From dd6931030decb71301e070cbe89f320d9d583ebb Mon Sep 17 00:00:00 2001 From: Tomasz Janiszewski Date: Mon, 20 Jan 2025 13:23:44 +0100 Subject: [PATCH 1/5] Upgrade ubi to 9 This allows to run python scripts that require latest glibc (e.g. codecov action) --- images/stackrox-build.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/images/stackrox-build.Dockerfile b/images/stackrox-build.Dockerfile index 477493e5..675de422 100644 --- a/images/stackrox-build.Dockerfile +++ b/images/stackrox-build.Dockerfile @@ -1,6 +1,6 @@ # Provides the tooling required to run StackRox dockerized build targets. -FROM registry.access.redhat.com/ubi8:latest +FROM registry.access.redhat.com/ubi9:latest SHELL ["/bin/bash", "-o", "pipefail", "-c"] From 6ac84d8786bfc6715cb90a65ebc08078b8a5914e Mon Sep 17 00:00:00 2001 From: Tomasz Janiszewski Date: Mon, 20 Jan 2025 13:28:21 +0100 Subject: [PATCH 2/5] Update stackrox-build.Dockerfile --- images/stackrox-build.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/images/stackrox-build.Dockerfile b/images/stackrox-build.Dockerfile index 675de422..af77d1df 100644 --- a/images/stackrox-build.Dockerfile +++ b/images/stackrox-build.Dockerfile @@ -11,7 +11,7 @@ RUN dnf update -y && \ dnf-plugins-core \ wget \ && \ - dnf config-manager --set-enabled ubi-8-codeready-builder-rpms && \ + dnf config-manager --set-enabled ubi-9-codeready-builder-rpms && \ dnf update -y && \ wget --quiet -O - https://rpm.nodesource.com/setup_lts.x | bash - && \ wget --quiet -O - https://dl.yarnpkg.com/rpm/yarn.repo | tee /etc/yum.repos.d/yarn.repo && \ From 197bcc25d6d7b3f993e2d7159b0d1578110f2c60 Mon Sep 17 00:00:00 2001 From: Tomasz Janiszewski Date: Mon, 20 Jan 2025 13:50:09 +0100 Subject: [PATCH 3/5] remove ctags Signed-off-by: Tomasz Janiszewski --- images/stackrox-build.Dockerfile | 1 - 1 file changed, 1 deletion(-) diff --git a/images/stackrox-build.Dockerfile b/images/stackrox-build.Dockerfile index af77d1df..5c155939 100644 --- a/images/stackrox-build.Dockerfile +++ b/images/stackrox-build.Dockerfile @@ -34,7 +34,6 @@ RUN dnf update -y && \ redhat-rpm-config \ rpm-build \ strace \ - ctags \ git \ perl-Fedora-VSP \ perl-generators \ From 9b865c0bb6364dccadebaf7405060e53d71e4762 Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Tue, 7 Apr 2026 16:10:51 -0600 Subject: [PATCH 4/5] Upgrade scanner dockerfiles to UBI 9 Update scanner-build.Dockerfile base image from ubi8 to ubi9, switch to ubi-9-codeready-builder-rpms, and remove ctags. Update scanner-test.Dockerfile PostgreSQL repo from EL-8 to EL-9. Co-Authored-By: Claude Opus 4.6 (1M context) --- images/scanner-build.Dockerfile | 5 ++--- images/scanner-test.Dockerfile | 2 +- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/images/scanner-build.Dockerfile b/images/scanner-build.Dockerfile index 96935358..ff566700 100644 --- a/images/scanner-build.Dockerfile +++ b/images/scanner-build.Dockerfile @@ -1,12 +1,12 @@ # Provides the tooling required to run Scanner dockerized build targets. -FROM registry.access.redhat.com/ubi8:latest +FROM registry.access.redhat.com/ubi9:latest SHELL ["/bin/bash", "-o", "pipefail", "-c"] RUN dnf update -y && \ dnf install -y dnf-plugins-core wget && \ - dnf config-manager --set-enabled ubi-8-codeready-builder-rpms && \ + dnf config-manager --set-enabled ubi-9-codeready-builder-rpms && \ dnf update -y && \ # This set replaces centos:stream8 "Development Tools". It is possible # rox-ci-image does not need all of these. @@ -26,7 +26,6 @@ RUN dnf update -y && \ redhat-rpm-config \ rpm-build \ strace \ - ctags \ git \ perl-Fedora-VSP \ perl-generators \ diff --git a/images/scanner-test.Dockerfile b/images/scanner-test.Dockerfile index 9e7d5fa2..dd8970e5 100644 --- a/images/scanner-test.Dockerfile +++ b/images/scanner-test.Dockerfile @@ -35,7 +35,7 @@ ENV PG_MAJOR=15 ENV PATH="$PATH:/usr/pgsql-$PG_MAJOR/bin/" # Install Postgres repo -RUN dnf --disablerepo="*" install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-8-x86_64/pgdg-redhat-repo-latest.noarch.rpm +RUN dnf --disablerepo="*" install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm RUN dnf update -y \ && dnf install -y \ From 51f3fcd087f4688c98f31c066414e9b0fb0601d8 Mon Sep 17 00:00:00 2001 From: davdhacs <105243888+davdhacs@users.noreply.github.com> Date: Tue, 7 Apr 2026 16:24:20 -0600 Subject: [PATCH 5/5] Update stackrox-test PostgreSQL repo from EL-8 to EL-9 Co-Authored-By: Claude Opus 4.6 (1M context) --- images/stackrox-test.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/images/stackrox-test.Dockerfile b/images/stackrox-test.Dockerfile index c780fb58..ce56d0ff 100644 --- a/images/stackrox-test.Dockerfile +++ b/images/stackrox-test.Dockerfile @@ -28,7 +28,7 @@ RUN set -ex \ ENV BASH_ENV /etc/initial-bash.env # Install Postgres repo -RUN dnf --disablerepo="*" install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-8-x86_64/pgdg-redhat-repo-latest.noarch.rpm +RUN dnf --disablerepo="*" install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm # Install all the packages RUN dnf update -y \