Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build-git-installers: target an older Ubuntu version #719

Open
wants to merge 1 commit into
base: vfs-2.47.2
Choose a base branch
from

Conversation

dscho
Copy link
Member

@dscho dscho commented Jan 17, 2025

Currently, we target whatever GitHub Actions use as ubuntu-latest; This, however, led to the unintentional requirement in v2.47.2.vfs.0.0 to run Ubuntu 24.04 (up from 22.04 in v2.47.1.vfs.0.1).

It is important to target a wider audience, though, especially in light of CVE-2024-52005 which is only addressed in Git for Windows and microsoft/git, but not Git.

We could now go back to 22.04; This would only be a temporary band-aid, https://github.blog/changelog/2025-01-15-github-actions-ubuntu-20-runner-image-brownout-dates-and-other-breaking-changes/ already announced that 20.04 is phased out very soon, and 22.04 will be next.

Let's just use a Docker container instead that targets the oldest Ubuntu LTS that is still maintained in some shape or form.

We still verify in validate-installers that the resulting binary installs and works on the latest Ubuntu version by virtue of using runs-on: ubuntu-latest in that matrix job.

Currently, we target whatever GitHub Actions use as `ubuntu-latest`;
This, however, led to the unintentional requirement in v2.47.2.vfs.0.0
to run Ubuntu 24.04 (up from 22.04 in v2.47.1.vfs.0.1).

It is important to target a wider audience, though, especially in light
of CVE-2024-52005 which is only addressed in Git for Windows and
`microsoft/git`, but not Git.

We could now go back to 22.04; This would only be a temporary band-aid,
https://github.blog/changelog/2025-01-15-github-actions-ubuntu-20-runner-image-brownout-dates-and-other-breaking-changes/
already announced that 20.04 is phased out very soon, and 22.04 will be
next.

Let's just use a Docker container instead that targets the oldest Ubuntu
LTS that is still maintained in _some_ shape or form.

We still verify in `validate-installers` that the resulting binary
installs and works on the latest Ubuntu version by virtue of using
`runs-on: ubuntu-latest` in _that_ matrix job.

Signed-off-by: Johannes Schindelin <[email protected]>
@dscho dscho self-assigned this Jan 17, 2025
Copy link

@derrickstolee derrickstolee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the fast response here!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants