Jacamar CI v0.12.0

Admin Changes

  • Updated seccomp support and logging (!360)

  • Make ioctl rule optional and prevent invalid setuid deployments (!351)

  • Increase default kill_timeout to 2 minutes (!376)

  • Optional static build directory configuration (!361)

  • make release-binaries for binary only RPM (!369)

    • $ rpm -qlip jacamar-ci-binaries-0.11.0.pre.eeb5d98.el7.x86_64.rpm
Name        : jacamar-ci-binaries
Version     : 0.12.0
...
Relocations : /usr
Summary     : HPC focused CI/CD driver for the GitLab custom executor binary only
...
/usr/bin/jacamar
/usr/bin/jacamar-auth

  • Add current executable path to jacamar command creation (!371)

    • This will allow for cases where the jacamar_path is not configured and construct the fully qualified path for the jacamar application to allign with the location of jacamar-auth.

  • Log restricted privileges that conflict with downscoping (!356)

Bug & Development Fixes

  • Establish testing structure for latest runner compatability (!363, !354)

  • Correct PBS signal handling and expand logging/testing (!367)

    • As part of this fix debug logs have been introduced to the job specific script directory that will be removed during cleanup if logs are not copied/retained through existing mechanisms.

    • $ cat $HOME/.jacamar-ci/scripts/abcd1234/000/group/project/123/sigterm.log
Signal captured, attempting to cancel job (scancel 4)
command error: ...

  • Handle response during --no-auth deployment (!373)

  • Allow for limited buffer ReturnOutput via downscoped command (!370)

  • Support for obtaining software bill of materials (!366)

  • Update CentOS 7 builder image (!362)

  • Tool for seccomp configuration testing (!358)