INFRA: Tradeoff on the operating system to use for COPRS

gbutheau-ads commented 3 years ago

User story description: "As a [Product Owner] I would like to [realize a technical tradeoff] so that I can [decide which Operating System to use for both the cluster nodes and the container base image]."

Information Airbus already realized a tradeoff and the results are the following. Please review them for information but make your own choice based on acceptance criteria:

For a VM or bare metal:
1. Ubuntu server
2. Suse
3. RHEL
For a container
1. Ubuntu server
2. OpenSuse Leap
3. SUSE

Acceptance criteria:

[x] Tradeoff criteria are including at least:
technical criteria: OS reputation, portability from CentOS, ecosystem, upgrade/maintenance, compatibilyt with kubernetes, usage in a cloud/virtualization concept, open source.
non technical criteria: community, licence, export control, lifecycle, major version support, future perspectives/developments
security criteria: system logs forwarding, Linux process filtering, hardening guides available, OS vulnerability, security patch frequency
[x] 1 trade off is expected for cloud nodes + 1 trade off for container images
[ ] Trade off weights on criteria are shared with Airbus to have a common decision
[x] A synthesis is provided and explained at Sprint Review (in English) to make a decision

Definition of Done The User Story is considered completed when...

Acceptance criteria are full filled
Document are online and accessible to Airbus for review

nleconte-csgroup commented 3 years ago

Sprint Planning 1 :

Compatibility with SCDF
Check with dev language and existing OS

cbouisson-csgroup commented 3 years ago

Trade-off : https://github.com/COPRS/infrastructure/wiki/Tradeoff-on-the-operating-system-to-use-for-COPRS

gbutheau-ads commented 3 years ago

Hello Thanks for the tradeoff conclusions. I'm a bit surprised there is no evaluation of Alpine for container OS. What is your recommendation ? Thanks, Grégory

cbouisson-csgroup commented 3 years ago

Hello We did not consider Alpine today because we took into account the development side: we considered that it might be difficult for developers to update it as part of their development Regards

cbouisson-csgroup commented 3 years ago

Two additional points:

Don't forget to update the OS regularly, especially for security reasons
In the context of a deployment of Java microservices on Kubernetes, it would be interesting for the developers to think about Quarkus : https://quarkus.io/

adurand-csgroup commented 2 years ago

No_test

COPRS / rs-issues

INFRA: Tradeoff on the operating system to use for COPRS #39