build-python3-image-root-user ○ success

Duration: 20s
Queued: 2s
📁 Stage: docker-image
🖥 Runner: linux-1
Average Duration
30s
This job: 20s
Failure Rate
0.7%
last 30 days

Job Execution Phases

💡 Tip: Click on any phase bar to jump to that section in the log below

Job Analysis

Job Status: Passed

Status: Job passed successfully

Full Job Log

399 lines
Match - of 0
1 23:36:11 Running with gitlab-runner 18.9.0 (07e534ba)
2 23:36:11 on gitlab-runner-linux-1-5b9cfd64ff-k5sg5 aP4tCsXyp, system ID: r_wQDtEh3nNZsL
3 23:36:11 feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_ENABLE_JOB_CLEANUP:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4 23:36:11 Resolving secrets
5 23:36:11 section_start:1777678571:prepare_executor
6 23:36:11 +Preparing the "kubernetes" executor
7 23:36:11 "CPURequest" overwritten with "2"
8 23:36:11 "MemoryRequest" overwritten with "4G"
9 23:36:11 Using Kubernetes namespace: gitlab-runner
10 23:36:11 Using Kubernetes executor with image registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac ...
11 23:36:11 Using attach strategy to execute scripts...
12 23:36:11 Using effective pull policy of [Always] for container build
13 23:36:11 Using effective pull policy of [Always] for container helper
14 23:36:11 Using effective pull policy of [Always] for container init-permissions
15 23:36:11 section_end:1777678571:prepare_executor
16 23:36:11 +section_start:1777678571:prepare_script
17 23:36:11 +Preparing environment
18 23:36:11 Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
19 23:36:11 WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
20 23:36:12 Subscribing to Kubernetes Pod events...
21 23:36:12 Type Reason Message
22 23:36:12 Normal Scheduled Successfully assigned gitlab-runner/runner-ap4tcsxyp-project-621-concurrent-3-uablsxq0 to decimus
23 23:36:17 Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
24 23:36:17 Normal Created Created container: init-permissions
25 23:36:18 Normal Started Started container init-permissions
26 23:36:19 Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
27 23:36:19 Normal Created Created container: helper
28 23:36:19 Normal Started Started container helper
29 23:36:19 Normal Pulling Pulling image "registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac"
30 23:36:20 Normal Pulled Successfully pulled image "registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac" in 1.26s (1.26s including waiting). Image size: 49989654 bytes.
31 23:36:20 Normal Created Created container: build
32 23:36:23 Normal Started Started container build
33 23:36:24 Running on runner-ap4tcsxyp-project-621-concurrent-3-uablsxq0 via gitlab-runner-linux-1-5b9cfd64ff-k5sg5...
34 23:36:24
35 23:36:24 section_end:1777678584:prepare_script
36 23:36:24 +section_start:1777678584:get_sources
37 23:36:24 +Getting source from Git repository
38 23:36:25 Gitaly correlation ID: 01KQJYCNVGJ4P3SFB3W0H797J8
39 23:36:25 Fetching changes with git depth set to 1...
40 23:36:25 Initialized empty Git repository in /build/internal/gitlab-templates/.git/
41 23:36:25 Created fresh repository.
42 23:36:25 Checking out 50468f6f as detached HEAD (ref is refs/merge-requests/636/merge)...
43 23:36:25
44 23:36:25 Skipping Git submodules setup
45 23:36:25
46 23:36:25 section_end:1777678585:get_sources
47 23:36:25 +section_start:1777678585:step_script
48 23:36:25 +Executing "step_script" stage of the job script
49 23:36:26 section_start:1777678586:section_pre_build_script_0[hide_duration=true,collapsed=true] $ function cleanup {
50 23:36:26 rv=$?
51 23:36:26 if [ $rv -ne 0 ]; then
52 23:36:26 echo ""
53 23:36:26 echo " Failure Cause Analysis might help, please open this link:"
54 23:36:26 echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
55 23:36:26 echo ""
56 23:36:26 fi
57 23:36:26 echo ""
58 23:36:26 echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
59 23:36:26 echo ""
60 23:36:26 echo ""
61 23:36:26 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
62 23:36:26 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
63 23:36:26 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
64 23:36:26 __date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
65 23:36:26 __date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
66 23:36:26 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
67 23:36:26 echo ""
68 23:36:26 exit $rv
69 23:36:26 }
70 23:36:26 trap cleanup EXIT
71 23:36:26 echo "INFO: This is the CI job pre_build_script"
72 23:36:26 echo "INFO: It's defined in the backend/infra/onprem/k8s repo."
