[packer-images] track Linux base images with `updatecli`

[dduportal]

Service(s)

Other

Summary

In packer images, we recently introduced a new YAML file in which we specify and pin the base images for our system: https://github.com/jenkins-infra/packer-images/blob/main/images-versions.yaml.

We want to cover all cloud providers with this file (AWS, Azure, Docker) for all OSes (Linux, Windows) and all versions/architectures.

AWS

• [x] We pinned the base Ubuntu 22.04 AMIs for both amd64 and arm64 in https://github.com/jenkins-infra/packer-images/blob/6f5b55030bdaf528c7b5326085f420409e570531/locals.pkr.hcl#L13-L18 and it's used by the build-jenkins-agent-ubuntu file. However, we want to use https://github.com/jenkins-infra/packer-images/blob/6f5b55030bdaf528c7b5326085f420409e570531/images-versions.yaml#L13-L17 instead.
• [x] Then, we want to add updatecli manifest(s?) to track these both versions
  • Require adding an AWS credential in the updatecli job in infra.ci for packer-images (might already be done)

Note for Windows: not implemented for AWS yet so not needed in this issue (see https://github.com/jenkins-infra/helpdesk/issues/4318)

Azure

• [x] Windows already done in https://github.com/jenkins-infra/packer-images/pull/1443: https://github.com/jenkins-infra/packer-images/blob/6f5b55030bdaf528c7b5326085f420409e570531/images-versions.yaml#L4-L8
• [ ] Linux has to be implemented. We have "dummy" specified versions in https://github.com/jenkins-infra/packer-images/blob/6f5b55030bdaf528c7b5326085f420409e570531/images-versions.yaml#L9-L12 with the value latest

Docker

• [ ] Linux has to be implemented. Specified here: https://github.com/jenkins-infra/packer-images/blob/6f5b55030bdaf528c7b5326085f420409e570531/sources.pkr.hcl#L77 (need to be adapted of course!). Let's use image with both tag and sha: (looking like) ubuntu:22.04@sha256:xxxxxxx
  • Tip: see https://hub.docker.com/_/ubuntu/tags?name=22.04, don't forget we have 2 CPU architecture, and also https://www.updatecli.io/docs/plugins/resource/docker_digest/

Reproduction steps

No response

[dduportal]

@jayfranco999 works on the Linux AMi part

[jayfranco999]

Update:

https://github.com/jenkins-infra/packer-images/pull/1475 and https://github.com/jenkins-infra/packer-images/pull/1476 tracks the aws AMI ids for ubuntu_22.04, the solution works when tested locally but fails tests on infra.ci since we need an IAM user for updatecli.

Converted both PRs to draft until IAM updatecli user is created.

[jayfranco999]

Update:

https://github.com/jenkins-infra/kubernetes-management/pull/5837 and https://github.com/jenkins-infra/packer-images/pull/1482 have been merged which adds the aws credentials for the newly created IAM user updatecli on infra.ci

https://github.com/jenkins-infra/packer-images/pull/1475 and https://github.com/jenkins-infra/packer-images/pull/1476 tracks the aws AMI ids for ubuntu_22.04 for both AMD64 and ARM64 respectively.

All checks have passed for tracking AWS ubuntu_22.04 AMI images