wolfictl-apk-404957323/percona-server-8.4/usr/bin/ps-admin

Moved: percona-server-8.4-dev/var/lib/db/sbom/percona-server-8.4-dev-8.4.0-r0.spdx.json -> /tmp/wolfictl-apk-404957323/percona-server-8.4-dev/var/lib/db/sbom/percona-server-8.4-dev-8.4.0.1-r0.spdx.json (similarity: 0.99)

Moved: percona-server-8.4-dev/var/lib/db/sbom/percona-server-8.4-dev-8.4.0-r0.spdx.json -> /tmp/wolfictl-apk-404957323/percona-server-8.4/var/lib/db/sbom/percona-server-8.4-8.4.0.1-r0.spdx.json (similarity: 0.93)

Copy link
Contributor Author

octo-sts bot commented Oct 8, 2024

Open AI suggestions to solve the build error:

No error messages were found in the last 280 lines of the log file at `/tmp/script3206698495`.

@mamccorm mamccorm enabled auto-merge (squash) October 8, 2024 12:45
@mamccorm mamccorm merged commit f439b5d into main Oct 8, 2024
11 of 14 checks passed
@mamccorm mamccorm deleted the wolfictl-0e6edd2e-1c02-4d7d-94f8-55aa7ab50447 branch October 8, 2024 13:15
@mamccorm mamccorm self-assigned this Oct 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed request-version-update request for a newer version of a package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants