Test/deploy SLES12 SP5 Dockerstatic container

[Haroon-Khel]

Experiment with testing and deploying SLES dockerstatic containers; 12 SP5 and 15

[Haroon-Khel]

SLES12:

• Base image found at registry.suse.com/suse/sles12sp5:latest
• YaST repo found at https://download.opensuse.org/repositories/YaST:/SLE-12:/SP5/SLE_12_SP4/
• No openSUSE devel repo (needed for most packages)

[Haroon-Khel]

SLES12:

• Found http://download.opensuse.org/distribution/12.3/repo/oss/ which should provide the packages from the devel repo, however the gpg key is expired

  Repository:       sles12oss                                           
  Key Name:         openSUSE Project Signing Key <[email protected]>
  Key Fingerprint:  22C07BA5 34178CD0 2EFE22AA B88B2FD4 3DBDC284        
  Key Created:      Wed May  5 15:01:33 2010                            
  Key Expires:      Sun May  4 15:01:33 2014 (EXPIRED)                  
  Rpm Name:         gpg-pubkey-3dbdc284-4be1884d  

[sxa]

FYI I have an s390x dockerhost system now available at 148.100.74.237 which we can set up and put some systems on. It only has eight cores so I don't want to load it up too heavily but it means we can start trying some test-docker systems on Linux/s390x now too.

[sxa]

We may have to just stick to the licensed "real" SLES systems for now sine they should have most of the tools in the default repositories. We could see if we can create an image from the opensuse repository at opensuse/leap

[Haroon-Khel]

I'll run the dockerhost playbook on the new SLES dockerhost system and see if I can setup a sles12 dockerstatic container on it

[Haroon-Khel]

ref #2696

Got a draft pr in for the dockerfiles required for sles 12 and 15. I've got a sles15 box running on the dockerhost 148.100.74.237 but I cannot get it to connect to jenkins. I think it might either be a firewall issue on the dockerhost or ssh isn't working correctly on the dockerstatic container https://ci.adoptopenjdk.net/computer/test-docker-sles15-s390x-1/

[Haroon-Khel]

We may have to just stick to the licensed "real" SLES systems for now sine they should have most of the tools in the default repositories. We could see if we can create an image from the opensuse repository at opensuse/leap

This should be fine for sles15 (opensuse/leap), but for sles 12 there are no default repos which come with the image:

root@dockerhost1:~# docker run -it registry.suse.com/suse/sles12sp5:latest
f269a48cb046:/ # zypper repos
Refreshing service 'container-suseconnect-zypp'.
Problem retrieving the repository index file for service 'container-suseconnect-zypp':
[container-suseconnect-zypp|file:/usr/lib/zypp/plugins/services/container-suseconnect-zypp] 
Warning: Skipping service 'container-suseconnect-zypp' because of the above error.
Warning: No repositories defined.
Use the 'zypper addrepo' command to add one or more repositories.

Haven't looked too deeply into what container-suseconnect-zypp is though, but I do not think it is a repo https://github.com/SUSE/container-suseconnect

[Haroon-Khel]

It is most definitely related to the fact that I can't get the ssh service to start using the same method as the other dockerstatic containers

a2ca5cf6e8b0:~ # service ssh start
service: no such service ssh

As suggested by most sles guides, i'm trying to use firewalld to enable ssh

a2ca5cf6e8b0:~ # firewall-cmd --add-service=ssh --zone=external --permanent
Warning: ALREADY_ENABLED: ssh
success

Yet ssh connections are still refused (the service still needs to be enabled)

The container is able to connect to jenkins via Launch agent by connecting it to the controller
https://ci.adoptopenjdk.net/computer/test-docker-sles15-s390x-1/
Running a sanity job on it https://ci.adoptopenjdk.net/view/Test_grinder/job/Grinder/5423/console

[sxa]

I'm a little nervous about using the SLES15 repo for SLES12 -do you know how many packages it needs to pull from there? Would be good to list them.

[Haroon-Khel]

cd3deaedf8f1:~ # zypper search -i -r sles15oss | awk '{split($0,a,"|"); print a[2]}'