73 23:36:26 echo "INFO: These additional Scandit variables are available to you:"
74 23:36:26 echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
75 23:36:26 echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
76 23:36:26 echo " SC_K8S_KYVERNO_PATCHES: |"
77 23:36:26 echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
78 23:36:26 echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
79 23:36:26 if command -v numfmt >/dev/null 2>&1; then
80 23:36:26 echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
81 23:36:26 else
82 23:36:26 echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
83 23:36:26 fi
84 23:36:26 __start_time=${EPOCHSECONDS}
85 23:36:26 echo ""
86 23:36:26 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
87 23:36:26 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
88 23:36:26 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
89 23:36:26 __date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
90 23:36:26 __date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
91 23:36:26 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
92 23:36:26 echo ""
93 23:36:26 echo "Setting up credentials for Gitlab Python registries"
94 23:36:26 mkdir -p ~
95 23:36:26 echo "machine gitlab.scandit.com" > ~/.netrc
96 23:36:26 echo "login gitlab-ci-token" >> ~/.netrc
97 23:36:26 echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
98 23:36:26 chmod 600 ~/.netrc
99 23:36:26 if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
100 23:36:26 git config --global --add safe.directory $CI_PROJECT_DIR
101 23:36:26 fi
102 23:36:26 sleep infinity &
103 23:36:26 echo $! > ~/.bg_pid
104 23:36:26 section_end:1777678586:section_pre_build_script_0
105 23:36:26 INFO: This is the CI job pre_build_script
106 23:36:26 INFO: It's defined in the backend/infra/onprem/k8s repo.
107 23:36:26 INFO: These additional Scandit variables are available to you:
108 23:36:26 SC_K8S_NODE_NAME: decimus
109 23:36:26 SC_K8S_IMAGE_ID:
110 23:36:26 SC_K8S_KYVERNO_PATCHES: |
111 23:36:26
112 23:36:26 cpu (r/l): 2/8
113 23:36:26 memory (r/l): 4000000000/17179869184
114 23:36:26
115 23:36:26 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-3-uablsxq0&var-resolution=15&from=1777678586000&to=now
116 23:36:26 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1777678586000&to=now
117 23:36:26 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1575288&var-filters=CI_JOB_ID%7C%3D%7C54243445&sortOrder=Ascending&from=1777678586000&to=now
118 23:36:26 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-24~2026-05-08&job_name=build-python3-image-root-user&project=internal/gitlab-templates
119 23:36:26
120 23:36:26 Setting up credentials for Gitlab Python registries
121 23:36:26 $ echo $DOCKER_CONFIG_JSON > /kaniko/.docker/config.json
122 23:36:26 $ mv /root/.netrc /kaniko/.netrc
123 23:36:26 section_start:1777678586:section_script_step_2[hide_duration=true,collapsed=true] $ function copy_files() {
124 23:36:26 local src="$1"
125 23:36:26 local trg="$2"
126 23:36:26 for f in $src; do
127 23:36:26 t="$trg/`dirname $f`"
128 23:36:26 mkdir -p $t || true
129 23:36:26 echo "Copy $f"
130 23:36:26 cp -pr $f $trg/$f
131 23:36:26 done
132 23:36:26 }
133 23:36:26 function recursive_hash() {
134 23:36:26 local dir="$1"
135 23:36:26 find "$dir" -exec stat -c '%F|%a|%u:%g|%n' {} + -type f -exec sha256sum {} + | sort | sha256sum | cut -d ' ' -f1
136 23:36:26 }
137 23:36:26 function remote_docker_digest() {
138 23:36:26 local images="$1"
139 23:36:26 echo $images | xargs -n 1 crane digest
140 23:36:26 }
141 23:36:26 function remote_image_exists() {
142 23:36:26 local image="$1"
143 23:36:26 crane manifest $image > /dev/null 2>&1
144 23:36:26 }
145 23:36:26 function remote_images_are_identical() {
