retire bullseye images

we've completed the bookworm upgrade in %Debian 12 bookworm upgrade, at least as far as physical machines are concerned.

but we're still building bullseye images here!

figure out a way to stop doing that and retire those images. i think that implies doing a survey of the consumers of that image across gitlab and pinging those people, or perhaps just sending an announcement with a timeline?

changed milestone to %Debian 12 bookworm upgrade

added Backlog label

mentioned in issue #3

mentioned in commit fabric-tasks@74340468

mentioned in commit fabric-tasks@fcc27920

marked this issue as related to team#42014 (closed)

mentioned in issue team#42014 (closed)

It's not perfect by any means but this command is able to find a bunch of repositories where the bullseye image is still used:

find /var/opt/gitlab/git-data/repositories/@hashed -type d -name \*.git -not -name \*.wiki.git -exec bash -c "test -e {}/HEAD && test -n \$(sudo -u git git -C {} rev-list -n1 --all) && sudo -u git git -C {} grep :bullseye HEAD -- .gitlab-ci.yml && echo {}" \;

It's possible many of those hits are actually old, unmaintained forks.

mentioned in commit fabric-tasks@c4815554

Among projects using the bullseye image we have tpo/core/tor:

https://gitlab.torproject.org/tpo/core/tor/-/blob/main/.gitlab-ci.yml?ref_type=heads

the following projects have :bullseye in their .gitlab-ci.yml. i didn't find any container built on top of bullseye:

'@hashed/03/59/0359bdb72fa3b3ee4adfdfcae848c4b5cc3c889bc7400efc01051e9cd67482c9',
'@hashed/0d/58/0d589a18c4705f5616ce3205ad85bd59da85fa0c40eaefbee054f7f863f3cb1a',
'@hashed/11/70/117019447c8cafa16c8c15c79e694a1b2e99bd3adc86a9121856b3fc810879f3',
'@hashed/12/ef/12ef84e911f067ffecf360fd7da8ca02a96a380baa8b9c711908e29c8d67a370',
'@hashed/14/4d/144dc53d5dff011b70e273ff282f86c2976c8268811315f548ae013705941ba8',
'@hashed/16/a3/16a3e9e922b41fde13be3ae377b18e08d44fb136594e7f9819ff2ac75bab5516',
'@hashed/17/c7/17c7f8a2457a4b725d6d5f6b2e2ac67bd74933d9633436bd2756a6920ef5a705',
'@hashed/18/28/1828526428f17576e6581a0b9c893ecf79c1fdc20f495f0bdc98b559b25b92a6',
'@hashed/18/be/18bed1232c7d6375b760860a0c1904bf560a92b8cec0965fda4c244bb5c55e49',
'@hashed/1a/af/1aaf97e300d50bacc554c8c27a1b9687dde34e6754b8de3759dd0ab844477e37',
'@hashed/1b/c3/1bc3201a9f24a2fe48f634f90d406aaf6cbf5e36e292870ecba98d74b065ee1b',
'@hashed/21/11/21113a3f71a6ecda7311c6e8539d1c9bd9949d3e6f23fbf4bcc781f96b30083a',
'@hashed/22/a2/22a2fa7d04248931a8853a7714b86546610afd01b2b1841890e979ba7ba6bcae',
'@hashed/23/cd/23cd823b961b630ed4052bcb4fde5247f69eb59433c00b541abe8bde8d0bdbeb',
'@hashed/26/2f/262fbc155dc2e68571f7fa9487fd573282232b97a1c23dbf398f41fd8eaf175b',
'@hashed/29/20/2920b9489aa3f6afda2de41a7154c767e3dd4f564a184739efc93af235a83bc2',
'@hashed/29/86/298647699bcb31c22e6d6486891b637b28f1c3cf4d0cf710ce5ce775f9a1e4d3',
'@hashed/2e/67/2e67088920b9fb6f999ee9b942970a752ef35633c68f23da65367c4da9a3443d',
'@hashed/2f/11/2f11192801e83bf30f01139f338c5cf52a5e5cdf3e5b7c2d3ef5b051e9fd1fde',
'@hashed/32/39/32396038fca01cb69d2c44b0964624d1fe461c9780cffc7f95582a8aa977c2a1',
'@hashed/33/cc/33cc6da30d940c4ffa0caeecac021a427f610fc8c8b8dfaff690adbb70bff7fe',
'@hashed/36/ab/36ab771eba23f49d7ae43af88c601f3de8fccb201250906a4085444ae765f2db',
'@hashed/39/49/3949ac1596ec77106a709a618bf5adcb19b77537ce8bcbdf54ff830169cdd084',
'@hashed/39/6b/396b8e65a84afe48d62b470e74299638c2d9144bafba47b6027bf1b388010dbd',
'@hashed/3a/89/3a892eea646c4e4fc44df3a264545ce2e51f4bdc752cbd996dae588e5c839602',
'@hashed/3b/1f/3b1fba0616142d348bd8a977e3aa3d65dab82a5ac11ed16d4e22ff5460458d4f',
'@hashed/3c/98/3c98b2624d1e35016ae337691a8bdce3a639429a9cb34c3e7e04842ab8904b64',
'@hashed/42/f2/42f25adecf47629878e89e31b2073d1af009c9c76f4140a06313af5e5950eabc',
'@hashed/45/1b/451b01cbb6bdda2450c47423173e5655a3760dd6b130d95005d3b14600f21173',
'@hashed/47/39/4739ee3bd29e4f415da8ba9298a087e0fdc9c61378420ba8fbbab298bd74c4df',
'@hashed/47/53/4753e699ede615170936d7dd4c55a57c11c2965a2f8854e9d5738a387aa11e3a',
'@hashed/48/30/483029d526219f816e8e8f6a9de07b422633dba180ffc26faac22862a017519f',
'@hashed/48/fe/48fe0661615dd0a2fc9cf1b77111613b4c3e7fc857b7bf89e472c233a0b35eb0',
'@hashed/49/98/49982c8e082e073b414ede8160c20679bf7432eab323bc981d96cf9205b9cf53',
'@hashed/4b/9a/4b9a7f50c0bb198c6f5414c5a8459f5d216d34ab521ea94c060ea35cac66f900',
'@hashed/4c/3a/4c3aada37cf7fd3819b2da502a15f78f7ce5a2ce6d584b630344ff00dffc74ac',
'@hashed/4d/a3/4da317481dcf5fbe44d38ef3bfcddef1080705af9f486c0a354851849a4ac242',
'@hashed/4e/12/4e12486c3a0f8fa2dae48d8dbce2a52e30db7ac114acdadf2357c28ace86c1a2',
'@hashed/50/78/5078264a209e1ee0e3a8a46a11d840dfd1879500f7fd02aef1f8b6a2276a5be9',
'@hashed/50/82/50828327cbf487d99d22c77ef8f980e5d7c8b93e2a1d1b084e2dc6760240e738',
'@hashed/52/55/52558cb584c322ce06bc71777ddf400d2585bec7e64a888334aca9c24b016287',
'@hashed/54/a4/54a462dce3c1abb2b43ba63a42bc391fa5561bfeafe737bd1f4845b902ffbfe3',
'@hashed/55/04/550438f15e5abf7dc9415357b0db9334c912dfc00d5542c125231df27daa82ad',
'@hashed/55/14/5514a9f709310b22ee9bddd4e6da1b2b8b04d1ad5c3dcb47ed945c356b9b852d',
'@hashed/57/d2/57d24fbc37a0596d5dbad9f86accacf04ab8e2875a084cb2202244c421d1c65f',
'@hashed/58/eb/58eb0dd988df36c54ae88fcf58afcd0a69944c335d82dfbe68094063f54f4363',
'@hashed/59/a6/59a6d3288187dfcd54bb45d3ab2d4f073617978a981f2e5e07f6d4cfee470114',
'@hashed/59/c4/59c4d02848bada0d98508d51ff67b1a057ee8c537b90ab34873f61df7dc33c41',
'@hashed/5b/33/5b33003a928495b97792ac286d477b54dd20eb773c74ae2fb3653bc5950ad6dd',
'@hashed/5c/7a/5c7a722d8d8f97d6d923396f673c15bab9722658cbe5ab24438a3ddadde5403f',
'@hashed/5e/38/5e387e075b1e55bb4cee37981404386671c0d18d82eaf5decd10f9f2daee8a05',
'@hashed/60/5e/605e9e90d5370dfd14f2b61f34cbc58c2c9cf5686160cc483a0c5a4b4f421fc9',
'@hashed/60/fb/60fb27b6df84e9fc873d3a2bda51e22fead7708c19a636d4650f75db7a590628',
'@hashed/62/c4/62c488bbaded8ff5903a5b55b345a49d74385768c7e5601aa5d0b6126dd694b5',
'@hashed/68/73/68732e61c9a20e1c9ae05bc99a950847d3731293978ae442fe50323044c6a095',
'@hashed/68/fc/68fcd1eb684859a314bbf7f7c99037cead480f5bb209ccd4725bd319423e832f',
'@hashed/6a/17/6a175db84aeefddbe58bf92a5d67b372c78505c75b079912b89a0e599fe91317',
'@hashed/6c/c6/6cc6eefb674286f7d1a0e4adaa840670dafa7870f77c7d6d73d5924c44ce3bff',
'@hashed/6d/0a/6d0ae6d0fcd01bc8ab3fd34e8090e9c27031b52f68f6169a7e963915d31f3d17',
'@hashed/6d/78/6d78b19a042a64f08cc4df0d42fb91cd757829718e60e82a54e3498f03f3ef32',
'@hashed/6d/ba/6dba77308243555a9aa265b68f884ed5e51a46beb48d07fdf5fdba47f20e728a',
'@hashed/70/54/7054d0451000f27e0673c136e684b10beee8f4d6d9d04f964a92345a92cb17ef',
'@hashed/71/2d/712dca40936b39ce670dc803736fe3735cf99311030a928de039a36f77926230',
'@hashed/74/32/74327943f791e17b6081b590be47d518d885b79972d37087df480448e0672094',
'@hashed/75/ab/75ab3e0a8f99144f9c4420698980b6f76f85996b520937c7043a29e18527bfef',
'@hashed/75/ab/75abf1771c0d9038e45203aa603758410f2418fd29b3fe0c25534009c579bb8e',
'@hashed/76/d6/76d6a8153b2e6ea49abf44111408f3d25887ddab9af37284a025d1b8febac3c1',
'@hashed/78/e3/78e370b587b145920213731b7c7c725e512b3b6577c51c800218a7c764c532ae',
'@hashed/79/05/79059b443ce844d9e9fd0f26e064e6ccf02d9481285936b908449be0d74c93f1',
'@hashed/7a/c2/7ac25d5d84cae3dcc037c52a93dfe320fe83b2a6abe787451b4fc15aeba2c9e7',
'@hashed/7a/c7/7ac7a7fb16bdf38f677eef82fc5b7b9d7ea1666f8cfb9b47ad192569ed09a767',
'@hashed/7b/4f/7b4f6f46093c9812bff7745ec3bc0f70d49ad40f18ae3bba91f719f15c0571f7',
'@hashed/7e/3d/7e3db2c53a88a81408d72790cd323f8a8a27fafe588c2fab87e4a4d3f437228c',