 Name                    

 Mesa                    
 Mesa-dri                
 Mesa-libEGL1            
 Mesa-libGL1             
 Mesa-libglapi0          
 aaa_base                
 bash                    
 bash-sh                 
 binutils                
 boost-license1_66_0     
 ca-certificates         
 ca-certificates-mozilla 
 container-suseconnect   
 coreutils               
 cpio                    
 cpp                     
 cpp7                    
 cracklib                
 cracklib-dict-small     
 crypto-policies         
 curl                    
 diffutils               
 dirmngr                 
 fakeroot                
 file                    
 file-magic              
 filesystem              
 findutils               
 fontconfig              
 gawk                    
 gcc                     
 gcc7                    
 git                     
 git-core                
 glibc                   
 glibc-devel             
 gpg2                    
 grep                    
 gzip                    
 info                    
 krb5                    
 kubic-locale-archive    
 less                    
 libLLVM11               
 libX11-6                
 libX11-data             
 libX11-xcb1             
 libXau6                 
 libXdmcp6               
 libXext6                
 libXfixes3              
 libXfont2-2             
 libXi6                  
 libXrender1             
 libXtst6                
 libXxf86vm1             
 libadns1                
 libasan4                
 libassuan0              
 libatomic1              
 libaudit1               
 libaugeas0              
 libblkid1               
 libboost_system1_66_0   
 libboost_thread1_66_0   
 libbrotlicommon1        
 libbrotlidec1           
 libbz2-1                
 libcap-ng0              
 libcap2                 
 libcares2               
 libcbor0                
 libcom_err2             
 libcrack2               
 libcrypt1               
 libctf-nobfd0           
 libctf0                 
 libcurl4                
 libdbus-1-3             
 libdrm2                 
 libdw1                  
 libebl-plugins          
 libeconf0               
 libedit0                
 libelf1                 
 libepoxy0               
 libexpat1               
 libfdisk1               
 libffi7                 
 libfido2-1              
 libfido2-udev           
 libfontconfig1          
 libfontenc1             
 libfreetype6            
 libgbm1                 
 libgcrypt20             
 libgdbm4                
 libglib-2_0-0           
 libglvnd                
 libgmp10                
 libgnutls30             
 libgomp1                
 libgpg-error0           
 libgpgme11              
 libhogweed6             
 libidn2-0               
 libisl15                
 libitm1                 
 libkeyutils1            
 libksba8                
 libldap-2_4-2           
 libldap-data            
 liblua5_3-5             
 liblz4-1                
 liblzma5                
 libmagic1               
 libmetalink3            
 libmount1               
 libmpc3                 
 libmpfr6                
 libncurses5             
 libncurses6             
 libnettle8              
 libnghttp2-14           
 libnpth0                
 libnsl2                 
 libopenssl1_1           
 libp11-kit0             
 libpciaccess0           
 libpcre1                
 libpcre2-8-0            
 libpixman-1-0           
 libpng16-16             
 libprocps7              
 libprotobuf-lite20      
 libproxy1               
 libpsl5                 
 libreadline7            
 libsasl2-3              
 libselinux1             
 libsemanage1            
 libsepol1               
 libsha1detectcoll1      
 libsigc-2_0-0           
 libsmartcols1           
 libsolv-tools           
 libsqlite3-0            
 libssh-config           
 libssh4                 
 libsystemd0             
 libtasn1                
 libtasn1-6              
 libtirpc-netconfig      
 libtirpc3               
 libubsan0               
 libudev1                
 libunistring2           
 libusb-0_1-4            
 libusb-1_0-0            
 libuuid1                
 libverto1               
 libwayland-client0      
 libwayland-server0      
 libxcb-dri2-0           
 libxcb-dri3-0           
 libxcb-glx0             
 libxcb-present0         
 libxcb-shm0             
 libxcb-sync1            
 libxcb-xfixes0          
 libxcb1                 
 libxcrypt-devel         
 libxkbfile1             
 libxml2-2               
 libxshmfence1           
 libyaml-cpp0_6          
 libz1                   
 libzio1                 
 libzstd1                
 libzypp                 
 linux-glibc-devel       
 login_defs              
 make                    
 ncurses-utils           
 netcfg                  
 openssh-clients         
 openssh-common          
 openssh-server          
 openssl                 
 openssl-1_1             
 p11-kit                 
 p11-kit-tools           
 pam                     
 perl                    
 perl-Error              
 perl-Git                
 perl-base               
 permissions             
 pinentry                
 pkg-config              
 procps                  
 rpm                     
 rpm-config-SUSE         
 sed                     
 shadow                  
 system-group-hardware   
 system-user-root        
 sysuser-shadow          
 tar                     
 terminfo-base           
 unzip                   
 update-alternatives     
 util-linux              
 vim                     
 vim-data-common         
 wget                    
 which                   
 xkbcomp                 
 xkeyboard-config        
 xorg-x11-server         
 zip                     
 zypper        

[Haroon-Khel]

I felt a bit weird about it too, but the box is up and running https://ci.adoptopenjdk.net/computer/test-docker-sles12-s390x-1/

[sxa]

OK - I think I'm ok with this since it's better than not testing on that level, so I think we can close this.