Update init image version and dependencies #179
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR updates the Alpine version in the init image to match the trace runner (3.15) to fix an outdated root certificate, adds several dependencies needed for newer kernel builds, and fixes a minor bug in the install script.
Attempting to run with
--fetch-headers
didn't actually fetch headers. Init container logs show:Running the same curl command manually within the container indicated a certificate was expired. Adding OpenSSL clarified that this was due to the old LetsEncrypt DST root's presence in the chain:
After bumping the version, I hit several build failures building linux-generic-5.14.16. Adding the additional packages fixed those.
There was a final remaining
touch: /usr/src/linux-generic-5.14.16-arch1-1/.installed: No such file or directory
error in the install script. That may have been benign/ignored (it should have occurred regardless of the kernel version), but I figure it's worth ensuring that directory exists regardless so that the script can run as expected.Afterwards,
--fetch-headers
created a pod that could run traces successfully.