146 23:36:26 local imageA="$1"
147 23:36:26 local imageB="$2"
148 23:36:26 if [[ $(remote_docker_digest "$imageA") == $(remote_docker_digest "$imageB") ]]; then
149 23:36:26 return 0
150 23:36:26 else
151 23:36:26 return 1
152 23:36:26 fi
153 23:36:26 }
154 23:36:26 function copy_image() {
155 23:36:26 local image="$1"
156 23:36:26 local remotes="$2"
157 23:36:26 local backup_ext="$3"
158 23:36:26 echo "$image"
159 23:36:26 local source_digest=$(remote_docker_digest $image)
160 23:36:26 local target_digest
161 23:36:26 for registry in $remotes; do
162 23:36:26 if target_digest=$(remote_docker_digest $registry); then
163 23:36:26 if [ "$target_digest" != "$source_digest" ]; then
164 23:36:26 echo "image outdated, overwriting with newest version"
165 23:36:26 crane copy $image $registry
166 23:36:26 crane copy $image ${registry}${backup_ext}
167 23:36:26 fi
168 23:36:26 else
169 23:36:26 echo "image does not exist, writing newest version"
170 23:36:26 crane copy $image $registry
171 23:36:26 crane copy $image ${registry}${backup_ext}
172 23:36:26 fi
173 23:36:26 done
174 23:36:26 }
175 23:36:26 section_end:1777678586:section_script_step_2
176 23:36:26 section_start:1777678586:section_script_step_3[hide_duration=true,collapsed=true] $ if [ "$CONTAINER_SUBDIR" != "" ]; then
177 23:36:26 echo "Entering subpath $CONTAINER_SUBDIR"
178 23:36:26 cd $CONTAINER_SUBDIR
179 23:36:26 fi
180 23:36:26 section_end:1777678586:section_script_step_3
181 23:36:26 $ copy_files "$CONTAINER_IMPLICIT_REQUIREMENTS $CONTAINER_REQUIREMENTS" "$CONTAINER_CONTEXT_PATH"
182 23:36:26 Copy Dockerfile.python
183 23:36:26 Copy requirements.txt
184 23:36:26 $ echo "$CONTAINER_BUILD_ENVIRONMENT" > $CONTAINER_CONTEXT_PATH/.docker-build-env
185 23:36:26 $ docker_checksum=$(recursive_hash $CONTAINER_CONTEXT_PATH)
186 23:36:26 section_start:1777678586:section_script_step_7[hide_duration=true,collapsed=true] $ if [ "$CONTAINER_IMAGE_NAME" == "" ]; then
187 23:36:26 final_image_name=${CONTAINER_IMAGE_URL}
188 23:36:26 else
189 23:36:26 final_image_name=${CONTAINER_IMAGE_URL}/${CONTAINER_IMAGE_NAME}
190 23:36:26 fi
191 23:36:26 section_end:1777678586:section_script_step_7
192 23:36:26 $ final_image_url=${final_image_name}:${docker_checksum}
193 23:36:26 section_start:1777678586:section_script_step_9[hide_duration=true,collapsed=true] $ if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
194 23:36:26 echo $CONTAINER_IMAGE_VARIABLE=${final_image_url}-P${CI_PROJECT_ID}-${CI_PIPELINE_ID} > $CI_PROJECT_DIR/docker_image_build.env
195 23:36:26 else
196 23:36:26 echo $CONTAINER_IMAGE_VARIABLE=$final_image_url > $CI_PROJECT_DIR/docker_image_build.env
197 23:36:26 fi
198 23:36:26 section_end:1777678586:section_script_step_9
199 23:36:26 $ echo ${CONTAINER_IMAGE_VARIABLE}_HASH=$docker_checksum >> $CI_PROJECT_DIR/docker_image_build.env
200 23:36:26 section_start:1777678586:section_script_step_11[hide_duration=true,collapsed=true] $ if [ "${FORCE_BUILD}" != "true" ] || command -v crane &> /dev/null; then
201 23:36:26 echo $REGISTRY_PASSWORD | crane auth login $REGISTRY -u $REGISTRY_USER --password-stdin
202 23:36:26 fi
203 23:36:26 section_end:1777678586:section_script_step_11
204 23:36:26
205 23:36:26 WARNING! Your credentials are stored unencrypted in '/kaniko/.docker/config.json'.
206 23:36:26 Configure a credential helper to remove this warning. See
207 23:36:26 https://docs.docker.com/go/credential-store/
208 23:36:26
209 23:36:26 2026/05/01 23:36:26 logged in via /kaniko/.docker/config.json
210 23:36:26 section_start:1777678586:section_script_step_12[hide_duration=true,collapsed=true] $ if [ "${FORCE_BUILD}" != "true" ] && remote_image_exists "$final_image_url"; then
211 23:36:26 echo "Image already exists, skip the build."