'@hashed/80/12/8012472a35fd40939e08041936918ad9f975579bff2519a6fa568774057a799c',
'@hashed/80/8c/808c9cfebd38d4d93da5bb3b32be7e39cbb403672c5ce39b83bffe7d5660b114',
'@hashed/82/14/82147211de4c4b846e2cf7a2edac668990dff673d07bebcb2c9eae6aeb2c5963',
'@hashed/88/83/88831144c552348a6df88c9a58528323d0e5f7da3c67e213fffdba38ac6617c1',
'@hashed/88/a8/88a8b05b0a6492f5f0b4f45b6ff5d756182b1ea12bb924ec5a36a4febc85be99',
'@hashed/8e/57/8e57858ab42fef1ee804b572421beb315e9fb3bd562f10f2f1c9ccf0384e8d99',
'@hashed/8e/69/8e690b5f73876692494576ad7fe9842af66e5d2ad2809ae42d1db67c3b2299de',
'@hashed/8f/84/8f8472a2f6ec348bfc7577a035c7f34a04c62f0c757b54687e1175236dcf393b',
'@hashed/90/3a/903a4207be29cb52c7c28b6b3e83b7bea776a390167924fe8ff18aa325f10285',
'@hashed/90/d4/90d441ee3fce238cd433ff208078e8d4351fb2969f9ed6b595e588ed7ead5d4e',
'@hashed/92/a6/92a6a32f99def322d70ea1167a99c6859ab4e8bbc593b997ec5994d244a82475',
'@hashed/93/4a/934aa7be7deafc0053e92ce49a029603af8bc0b3891322a10b7ab730dfaa5d63',
'@hashed/94/b5/94b5f1a3ab64f53bad1d65c01057abd668669ffec5aa04c28441f7dbd524c69b',
'@hashed/95/32/9532f197bbc85d99b5be01eb362f1314104016f8bf1283174864836d9433c084',
'@hashed/95/f1/95f180e417e425f00e97c5a95bfe534c0b1c90d9d8115c9acad2c04c8d6cb246',
'@hashed/98/b1/98b1690510df1bf21fe13018a2641b19c7f3871f289b523b395d0bffa3574be9',
'@hashed/99/92/9992c69a82eaba0fc969138c6b27152615b3a57b09ed936bd09b75f1b80d0117',
'@hashed/9b/e3/9be3da431e0a833d2b07781de97ebbd0b14c274d16c0597820d9982a5f547cb3',
'@hashed/9c/09/9c09df9a4a57abedd4bf407f5f5ba2dc54b65079b0fd4f873d836c4a330d7488',
'@hashed/9c/19/9c19f29d0e6fefa21eec58f6ff4d0cf807b63d0ed146f1fea0874506b66c35ee',
'@hashed/9c/8d/9c8dd327d0f259b6facd68100f664c432101f783d31ac9b78b6e9eaf9fa786b8',
'@hashed/9e/08/9e088cddb90e91e1ec3e4cae2aee41bd65d74434c60749d67e12fa74d5de9642',
'@hashed/a0/11/a0119e19d7f710c158729bc4153a6996e891b54664262b502c7be665e0f2f042',
'@hashed/a0/7e/a07eccc182c743a46ab8e902635a7ba4ad53cb780b6b9ef0bec926c34e7b22aa',
'@hashed/a0/d9/a0d9819c456947674a4e0356dbc93efd2ca257a164b5aedb6b8430dfa8ac15aa',
'@hashed/a7/45/a7452d4e5f24e5a9623b8cc1f839c166e6650769a42c0266268f2dd77a6aa158',
'@hashed/a7/63/a7631504c6cdcec67bd30bb737a5aeee0018cda4c2382f7c142ef87037b26b6e',
'@hashed/a9/85/a985bb36df0be53b3487b4d0c57cae5ffdafcb3d0d50ffaea9f200c7b02ecf3f',
'@hashed/a9/91/a991b89eed28e85e1a7238873f922290111049668c680a68ee15201a611219b3',
'@hashed/aa/a6/aaa635313e40478b612d05958cfc10a9f44932746c2acb5a92031baee1dba2e4',
'@hashed/af/d0/afd0df92f8c4c962f5d0a303b9cf4c620f52a2a8d4442cc777bb2b3f291b6e0d',
'@hashed/af/d6/afd679cd3f9a81fd9ce02e6434a24f848937f09909fabcc3b3781e06036e284c',
'@hashed/b2/38/b2382de3cdaaf0c8e505cd370821d7842e493a1e64160dc6991b1109e2938a21',
'@hashed/b3/66/b366c0efba99d592b8ed6bd45529a964d775a5aac6eebe5cb09d5ca6156a6e66',
'@hashed/b4/c8/b4c8ac20a87e493a3dd30a6f16094149771660c1ae17fbab1e4adfef86c76091',
'@hashed/b8/47/b847856411aef26fd25bb2569b95a3538080ba0aaa4e9b35c53e3e70d31b0638',
'@hashed/ba/97/ba977edd7884f62cd595d30dc746605253ac8e5700b135ad515aac7adafa512c',
'@hashed/bd/3a/bd3a797ba948938978965781bd341bc0fc7711ed00e513b9c63a61cf3d916562',
'@hashed/c0/0c/c00cf031587d12c309358e85de8876b2738d3ef2cadd88db6b07318ea0ba8973',
'@hashed/c0/d2/c0d2b0fe4d7671d1bb90703e6ab60ab14f01998648c45ba1da553283f8ab9dd6',
'@hashed/c2/47/c24703aeed68217acf9520dddea6b3673e11e493dde7d6944bcaac0bd3a14448',
'@hashed/c6/3b/c63bd0d975c69098ee4739650068349dd2812231b5b0a17c0772093ef07bbebd',
'@hashed/c6/d5/c6d537e112156be1afbb8a5a85221ff4d95e2461f83f03425549ff42dee7a278',
'@hashed/c7/d8/c7d86cb26af8d4344b7d1fc85fe37600940312901528d0977702f129cddf49ff',
'@hashed/cc/6a/cc6aed2709b80e146bebc151f1cf1dec5e323b58148535a433529155030e3a52',
'@hashed/cc/9c/cc9cf5d8f89bae4aff9b2a1f98bc8c5a9b380be95caf7136286adafc8bd75f5f',
'@hashed/ce/63/ce63ea0809ce32335dd7692f1e0c6c5f3493f2b4039351662b60741de4d9a9bd',
'@hashed/cf/3b/cf3b763a62724306dca2a00ed53a7c0a19074286e40b8f0b96544ccbab4aaae2',
'@hashed/d0/ab/d0ab864a17dbd8a07dda05a58ac74d4894b7effa8e1c5152d71adf8b1fcc24d9',
'@hashed/d8/d0/d8d0dedb4bda4204d0b5e1de5a990a00757aa2d80a64bd97699cad3b3d6fbf5f',
'@hashed/da/2c/da2c575e48ee7651b9e99a511216b827ef6dea7ca08e77c7055b18b9d918a842',
'@hashed/da/56/da567b5f09f055a646df0e74c6014785930a8d207b22964868153f872b9bf9cf',
'@hashed/da/b2/dab2e78c8b5b1d04c09908172faba7f5433f4ab79c95bc73dca3d18695532476',
'@hashed/de/ec/deeced0756445f4466bd032c573b0c4c48ad83a7c13b17bc15e6f73e22fbe7ae',
'@hashed/e0/b3/e0b372a86dbfe71bdb7bf19790cacabd2ad2c4d145087a94d842fe6ffe2eef8b',
'@hashed/e1/40/e1406f532a84b02f7b7645f2c4041c0dc25c70f10a5f0bb769efa589bcbf492f',
'@hashed/e3/9e/e39eef82f61b21e2e7f762fcc4307358f165757f2e77ec855d6992f7e0191932',
'@hashed/e8/6d/e86d40bcfa645d4ddf651e9ff464144243505d98b94f25810d0879adca55cc17',
'@hashed/ea/27/ea279eca5412c45d2c582a3971b688b3e13cdb893f7bba5c5faaea499fa21ffd',
'@hashed/eb/86/eb861137efa007794537eac2795cec2e0f87e13e4dce41b303cc45d9794761ed',
'@hashed/ec/1c/ec1c7d93ba051204e4fea7e167f540c2136769c82329c53f5b7a0770bb237987',
'@hashed/ec/2f/ec2f62c81490e1293397a7997058b2325b2cbf48f88defa2df5f1c0b93fa0e81',
'@hashed/ec/d6/ecd6512bdf3b727d065dec7da7b0523023594a474c7fb63bf0efce1e8d080da6',
'@hashed/ed/04/ed0478973a6c233d4cba8a20af7c6a156599c88e5f6dfdd8ea10cdbf2c8c4cfd',
'@hashed/ef/58/ef5839d610a3567ed8e2b6df29dce544e3fb9ffbaf45f507b3a69fbc5e81f507',
'@hashed/f1/ee/f1ee529ef49111208f1c1646c53c8c311c9f093fd7891c1b46d77e98210b018d',
'@hashed/f3/45/f3457dabe1b412ed6374d56fe8fe3b969c761b77dcc80ecc0964b7c7641d219b',
'@hashed/f5/09/f5095cd644fbe157a3ebc71d3e3212530f58e6d8a88c400c811314f217278c59',
'@hashed/f5/ef/f5efb6e05e55f7eda6e88bec2eec69e6e2919cce997d7da9e6723e71b3021a87',
'@hashed/f8/04/f804663d999ea924c7537b90bfa97955add47fb390ccda98c0ea1647c48b782c',
'@hashed/fb/84/fb84a9739699e1a2c6c56b5baa0a16047a4d845a5c6615ab9e18bafe688f45d6',
'@hashed/fc/00/fc0070172d31ea7489a24d37e0b836baf4fc2b9f9a91250760a905008b8666df',
'@hashed/fd/68/fd68fcf88c30b4df82ec214bb6b559ede1a5d47f3b1f751524177b998bb6bbdd',

those are:

0x00A5/snowflake
0x00A5/tor
agix/rdsys
agowa338/tor
ahf/debian-tor
ammarfaizi2/tor
anarcat/tor
Andy/tor
arkadiy/onionspray
atari/webtunnel
bauruine/debian-tor
bauruine/onionspray
cece/rdsys
cohosh/geoip
cohosh/probetest
cohosh/snowflake
cve/chutney
dangowrt/snowflake
DanWin/tor
dcf/snowflake-private
delroth/tor
dgoulet/tor
diunisu/tor-pqc
dzwdz/tor
eas/tor
egypcio/tor
eighthave/snowflake
emmapeel/rdsys
excurso/tor
Flo418/snowflake
friendly73/tor
gabi-250/tor
Gedsh/tor
Gedsh/webtunnel
gk/tor
gogo2464/tor
GoncaloRodri/differential-privacy-tor
gotlou/tor
guest475646844/test0001
guest475646844/test0012
gus/bridgestrap
gus/tor
gus/webtunnel
haxxpop/tor
Hello71/tor
hirenpatel/tor
hiro/tor
itchyonion/rdsys
jacobo/webtunnel
jag/vpn
jarl/snowflake
jarl/tor
jnewsome/tor
jnewsome/tor-core
juga/rdsys
juga/tor
KingAnointing/rdsys
KokaKiwi/snowflake
kpcyrd/tor
kwadronaut/vpn
laerehtE/tor-typo-fix
landloard/tor
lavamind/debian-tor
lavamind/tor
ldqr/tor
legacy/gitolite/user/andrea/tor
legacy/gitolite/user/art/tor
legacy/gitolite/user/atagar/tor
legacy/gitolite/user/brade/meek
legacy/gitolite/user/chiiph/tor
legacy/gitolite/user/erinn/tor
legacy/gitolite/user/hoganrobert/tor
legacy/gitolite/user/huseby/tor
legacy/gitolite/user/ioerror/tor
legacy/gitolite/user/isis/tor
legacy/gitolite/user/iwakeh/tor
legacy/gitolite/user/karsten/tor
legacy/gitolite/user/linus/tor
legacy/gitolite/user/rransom/tor
legacy/gitolite/user/shondoit/tor
legacy/gitolite/user/sjm217/tor
legacy/gitolite/user/special/tor
legacy/gitolite/user/weasel/tor
luciole/rdsys
luciole/snowflake
meskio/tor
micah/onionspray
micah/rdsys
mikeperry/tor-pow-test-set
mikeperry/tor-private
muellerrAtDickinsonDotedu/tor
neel/tor
NeonVapor/tor
nlguerra2003/tor
nomandhoni/snowflake
nonameformee/tor
oliver/tor
omnia04/tor
onyinyang/bridgestrap
onyinyang/rdsys
orbea/tor
pierov/debian-tor
pierov/tor
pjsier/snowflake
pmu-ipf/tor
pranitpatil3112/snowflake
pseudonymisaTor/tor
qontinuum/tor
r0cket/tor
rhatto/onionspray
rhatto/tor
sambhavsaxena/snowflake
sergi/tor
shelikhoo/rdsys
sina/webtunnel
skaluzka/tor
Spydar007/tor
ssouth/tor
stayanon/tor
syphyr/tor
TheEnbyperor/tor
thesamesam/tor
tornetns/tor
tpo/anti-censorship/bridgestrap
tpo/anti-censorship/geoip
tpo/anti-censorship/pluggable-transports/meek
tpo/anti-censorship/pluggable-transports/webtunnel
tpo/anti-censorship/rdsys
tpo/core/chutney
tpo/core/debian/tor
tpo/core/tor
tpo/core/tor-ci-win32
tpo/onion-services/onionspray
tpo/tpa/userdir-ldap
tpo/web/docs
trinity-1686a/snowflake
trinity-1686a/tor
twofaktor/tor
valdaarhun/tor
ValdikSS/tor
Vort/snowflake
Vort/tor
weasel/citest-2022-06
yanmaani/tor
yimikao/rdsys
ZachLiebl/zach-liebl-tor

