Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

frr: Remove FRR container creation #67

Closed
wants to merge 2 commits into from
Closed

Conversation

qmonnet
Copy link
Member

@qmonnet qmonnet commented Jan 15, 2025

As far as I understand, the container is not used at the moment. Remove related files and definitions from the repository.

If I'm wrong and if we want to keep the container, now or for the near future, feel free to ignore and close the PR :)

The container is not used at the moment. Remove related files and
definitions from the repository.

Signed-off-by: Quentin Monnet <[email protected]>
Copy link
Contributor

Outdated packages (gnu64):

priority nix_package version_local version_nixpkgs version_upstream
11 mimalloc 2.1.7 2.1.8 3.0.1
11 llvm 19.1.4 17.0.6 19.1.7
11 llvm 19.1.4 19.1.5 19.1.7
10 isl 0.20 0.24 0.27
10 compiler-rt-libc 19.1.4 19.1.5
7 libnl 3.10.0 3.10.0 3.11.0
7 openssl 3.3.2 1.1.1w 3.4.0
7 openssl 3.3.2 3.3.2 3.4.0
6 libxcrypt 4.4.36 4.4.36 4.4.38
5 ncurses 6.4.20221231 6.4.20221231 6.5
5 curl 8.11.0 8.11.0 8.11.1.3;8.11.1_3;8.11.1
4 numactl 2.0.18 2.0.18 2.0.19
4 kmod 31 31 33
4 sqlite 3.46.1 3.47.0 3.48.0
3 libbpf 1.4.7 1.4.7 1.5.0
2 dpdk 24.11 24.07 24.11.1

Copy link
Contributor

Vulnerable packages (gnu64):

vuln_id url package severity version_local version_nixpkgs version_upstream package_repology sortcol classify
CVE-2024-9143 https://nvd.nist.gov/vuln/detail/CVE-2024-9143 openssl 4.3 3.3.2 3.3.2 3.4.0 openssl 2024A0000009143 err_not_vulnerable_based_on_repology
OSV-2024-1209 https://osv.dev/OSV-2024-1209 libxml2 2.13.4 2.13.5 2.13.5 libxml2 2024A0000001209 err_not_vulnerable_based_on_repology
OSV-2024-817 https://osv.dev/OSV-2024-817 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000817 err_not_vulnerable_based_on_repology
OSV-2024-395 https://osv.dev/OSV-2024-395 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000395 err_not_vulnerable_based_on_repology
CVE-2023-6992 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 zlib 5.5 1.3.1 1.3.1 1.3.1 zlib 2023A0000006992 err_not_vulnerable_based_on_repology
CVE-2023-4039 https://nvd.nist.gov/vuln/detail/CVE-2023-4039 gcc 4.8 13.3.0 2023A0000004039 err_missing_repology_version
OSV-2023-1307 https://osv.dev/OSV-2023-1307 libbpf 1.4.7 1.4.7 1.5.0 libbpf 2023A0000001307 err_not_vulnerable_based_on_repology
OSV-2023-877 https://osv.dev/OSV-2023-877 libbpf 1.4.7 1.4.7 1.5.0 libbpf 2023A0000000877 err_not_vulnerable_based_on_repology
MAL-2022-6425 https://osv.dev/MAL-2022-6425 tbb 2021.11.0 2022A0000006425 err_missing_repology_version
MAL-2022-4301 https://osv.dev/MAL-2022-4301 libidn2 2.3.7 2.3.7 2.3.7 libidn2 2022A0000004301 err_not_vulnerable_based_on_repology
OSV-2021-777 https://osv.dev/OSV-2021-777 libxml2 2.13.4 2.13.5 2.13.5 libxml2 2021A0000000777 err_not_vulnerable_based_on_repology
RUSTSEC-2019-0006 https://osv.dev/RUSTSEC-2019-0006 ncurses 6.4.20221231 6.4.20221231 6.5 ncurses 2019A0000000006 err_not_vulnerable_based_on_repology
CVE-2016-2781 https://nvd.nist.gov/vuln/detail/CVE-2016-2781 coreutils 6.5 9.5 9.5 9.5 coreutils 2016A0000002781 fix_not_available

@Fredi-raspall
Copy link

As far as I understand, the container is not used at the moment. Remove related files and definitions from the repository.

If I'm wrong and if we want to keep the container, now or for the near future, feel free to ignore and close the PR :)

I was not aware that this was in this repo. Happy to review it !

Fredi-raspall
Fredi-raspall previously approved these changes Jan 16, 2025
Copy link

@Fredi-raspall Fredi-raspall left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me @qmonnet , thanks.
A pity that 362f54f cannot be reverted cleanly.
I have to finish the work on building FRR images from our repo, both for development and production. So far I have not used using nix nor just. I may port what I have if folks prefer that tooling (.... but can't promise 😃 ).

@daniel-noland
Copy link
Collaborator

I'm ok with this one if we prefer the other tooling. That said, I do think nix is a very strong choice for this task.

If we want to remove frr here we should also remove a few other things added to support it.

As @Fredi-raspall pointed out, the commit which introduced these changes was not ideal.

Perhaps we should discuss in our next meeting and I can explain my thinking on why I chose that particular approach.