212 23:36:26 echo "$final_image_url"
213 23:36:26 if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
214 23:36:26 _EXT=""
215 23:36:26 _BACKUP_EXT="-CI${CI_JOB_ID}-$(date '+%Y%m%d')"
216 23:36:26 elif [[ -n "$CI_MERGE_REQUEST_ID" ]]; then
217 23:36:26 _EXT="-MR${CI_MERGE_REQUEST_IID}"
218 23:36:26 _BACKUP_EXT=""
219 23:36:26 elif [[ "$CI_COMMIT_REF_PROTECTED" == "true" ]]; then
220 23:36:26 _EXT="-${CI_COMMIT_REF_SLUG}"
221 23:36:26 _BACKUP_EXT="-CI${CI_JOB_ID}-$(date '+%Y%m%d')"
222 23:36:26 fi
223 23:36:26 for _TAG in $CONTAINER_IMAGE_TAG; do
224 23:36:26 echo "Copying ${final_image_url} to ${final_image_name}:${_TAG}${_EXT}"
225 23:36:26 copy_image "${final_image_url}" "${final_image_name}:${_TAG}${_EXT}" "${_BACKUP_EXT}"
226 23:36:26 done
227 23:36:26 if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
228 23:36:26 _EXT="-P${CI_PROJECT_ID}-${CI_PIPELINE_ID}"
229 23:36:26 echo "Copying ${final_image_url} to ${final_image_url}${_EXT}"
230 23:36:26 copy_image "${final_image_url}" "${final_image_url}${_EXT}"
231 23:36:26 for _TAG in $CONTAINER_IMAGE_TAG; do
232 23:36:26 echo "Copying ${final_image_url} to ${final_image_name}:${_TAG}${_EXT}"
233 23:36:26 copy_image "${final_image_url}" "${final_image_name}:${_TAG}${_EXT}"
234 23:36:26 done
235 23:36:26 fi
236 23:36:26 exit 0
237 23:36:26 fi
238 23:36:26 section_end:1777678586:section_script_step_12
239 23:36:26 $ DESTINATIONS="--destination=$final_image_url"
240 23:36:26 section_start:1777678586:section_script_step_14[hide_duration=true,collapsed=true] $ if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
241 23:36:26 _EXT=""
242 23:36:26 TIMESTAMP_TAGS=$CONTAINER_IMAGE_TAG
243 23:36:26 elif [[ -n "$CI_MERGE_REQUEST_ID" ]]; then
244 23:36:26 _EXT="-MR${CI_MERGE_REQUEST_IID}"
245 23:36:26 TIMESTAMP_TAGS=""
246 23:36:26 elif [[ "$CI_COMMIT_REF_PROTECTED" == "true" ]]; then
247 23:36:26 _EXT="-${CI_COMMIT_REF_SLUG}"
248 23:36:26 TIMESTAMP_TAGS=$CONTAINER_IMAGE_TAG
249 23:36:26 fi
250 23:36:26 section_end:1777678586:section_script_step_14
251 23:36:26 section_start:1777678586:section_script_step_15[hide_duration=true,collapsed=true] $ for _TAG in $CONTAINER_IMAGE_TAG; do
252 23:36:26 DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}"
253 23:36:26 done
254 23:36:26 section_end:1777678586:section_script_step_15
255 23:36:26 section_start:1777678586:section_script_step_16[hide_duration=true,collapsed=true] $ if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
256 23:36:26 _EXT="-P${CI_PROJECT_ID}-${CI_PIPELINE_ID}"
257 23:36:26 DESTINATIONS="${DESTINATIONS} --destination=${final_image_url}${_EXT}"
258 23:36:26 for _TAG in $CONTAINER_IMAGE_TAG; do
259 23:36:26 DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}"
260 23:36:26 done
261 23:36:26 fi
262 23:36:26 section_end:1777678586:section_script_step_16
263 23:36:26 section_start:1777678586:section_script_step_17[hide_duration=true,collapsed=true] $ DATE=$(date '+%Y%m%d')
264 23:36:26 for _TAG in $TIMESTAMP_TAGS; do
265 23:36:26 DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}-CI${CI_JOB_ID}-${DATE}"
266 23:36:26 done
267 23:36:26 section_end:1777678586:section_script_step_17
268 23:36:26 section_start:1777678586:section_script_step_18[hide_duration=true,collapsed=true] $ if [ -n "${CONTAINER_BUILD_ARGS}" ]; then
269 23:36:26 for _BUILD_ARG in $CONTAINER_BUILD_ARGS; do
270 23:36:26 FINAL_BUILD_ARGS="--build-arg $_BUILD_ARG $FINAL_BUILD_ARGS"
271 23:36:26 done
272 23:36:26 fi
273 23:36:26 section_end:1777678586:section_script_step_18
274 23:36:26 section_start:1777678586:section_script_step_19[hide_duration=true,collapsed=true] $ for _PATH in $CONTAINER_IGNORE_PATHS; do
