Skip to content

Conversation

@davdhacs
Copy link

No description provided.

This migrates scanner (non-v4) Konflux and non-Konflux builds from
UBI8/RHEL8 to UBI9/RHEL9 base images.

Changes:
- Generated rpms.lock.yaml for RHEL 9 (48 lines, xz package for all 4 architectures)
- Updated rpms.rhel.repo: RHEL 8→9 repository URLs, SSL vars not hardcoded
- Updated .tekton CPE labels: el8→el9 for all 4 build configs
- Updated konflux Dockerfiles:
  - image/scanner/rhel/konflux.Dockerfile: rhel_8_1.24→rhel_9_1.24 builder, ubi8→ubi9 base
  - image/db/rhel/konflux.Dockerfile: rhel8/postgresql-15→rhel9/postgresql-15 base
- Updated non-konflux Dockerfiles:
  - image/scanner/rhel/Dockerfile: ubi8-minimal→ubi9-minimal
  - image/db/rhel/Dockerfile: ubi8→ubi9, ubi8-minimal→ubi9-minimal
  - image/vulnerabilities/Dockerfile: ubi8-minimal→ubi9-minimal

The RPM lockfile was generated using rpm-lockfile-prototype with Red Hat
subscription credentials via update.repos.sh script (kept locally only).

Note: Image name labels remain as "rhel8" since new rhel9 registry repos
are not yet available.

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>
@davdhacs davdhacs added the konflux-build Run Konflux in PR. Push commit to trigger it. label Jan 15, 2026
@openshift-ci
Copy link

openshift-ci bot commented Jan 15, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

The microdnf install xz command was missing the -y flag, causing
the Konflux build to hang waiting for user confirmation.

This fix adds the -y flag to auto-confirm the package installation.

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/work-in-progress konflux-build Run Konflux in PR. Push commit to trigger it.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant