-
Story
-
Resolution: Unresolved
-
Minor
-
None
-
None
Due to https://github.com/openshift/machine-config-operator/pull/3669 being merged, local Dockerfile builds now require VPN.
The builder image is configured to use the following yum repos:
$ cat /etc/yum.repos.d/* | grep "baseurl" | sed 's/baseurl\ =\ //g' | grep "^http" | sort | uniq http://base-4-13-rhel8.ocp.svc/openstack-16-for-rhel-8-rpms http://base-4-13-rhel8.ocp.svc/rhel-8-ansible-2.9 http://base-4-13-rhel8.ocp.svc/rhel-8-appstream http://base-4-13-rhel8.ocp.svc/rhel-8-baseos http://base-4-13-rhel8.ocp.svc/rhel-8-codeready-builder-rpms http://base-4-13-rhel8.ocp.svc/rhel-8-fast-datapath http://base-4-13-rhel8.ocp.svc/rhel-8-nfv http://base-4-13-rhel8.ocp.svc/rhel-8-server-ose https://ocp-artifacts.hosts.prod.psi.rdu2.redhat.com/pub/RHOCP/plashets/4.13/stream/el8/latest/x86_64/os https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/x86_64/ansible/2.9/os/ https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/x86_64/fast-datapath/os/ https://rhsm-pulp.corp.redhat.com/content/dist/layered/rhel8/x86_64/openstack/16.2/os/ https://rhsm-pulp.corp.redhat.com/content/eus/rhel8/8.6/x86_64/appstream/os/ https://rhsm-pulp.corp.redhat.com/content/eus/rhel8/8.6/x86_64/baseos/os/ https://rhsm-pulp.corp.redhat.com/content/eus/rhel8/8.6/x86_64/codeready-builder/os/ https://rhsm-pulp.corp.redhat.com/content/tus/rhel8/8.6/x86_64/rt/os/
In particular, the yum repos it tries to reach out to are either hosted within the CI cluster to make image builds go faster, or are hosted inside Red Hat's corporate network, requiring the use of a VPN. There was a bit of discussion during sprint retro about how a non-Red-Hatter could make a change to the MCO and test it out, which is an idea that got me a bit curious.
I should mention that for OKD, the builder base image is either a Fedora or CentOS base image, rendering this problem moot.
Done When:
- We've determined whether a non-Red-Hatter may have this need.
- Identify a workaround that does not require the use of the Red Hat VPN.