Skip to content

ci(builder): publish lake-builder image under the apache namespace - #9267

Merged
klesh merged 1 commit into
apache:mainfrom
DoDiODev:pr/builder-image-publish
Oct 28, 2026
Merged

klesh merged 1 commit into
apache:mainfrom
DoDiODev:pr/builder-image-publish

Conversation

@DoDiODev

Copy link
Copy Markdown
Contributor

Summary

Follow-up to #9209 and the
dev@ discussion.
build-builder.yml pushed the CI toolchain image to mericodev/lake-builder
with separate credentials, so that image has not been updated since
2023-06-30. As agreed on the list, it now publishes to the apache
namespace:

  • Same Docker Hub credentials and owner as build.yml
    (DOCKERHUB_USER / DOCKERHUB_TOKEN / DOCKERHUB_OWNER).
  • Still triggered by a builder-v* git tag; pushing builder-v0.0.16
    publishes apache/devlake:lake-builder-v0.0.16. A tag in the existing
    apache/devlake repository needs no new Docker Hub repository.
  • No moving latest tag. Workflows will pin an explicit version.
  • Buildx/login/build-push actions use the same pinned SHAs as build.yml,
    so they are already on the ASF allowlist. The job only runs in
    apache/devlake.
  • devops/docker/lake-builder/README.md updated accordingly; the manual
    mericodev push instructions are removed.

This PR does not change any existing CI job. After it is merged, a committer
needs to push the first tag:

git tag builder-v0.0.16 && git push origin builder-v0.0.16

v0.0.16 continues the numbering of the last mericodev image (v0.0.15).
A follow-up PR then points the five container: mericodev/lake-builder:latest
lines (unit-test, e2e mysql/postgres, golangci-lint, migration-script-lint)
to apache/devlake:lake-builder-v0.0.16.

Does this close any open issues?

Part of #9209 (the follow-up PR will close it).

Other Information

Checked with actionlint. The current devops/docker/lake-builder/Dockerfile
(Go 1.27.3, libgit2 1.5.0, bookworm) is built in my fork's CI and runs the
unit, lint and e2e tests there.

build-builder.yml pushed to mericodev/lake-builder with separate
credentials, so the CI toolchain image has not been updated since
2023-06-30. Use the Docker Hub credentials from build.yml and push
<owner>/devlake:lake-builder-vX.Y.Z when a builder-vX.Y.Z tag is pushed.
No moving latest tag; workflows will pin the version in a follow-up.

Refs apache#9209
@klesh
klesh merged commit 8d1d29a into apache:main Oct 28, 2026
11 checks passed
@DoDiODev
DoDiODev deleted the pr/builder-image-publish branch October 28, 2026 11:58
@DoDiODev

Copy link
Copy Markdown
Contributor Author

Thanks a lot for the quick review and merge, @klesh!

To publish the first builder image under the apache namespace, could you please push the tag builder-v0.0.16 on the merge commit (or any later main commit)?

git tag builder-v0.0.16 8d1d29a24d31f198ca006d1c71682a19032d71b7
git push upstream builder-v0.0.16

The number continues after the last mericodev/lake-builder:v0.0.15. The tag triggers Build-BuilderImage-Push-Docker, which should push apache/devlake:lake-builder-v0.0.16 (no latest).

Once the image is on Docker Hub, I will open the small follow-up PR that switches the five container: mericodev/lake-builder:latest lines in the workflows to that tag.

@klesh

klesh commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants