redhat-developer / devspaces-images

Identical copies of the code used in Brew/OSBS to build OpenShift Dev Spaces, but made public to enable pull requests and easier contribution; also copies of CasC Jenkins job configs

Links marked with this icon 🚪 are internal to Red Hat. This includes Jenkins servers, job configs in gitlab, and container sources in dist-git.

Because these services are internal, in the interest of making all things open, we've copied as much as possible into this repo. Details below.

Midstream code

This repo is used to house identical copies of the code used to build the Red Hat OpenShift Dev Spaces (formerly CodeReady Workspaces) images in Brew/OSBS, but made public to enable pull requests and easier contribution.

• Downstream code can be found in repos internal to Red Hat at https://pkgs.devel.redhat.com/cgit/?q=devspaces 🚪
  • select the devspaces-3-rhel-8 branch for the latest 2.x synced from upstream main branches, or
  • select a branch like devspaces-3.1-rhel-8 for a specific release, synced to a stable branch like 7.46.x.

Generated code

In some cases, where we need to house code generated by downstream processes in a public location, this repo will contain folders that end in -generated to differentiate from code that's synced from upstream and copied to downstream.

• devspaces-operator-bundle-generated/manifests contains CSVs with pinned digests 🚪, generated from downstream Brew processes.

Jenkins jobs

This repo also contains an identical copy of the Jenkinsfiles and groovy 🚪 sources used to configure the jenkins-csb 🚪 Configuration-as-Code (casc) Jenkins instance used to build the artifacts needed for Brew/OSBS builds. Since the server and config sources are internal to Red Hat, this copy is provided to make it easier to see how Red Hat OpenShift Dev Spaces is built. Hooray for open source!

• To run a local Jenkins, see README 🚪
• Job 🚪 that performs the sync from gitlab 🚪 to github at intervals
• Other jobs are used to:
  • build a series of artifact and container builds,
  • sync midstream to downstream,
  • build artifacts,
  • orchestrate Brew builds,
  • copy containers to quay,
  • check & update digests in registries/metadata images
• Or, to:
  • send email notifications of ER and RC builds
  • tag sources & collect manifests, collect sources to create a release
  • set up subsequent releases (branching, bumping versions)

devspaces-images's Issues

There is a vulnerability in Simple Logging Facade for Java (SLF4J) 1.7.24,upgrade recommended

https://github.com/redhat-developer/codeready-workspaces-images/blob/00f9120537769ff3cdf01ab5975f42c69c86e4e5/codeready-workspaces/pom.xml#L154

CVE-2018-8088

Recommended upgrade version：1.7.31

There is a vulnerability in Google OAuth Client Library for Java 1.27.0,upgrade recommended

https://github.com/redhat-developer/codeready-workspaces-images/blob/00f9120537769ff3cdf01ab5975f42c69c86e4e5/codeready-workspaces/pom.xml#L61

CVE-2020-7692

Recommended upgrade version：1.31.0

Fail to start a workspace with asynchronous storage

Server Version
2.15 @ f9f853 #6 :: Eclipse Che Dashboard 7.42.0 @ 74c0c

apiVersion: 1.0.0
metadata:
  name: python-ixwx
attributes:
  asyncPersist: 'true'
  persistVolumes: 'false'
projects:
  - name: python-hello-world
    source:
      location: 'https://devfile-registry-zlj-crw215.apps.amp-fb35.9.5.36.56.nip.io/resources/python-python-hello-world-master.zip'
      type: zip
components:
  - id: ms-python/python/latest
    preferences:
      python.globalModuleInstallation: true
    type: chePlugin
  - mountSources: true
    memoryLimit: 512Mi
    type: dockerimage
    volumes:
      - name: venv
        containerPath: /home/jboss/.venv
    alias: python
    image: 'registry.redhat.io/codeready-workspaces/plugin-java8-rhel8@sha256:8cb1e495825051b83cf903bb317e55823a6f57b3bad92e9407dc8fa59c24c0cc'
commands:
  - name: 1. Run
    actions:
      - workdir: '${CHE_PROJECTS_ROOT}/python-hello-world'
        type: exec
        command: python -m venv .venv && . .venv/bin/activate && python hello-world.py
        component: python
  - name: Debug current file
    actions:
      - referenceContent: |
          {
            "version": "0.2.0",
            "configurations": [
              {
                "name": "Python: Current File",
                "type": "python",
                "request": "launch",
                "program": "${file}",
                "console": "internalConsole"
              }
            ]
          }
        type: vscode-launch

Add eth0 [10.131.0.63/23] from openshift-sdn

Pulling image "registry.redhat.io/codeready-workspaces/pluginbroker-metadata-rhel8@sha256:de8ede01ce5d3b06ae8b1866bb482bb937f020f7dee5dfb20b041f02c1e63f68"

Successfully pulled image "registry.redhat.io/codeready-workspaces/pluginbroker-metadata-rhel8@sha256:de8ede01ce5d3b06ae8b1866bb482bb937f020f7dee5dfb20b041f02c1e63f68" in 9.415142653s

Created container pluginbroker-metadata-rhel8-de8ede01ce

Started container pluginbroker-metadata-rhel8-de8ede01ce

Starting plugin metadata broker

Failed to download plugin meta: failed to fetch plugin meta.yaml from URL 'http://plugin-registry.zlj-crw215.svc:8080/v3/plugins/eclipse/che-async-pv-plugin/latest/meta.yaml': Downloading http://plugin-registry.zlj-crw215.svc:8080/v3/plugins/eclipse/che-async-pv-plugin/latest/meta.yaml failed. Status code 404. Response body:

<title>404 Not Found</title>

Not Found

The requested URL was not found on this server.

Failed to run the workspace: "Plugins installation process failed. Error: Plugin brokering process for workspace workspace91ds8zko8qf8pxu3 failed with error: Failed to download plugin meta: failed to fetch plugin meta.yaml from URL 'http://plugin-registry.zlj-crw215.svc:8080/v3/plugins/eclipse/che-async-pv-plugin/latest/meta.yaml': Downloading http://plugin-registry.zlj-crw215.svc:8080/v3/plugins/eclipse/che-async-pv-plugin/latest/meta.yaml failed. Status code 404. Response body: <title>404 Not Found</title>

Not Found

The requested URL was not found on this server.

Operator POD crashlooping on Openshift 4.10

Hi,
we installed Red Hat CodeReady Workspaces - Technical Preview
2.15.104+0.1661460923.p provided by Red Hat
on Openshift 4.10, but Operator Pod is crashlooping while running out of memory.
Seems memeory resource limit fix should be in:
https://github.com/redhat-developer/devspaces-images/blob/devspaces-3-rhel-8/devspaces-operator/deploy/deployment/openshift/combined.yaml
I'll try to change this :-)

Why your bot comes inside our pull request?

traefik/traefik#9515 (comment)

Can you stop that? ping @nickboldt

Danger alert:Failed to fetch devfiles

After installing the operator, creating workspace instance, try to access route to workspace via kubeadmin and clicking trough sign ups

Failed to fetch devfiles metadata from registry URL: https://devfile-registry-openshift-workspaces.apps.cluster-<>/, reason: Network Error

There is a vulnerability in Postgresql JDBC Driver 42.2.2,upgrade recommended

https://github.com/redhat-developer/codeready-workspaces-images/blob/00f9120537769ff3cdf01ab5975f42c69c86e4e5/codeready-workspaces/pom.xml#L152

CVE-2020-13692 CVE-2018-10936

Recommended upgrade version：
42.2.13

Provide Image with Openjdk 11 and Node 14

Can you please provide an image Openjdk 11 and Node 14? An Image with OpenJDK 8 + Node 12 + Python 3 is already available.

Image for building quarkus native executables

I'm looking for a component image that can build a quarkus native application. The quarkus sample workspace that comes with CRW implies that you can package a native executable, but it references the plugin-java11-rhel8 image to do it, which doesn't contain graalvm. I'm not seeing another image that does, so I'm happy to contribute one if there's interest.