out of that, those seem to be the most important projects:

tpo/anti-censorship/bridgestrap
tpo/anti-censorship/geoip
tpo/anti-censorship/pluggable-transports/meek
tpo/anti-censorship/pluggable-transports/webtunnel
tpo/anti-censorship/rdsys
tpo/core/chutney
tpo/core/debian/tor
tpo/core/tor
tpo/core/tor-ci-win32
tpo/onion-services/onionspray
tpo/tpa/userdir-ldap
tpo/web/docs

Everything else in there seems to be forks or at least personal repos.

I think tpo/core/tor#41029 (closed) is going to take care of a lot of those. I'll file an issue with anti-censorship and onion-services, and take care of our stuff (TPA and web).

update: the above is all images, including upstream dockerhub. we should probably worry only about our images, here's a new set:

root@gitlab-02:/# sudo -u git find /var/opt/gitlab/git-data/repositories/@hashed -type d -a -name '*.git' -exec sh -c 'git -C {} grep -q 'containers.torproject.org.*:bullseye' HEAD -- Dockerfile Containerfile .gitlab-ci.yml 2>/dev/null && echo {}' \; | tee /root/projects-our-registry.list
/var/opt/gitlab/git-data/repositories/@hashed/14/4d/144dc53d5dff011b70e273ff282f86c2976c8268811315f548ae013705941ba8.git
/var/opt/gitlab/git-data/repositories/@hashed/a0/7e/a07eccc182c743a46ab8e902635a7ba4ad53cb780b6b9ef0bec926c34e7b22aa.git
/var/opt/gitlab/git-data/repositories/@hashed/4d/a3/4da317481dcf5fbe44d38ef3bfcddef1080705af9f486c0a354851849a4ac242.git
/var/opt/gitlab/git-data/repositories/@hashed/5c/7a/5c7a722d8d8f97d6d923396f673c15bab9722658cbe5ab24438a3ddadde5403f.git
/var/opt/gitlab/git-data/repositories/@hashed/9b/e3/9be3da431e0a833d2b07781de97ebbd0b14c274d16c0597820d9982a5f547cb3.git
/var/opt/gitlab/git-data/repositories/@hashed/3a/89/3a892eea646c4e4fc44df3a264545ce2e51f4bdc752cbd996dae588e5c839602.git
/var/opt/gitlab/git-data/repositories/@hashed/49/98/49982c8e082e073b414ede8160c20679bf7432eab323bc981d96cf9205b9cf53.git
/var/opt/gitlab/git-data/repositories/@hashed/da/56/da567b5f09f055a646df0e74c6014785930a8d207b22964868153f872b9bf9cf.git
/var/opt/gitlab/git-data/repositories/@hashed/8e/69/8e690b5f73876692494576ad7fe9842af66e5d2ad2809ae42d1db67c3b2299de.git
/var/opt/gitlab/git-data/repositories/@hashed/42/f2/42f25adecf47629878e89e31b2073d1af009c9c76f4140a06313af5e5950eabc.git
/var/opt/gitlab/git-data/repositories/@hashed/ef/58/ef5839d610a3567ed8e2b6df29dce544e3fb9ffbaf45f507b3a69fbc5e81f507.git
/var/opt/gitlab/git-data/repositories/@hashed/c7/d8/c7d86cb26af8d4344b7d1fc85fe37600940312901528d0977702f129cddf49ff.git
/var/opt/gitlab/git-data/repositories/@hashed/62/c4/62c488bbaded8ff5903a5b55b345a49d74385768c7e5601aa5d0b6126dd694b5.git

that subset is:

neel/tor
stayanon/tor
tpo/core/chutney
twofaktor/tor
cve/chutney
GoncaloRodri/differential-privacy-tor
rhatto/onionspray
gogo2464/tor
tpo/core/tor
r0cket/tor
meskio/tor
tpo/onion-services/onionspray
omnia04/tor

so essentially, only onionspray and core tor need fixing.

mentioned in issue tpo/anti-censorship/team#160 (closed)

mentioned in issue tpo/onion-services/onionspray#64 (closed)

marked this issue as related to tpo/onion-services/onionspray#64 (closed)

marked this issue as related to tpo/core/tor#41029 (closed)

assigned to @anarcat

figure out a way to stop doing that and retire those images. i think that implies doing a survey of the consumers of that image across gitlab and pinging those people, or perhaps just sending an announcement with a timeline?

i did such a review, only core tor and onionspray use our stuff, so it seems simpler to just do it, once people have switched over.

added Needs Review label and removed Backlog label

mentioned in issue tpo/core/tor#41029 (closed)

mentioned in commit anarcat/base-images@759ae244

mentioned in merge request !40 (closed)

closed with commit f61fea0a

reopened

We're still building Tor packages for bullseye. Should we drop those as well?

in this repository?

if not, i'd say it's out of scope here.

if so, yes, drop.

but i thought that tor/core/tor#41029 was the one supposed to take care of tor.

in this repository?