Note that the original motive was just to understand the FRR plugin system.

Copy link
Contributor

Outdated packages (gnu64):

priority nix_package version_local version_nixpkgs version_upstream
11 mimalloc 2.1.7 2.1.8 3.0.1
11 llvm 19.1.4 17.0.6 19.1.7
11 llvm 19.1.4 19.1.6 19.1.7
10 coreutils 9.5 9.5 9.6
10 isl 0.20 0.24 0.27
7 openssl 3.3.2 1.1.1w 3.4.0
7 openssl 3.3.2 3.3.2 3.4.0
6 libxcrypt 4.4.36 4.4.36 4.4.38
5 ncurses 6.4.20221231 6.4.20221231 6.5
5 perl 5.40.0 5.40.0 5.40.1
4 tzdata 2024b 2024b 2025a
4 kmod 31 31 33
4 numactl 2.0.18 2.0.18 2.0.19
4 sqlite 3.46.1 3.47.2 3.48.0
2 dpdk 24.11 24.07 24.11.1

Copy link
Contributor

Vulnerable packages (gnu64):

vuln_id url package severity version_local version_nixpkgs version_upstream package_repology sortcol classify
CVE-2024-13176 https://nvd.nist.gov/vuln/detail/CVE-2024-13176 openssl 3.3.2 3.3.2 3.4.0 openssl 2024A0000013176 err_not_vulnerable_based_on_repology
CVE-2024-9143 https://nvd.nist.gov/vuln/detail/CVE-2024-9143 openssl 4.3 3.3.2 3.3.2 3.4.0 openssl 2024A0000009143 err_not_vulnerable_based_on_repology
OSV-2024-1209 https://osv.dev/OSV-2024-1209 libxml2 2.13.4 2.13.5 2.13.5 libxml2 2024A0000001209 err_not_vulnerable_based_on_repology
OSV-2024-817 https://osv.dev/OSV-2024-817 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000817 err_not_vulnerable_based_on_repology
OSV-2024-395 https://osv.dev/OSV-2024-395 libpcap 1.10.5 1.10.5 1.10.5 libpcap 2024A0000000395 err_not_vulnerable_based_on_repology
CVE-2023-6992 https://nvd.nist.gov/vuln/detail/CVE-2023-6992 zlib 5.5 1.3.1 1.3.1 1.3.1 zlib 2023A0000006992 err_not_vulnerable_based_on_repology
CVE-2023-4039 https://nvd.nist.gov/vuln/detail/CVE-2023-4039 gcc 4.8 13.3.0 2023A0000004039 err_missing_repology_version
OSV-2023-1307 https://osv.dev/OSV-2023-1307 libbpf 1.4.7 1.5.0 1.5.0 libbpf 2023A0000001307 err_not_vulnerable_based_on_repology
OSV-2023-877 https://osv.dev/OSV-2023-877 libbpf 1.4.7 1.5.0 1.5.0 libbpf 2023A0000000877 err_not_vulnerable_based_on_repology
MAL-2022-6425 https://osv.dev/MAL-2022-6425 tbb 2021.11.0 2022A0000006425 err_missing_repology_version
MAL-2022-4301 https://osv.dev/MAL-2022-4301 libidn2 2.3.7 2.3.7 2.3.7 libidn2 2022A0000004301 err_not_vulnerable_based_on_repology
OSV-2021-777 https://osv.dev/OSV-2021-777 libxml2 2.13.4 2.13.5 2.13.5 libxml2 2021A0000000777 err_not_vulnerable_based_on_repology
RUSTSEC-2019-0006 https://osv.dev/RUSTSEC-2019-0006 ncurses 6.4.20221231 6.4.20221231 6.5 ncurses 2019A0000000006 err_not_vulnerable_based_on_repology
CVE-2016-2781 https://nvd.nist.gov/vuln/detail/CVE-2016-2781 coreutils 6.5 9.5 9.5 9.6 coreutils 2016A0000002781 fix_not_available

@qmonnet
Copy link
Member Author

qmonnet commented Jan 22, 2025

[...] Perhaps we should discuss in our next meeting [...]

I'm fine keeping it as well if there's any motivation for it, I didn't mean we have to remove it - I was mostly trying to clean up the repo (and the generated container images). Yep, let's discuss it next time

@mvachhar
Copy link

mvachhar commented Feb 3, 2025

What is the status of this PR? Are we closing it, or fixing the signoff error, reviewing, and merging?

@qmonnet
Copy link
Member Author

qmonnet commented Feb 3, 2025

Personally I don't mind either way. I opened this to clean up the repo, because I thought we had no reason to keep these bits. If there's any interest in keeping them for now, for using the FRR container here or just as an example workflow for building the container, we can close the PR. I was a bit hasty to clean up stuff last time, after all.

@daniel-noland
Copy link
Collaborator

I vote that we close this for now. I think this feature will be helpful shortly

@mvachhar
Copy link

mvachhar commented Feb 3, 2025

Closing as per Daniel's suggestion.

@mvachhar mvachhar closed this Feb 3, 2025
@daniel-noland daniel-noland deleted the pr/qmonnet/no-frr branch February 4, 2025 04:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants