Version numbers/identifiers for Docker image tags about pebble HOT 23 CLOSED

or would only days when new commits are added get a new date tag?

Only days where new commits were added. I think Pebble's commit volume is pretty low.

from pebble.

Could you add a 'latest' tag to pebble and pebble-challtestsrv? I would like to use the official docker images instead of my selfmade ones. However, with the release dates only, I'd have to change my build script on every pebble update. 😉 Thank you!

from pebble.

Personally I would prefer semver. The commit hash would be fine too, and would also mean less work for you. But since I am going to use the latest tag anyway, I don't have a strong oppinion on that.

from pebble.

I agree with @shred and I will also use latest.

So your choice will be best 😸

from pebble.

This is all wrapped up now 🎉 I released a v1.0.0 and a v1.0.1 today (https://github.com/letsencrypt/pebble/releases/). There's a latest tag in Dockerhub for both pebble and pebble-challtestsrv as well as images for the v1.0.1 release tag (I will backfill v1.0.0 images later).

from pebble.

We use the second date-based option for Boulder's docker image tags. I'd be slightly in favour of that for consistency's sake.

from pebble.

Considering the amount of commits Pebble has, this is essentially equivalent to master's HEAD ;-)

Would every day get a new date tag, or would only days when new commits are added get a new date tag?

from pebble.

I haven't been able to figure out how to get Dockerhub autobuilds working for a public repo in the Let's Encrypt organization. I must be missing something silly but it only ever shows me repositories from my own Github account.

In the meantime I pushed a letsencrypt/pebble:2018-07-20 tag to Dockerhub for the current master (dac33b8)

from pebble.

@cpu You need to create the repo like that:

from pebble.

@ldez That's the section of DockerHub I've been interacting with (following the instructions here: https://docs.docker.com/docker-hub/github/)

After clicking the "Create Automated Build" I land on this screen:

Choosing the Github option then brings me to a page where I can see my own linked Github account's repositories:

Despite being a member of the Let's Encrypt organization (I seem to have admin rights on our org's repos in Dockerhub) it doesn't show anything but my own personal repositories. E.g. I can't select this github.com/letsencrypt/pebble repository.

Am I doing something silly? The DockerHub "LetsEncrypt" organization predates me. Maybe there are account credentials for it that could be used to log in to the dockerhub that I should be using instead?

from pebble.

Aha! I read the docs a second time and I think this might be the catch I'm missing: https://docs.docker.com/docker-hub/github/#github-organizations

I'll investigate and see if our GH org admin needs to activate this.

from pebble.

Docker hub have a bug to refresh repositories.
Try to logout/login.

from pebble.

Sorry try to Unlink Github -> link to Github your Docker account.

from pebble.

@ldez I'm 100% stumped. I've unlinked and relinked my Github several times (and also logged in/out of Dockerhub) with no results.

I added the "Docker" service to the repo (despite the deprecation warnings), and it shows a "green" status:

I also had a Github org admin for the "letsencrypt" org check the org perms and they indicated there doesn't seem to be anything missing.

Despite all of the above I still can only see my own repositories when following the instructions for creating an auto-build with Dockerhub. Pretty frustrating!

I'm open to suggestions. I must be missing something....

from pebble.

As you can see I can access to the repositories of an organization.

To be sure:

• From Docker Hub: Unlink Github -> link to Github

Do you have the "good" rights on the https://hub.docker.com/u/letsencrypt/ organization?

from pebble.

As you see I can access to the repositories of an organization.

Very strange. I see what you mean but the Let's Encrypt organization doesn't show up for me in "Users/Organizations"

To be sure: From Docker Hub: Unlink Github -> link to Github

Yup! Tried that several times now, also making sure to revoke from the Github side.

Do you have the "good" rights on the https://hub.docker.com/u/letsencrypt/ organization?

As far as I know. I'm able to edit the DockerHub organization settings. I was also able to create the "letsencrypt/pebble" repository: https://hub.docker.com/r/letsencrypt/pebble/

from pebble.

I haven't had a chance to try and take another crack at auto-builds. In the meantime I'll push new tags when master changes manually 😭

from pebble.

There's now a nice PR from @ldez that will add Docker image auto-publishing if its merged. I think this is a good time to revisit the discussion about what kind of versioning system folks would like to see Pebble use before I go ahead and merge it.

Historically I matched Boulder's approach and published date based tags (2019-01-04, 2018-12-14, etc). The approach proposed in #187 will switch to having three sets of tags:

1. latest - the latest build
2. commit hash: each commit have an image
3. tag: each tag have an image

I think having an image per-commit hash is perhaps overkill but the having a latest image and an image per tag seems uncontroversial.

I think the only remaining question from my perspective is whether I should be creating the date based tags still or switch to something more formal like semantic versioning and push tags like 0.0.1, 0.0.2, 0.1.0, etc.

@felixfontein @ldez @shred You folks are the only consumers of the Pebble images I can tag off-hand. What are your preferences? I'm slightly in favour of dropping the "date" tags and using semver.

@jsha @rolandshoemaker Do you two have any opinions here?

Thanks all! (Especially @ldez for writing #187!)

from pebble.

I forgot something:

• in Lego, I will use latest because I want to detect new features/fixes as soon as possible
• in Traefik, I will use a "stable" version, because I don't want to failed on features/fixes that are not available in the LE production

from pebble.

I can't use latest (for reproducibility); both dates and semver are fine for me. Personally, I'd also prefer semver though (as opposed to dates, it is possible to have two different versions on one day ;-) ).

from pebble.

Semver is great!

from pebble.

I propose to update my PR like that:

• latest: the latest tagged version
• tag: each tag have an image
• no image per commit hash

Are you agree?

from pebble.

@ldez Yes that sounds great.

It sounds like everyone is comfortable with semver so we'll go that direction for making tags/releases 👍 Thanks!

from pebble.