Not in this repository, rather, tpo/core/debian/tor builds backports for bullseye and this requires a bullseye image. If we remove the image, this means these backports will stop, and support will thus officially be droppped. I mean, I'm not too worried at this point, but we can't say its completely out of support currently.

but i thought that tor/core/tor#41029 was the one supposed to take care of tor.

That took care of the tor test suite, essentially. The package building CI is in tpo/core/debian/tor, as you know.

I guess this begs the question, what's our policy here for old Debian and Ubuntu releases, given that these images are also being used to build and ship software to downstream users?

I guess this begs the question, what's our policy here for old Debian and Ubuntu releases, given that these images are also being used to build and ship software to downstream users?

I was assuming we would retire the oldstable images alongside completing the upgrade to stable/testing, but it's true it might merit more leniency. Perhaps we remove release N when we finish the upgrade to N+2? In this case, we'd restore bullseye and remove it when we complete the trixie upgrade?

I mean in the trixie upgrade proposal, i explicitly proposed removing the bookworm images at the end of the trixie upgrade (somewhere in 2026), so bullseye is far gone, in that context.

What do you think?

Now that I think of it, I think I'd prefer if we aligned the image builds here with the upstream lifecycle of the releases themselves.

I guess I don't really see why the build roster should follow TPA's own upgrade schedule. Am I missing something?

In addition, if we say we align with the upstream lifecycle of Debian and Ubuntu releases, that would give much better predictability for other teams (in terms of what build/testing environments we support) and for downstream users (in terms of what platforms are supported).

That being said, I think this policy would apply to the "bootstrap" images, and we could afford ourselves more flexibility for the other images (eg. podman, python et al)

Now that I think of it, I think I'd prefer if we aligned the image builds here with the upstream lifecycle of the releases themselves.

But what does that mean, concretely? Debian's bullseye has ended at debian.org already, last August. It's supported by the Debian LTS, but that's not "official" upstream. There's also ELTS.

In Ubuntu land, it's even worse: their "ELTS" is non-free... Should we support that as well? :)

I guess I don't really see why the build roster should follow TPA's own upgrade schedule. Am I missing something?

I thought it was just being coherent.

In addition, if we say we align with the upstream lifecycle of Debian and Ubuntu releases, that would give much better predictability for other teams (in terms of what build/testing environments we support) and for downstream users (in terms of what platforms are supported).

Well, we've just started providing container images, so I'm not sure people had any expectations or anything, we're really just making this up as we go.

That being said, I think this policy would apply to the "bootstrap" images, and we could afford ourselves more flexibility for the other images (eg. podman, python et al)

Okay, so if I can rephrase your proposal, i think what you're proposing is:

• assume stable is N, old stable is N-1 and testing or "the next stable after" is N+1

• base-images, in general, should follow TPA's support schedule, which is that we retire old stable (N-1) when we finish upgrading to stable (N) and we start upgrading to stable during the freeze

• "bootstrap" images (which I guess is the debian images?) should support oldstable (N-1) longer, until we finish upgrading to the next stable (N+1)

Does that sound about right?

Does that sound about right?

in any case, i took note of that issue in team#41990 (comment 3181336) and the next step here is likely to restore bullseye images for debian images here until we complete the trixie upgrade.

talked about this with @lavamind and a few points came up:

• for bootstrap images (debian/ubuntu), he suggests we should support upstream OS as long as they do, and by that he means "LTS", essentially, for both Ubuntu and Debian (and not LTS, and not "just stable" for Debian)
• for other images, we could just use the same policy, he doesn't feel the need to reduce the number of jobs or optimize the pipelines
• keeping more images will reduce friction with other teams
• he feels the policies between our base OS upgrades and the containers should be decoupled
• we observed that the bullseye retirement went smoothly
• anarcat likes the idea of keeping container images in lockstep with main OS upgrades as it provides an escape hatch for people

let's make a policy specifically for container images and remove that part from the trixie upgrade policy for now.

mentioned in issue team#41990