| 2019-09-13 23:13:36 |
Ghada Khalil |
description |
Brief Description
-----------------
The starlingx/k8s-cni-sriov container image is built with RHEL7.6 as the base OS. This is an issue as starlingx is an open-source project and doesn't have a license to use RHEL. This bug is opened to investigate if this image can be based on an open-source distribution instead.
Starlingx doesn't modify the k8s-cni-sriov image. It's built so that it can be locked down on a specific SHA (to align on the code base that was tested).
The upstream docker file is used by starlingx:
$ cat k8s-cni-sriov.stable_docker_image
BUILDER=docker
LABEL=k8s-cni-sriov
DOCKER_REPO=https://github.com/intel/sriov-cni.git
DOCKER_REF=9e4c973b2ac517c64867e33d61aee152d70dc330
https://github.com/intel/sriov-cni/tree/9e4c973b2ac517c64867e33d61aee152d70dc330
So the build is using this as the Dockerfile:
https://github.com/intel/sriov-cni/blob/9e4c973b2ac517c64867e33d61aee152d70dc330/Dockerfile
This file is what’s defining the base.
A more recent baseline of this repo appears to have the default image build based on alpine, with RHEL7 as a secondary option.
Severity
--------
This is not a functional issue. It's a licensing issue.
Steps to Reproduce
------------------
Query the OS version in the starlingx/k8s-cni-sriov container image
Expected Behavior
------------------
Only opensource licenses are used in components used by starlingx
Actual Behavior
----------------
The above image is based on enterprise source code.
Reproducibility
---------------
Reproducible
System Configuration
--------------------
N/A
Branch/Pull Time/Commit
-----------------------
master 2019-09-13
Last Pass
---------
This has been an issue since the introduction of the starlingx/k8s-cni-sriov container image
Timestamp/Logs
--------------
N/A
Test Activity
-------------
Other - normal system use |
Brief Description
-----------------
The starlingx/k8s-cni-sriov container image is built with RHEL7.6 as the base OS. This is an issue as starlingx is an open-source project and doesn't have a license to use RHEL. This bug is opened to investigate if this image can be based on an open-source distribution instead.
Starlingx doesn't modify the k8s-cni-sriov image. It's built so that it can be locked down on a specific SHA (to align on the code base that was tested).
The upstream docker file is used by starlingx:
$ cat k8s-cni-sriov.stable_docker_image
BUILDER=docker
LABEL=k8s-cni-sriov
DOCKER_REPO=https://github.com/intel/sriov-cni.git
DOCKER_REF=9e4c973b2ac517c64867e33d61aee152d70dc330
https://github.com/intel/sriov-cni/tree/9e4c973b2ac517c64867e33d61aee152d70dc330
So the build is using this as the Dockerfile:
https://github.com/intel/sriov-cni/blob/9e4c973b2ac517c64867e33d61aee152d70dc330/Dockerfile
This file is what’s defining the base.
A more recent baseline of this repo appears to have the default image build based on alpine, with RHEL7 as a secondary option.
Severity
--------
This is not a functional issue. It's a licensing issue.
Steps to Reproduce
------------------
Query the OS version in the starlingx/k8s-cni-sriov container image
Expected Behavior
------------------
Only opensource licenses are used in components used by starlingx
Actual Behavior
----------------
The above image is based on enterprise source code.
Reproducibility
---------------
Reproducible
System Configuration
--------------------
N/A
Branch/Pull Time/Commit
-----------------------
master 2019-09-13
Last Pass
---------
This has been an issue since the introduction of the starlingx/k8s-cni-sriov container image
Timestamp/Logs
--------------
N/A
Test Activity
-------------
Other |
|
