search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.33k stars 1.74k forks source link

Build all amd64 artifacts on CentOS 7 #13994

Closed r0mant closed 2 years ago

r0mant commented 2 years ago

With Teleport 10 we've introduced passwordless which unfortunately bumped up glibc dependency in tsh to 2.25 which makes it crash on older systems like Debian 9.

To fix this we'd like to use CentOS 7 built artifacts for all our packages, including:

This basically means that all these packages will contain the same binaries built on CentOS 7.

To achieve that there are couple of extra things we need to do:

  1. We need parity between our regular Dockerfile and Dockerfile-centos7. The latter is currently missing BPF tools. Same for FIPS: Dockerfile-centos7-fips.
  2. Update our Dronefile's release-amd64 and release-amd64-fips to build CentOS 7 binaries by using release-amd64-centos7 and release-amd64-centos7-fips targets and packaging these artifacts instead of those built on Ubuntu. See if you need to rename them to compatibility.

Make sure that what gets put in a .deb package is actually the CentOS 7 built binary.

r0mant commented 2 years ago

Closed by https://github.com/gravitational/teleport/pull/14062 and its backport.