action #130237
closed[investigation] Possibility to host some container images in registry.opensuse.org
0%
Description
Currently, openQA container tests are pulling some images in order to test the container engines.
For example, alpine: https://openqa.opensuse.org/tests/3327510#step/podman/103
This images are pulled from several places:
- O3 jobs
- OSD jobs
- Public Cloud providers run in OSD (the pull command is done from the provider)
We have a registry in a VM in EC2 which serves this purpose. However, this approach has some limitations:
- need someone to maintain the VM (install updates, refresh the images), ofc, it can be automated
- the VM is open to the world --> security concerns, as it already happpened in the past
- it costs money from our PC budget (althogh it's not a big concern)
The ideal case would be that these images could be pulled from some public "registry", e.g. registry.opensuse.org.
There might be some limitations, because you can't push things to that registry using a simple "podman push". The registry gets populated from images built in build.opensuse.org, but in the build service it's not possible to "download stuff from the internet" while building, but maybe there is a way to do that.
The goal of this ticket is to find a way if it's possible to have this images available in registry.opensuse.org.
This is the list of images:
alpine
busybox
centos
debian
fedora
haproxy
hello-world
httpd
nginx
python
ubuntu