275 23:36:26 FINAL_IGNORE_PATHS="--ignore-path=$_PATH $FINAL_IGNORE_PATHS"
276 23:36:26 done
277 23:36:26 section_end:1777678586:section_script_step_19
278 23:36:26 section_start:1777678586:section_script_step_20[hide_duration=true,collapsed=true] $ if [ -n "${CONTAINER_PLATFORM}" ]; then
279 23:36:26 KANIKO_PLATFORM="--custom-platform=${CONTAINER_PLATFORM}"
280 23:36:26 fi
281 23:36:26 section_end:1777678586:section_script_step_20
282 23:36:26 $ ANNOTATIONS=""
283 23:36:26 section_start:1777678586:section_script_step_22[hide_duration=true,collapsed=true] $ if [[ -n "$CI_COMMIT_REF_NAME" ]]; then
284 23:36:26 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.ref.name=${CI_COMMIT_REF_NAME}"
285 23:36:26 fi
286 23:36:26 section_end:1777678586:section_script_step_22
287 23:36:26 section_start:1777678586:section_script_step_23[hide_duration=true,collapsed=true] $ if [[ -n "$CI_COMMIT_SHA" ]]; then
288 23:36:26 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.revision=${CI_COMMIT_SHA}"
289 23:36:26 fi
290 23:36:26 section_end:1777678586:section_script_step_23
291 23:36:26 section_start:1777678586:section_script_step_24[hide_duration=true,collapsed=true] $ if [[ -n "$CI_JOB_URL" ]]; then
292 23:36:26 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.url=${CI_JOB_URL}"
293 23:36:26 fi
294 23:36:26 section_end:1777678586:section_script_step_24
295 23:36:26 section_start:1777678586:section_script_step_25[hide_duration=true,collapsed=true] $ if [[ -n "$CI_PIPELINE_ID" ]]; then
296 23:36:26 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.pipeline_id=${CI_PIPELINE_ID}"
297 23:36:26 fi
298 23:36:26 section_end:1777678586:section_script_step_25
299 23:36:26 section_start:1777678586:section_script_step_26[hide_duration=true,collapsed=true] $ if [[ -n "$CI_JOB_ID" ]]; then
300 23:36:26 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.job_id=${CI_JOB_ID}"
301 23:36:26 fi
302 23:36:26 section_end:1777678586:section_script_step_26
303 23:36:26 section_start:1777678586:section_script_step_27[hide_duration=true,collapsed=true] $ if [[ -n "$CI_JOB_IMAGE" ]]; then
304 23:36:26 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.job_image=${CI_JOB_IMAGE}"
305 23:36:26 fi
306 23:36:26 section_end:1777678586:section_script_step_27
307 23:36:26 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.title=${final_image_name}:$(echo $CONTAINER_IMAGE_TAG | cut -d' ' -f1)"
308 23:36:26 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.created=$(date -u +%Y-%m-%dT%H:%M:%SZ)"
309 23:36:26 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.vendor=Scandit"
310 23:36:26 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.scandit.ci.hash=${docker_checksum}"
311 23:36:26 section_start:1777678586:section_script_step_32[hide_duration=true,collapsed=true] $ if [ -n "${CONTAINER_TARGET_STAGE}" ]; then
312 23:36:26 KANIKO_TARGET="--target $CONTAINER_TARGET_STAGE"
313 23:36:26 fi
314 23:36:26 section_end:1777678586:section_script_step_32
315 23:36:26 $ set -x
316 23:36:26 + echo '$ /kaniko/executor --context $CONTAINER_CONTEXT_PATH --dockerfile $CONTAINER_DOCKERFILE $DESTINATIONS --cache=true --cache-copy-layers --cache-dir /cache/kaniko --cache-repo $CONTAINER_CACHE_REPO --cache-ttl=$CONTAINER_CACHE_TTL $FINAL_IGNORE_PATHS $KANIKO_TARGET $FINAL_BUILD_ARGS $KANIKO_PLATFORM $ANNOTATIONS $KANIKO_DEFAULT_FLAGS $KANIKO_EXTRA_FLAGS'
317 23:36:26 $ /kaniko/executor --context $CONTAINER_CONTEXT_PATH --dockerfile $CONTAINER_DOCKERFILE $DESTINATIONS --cache=true --cache-copy-layers --cache-dir /cache/kaniko --cache-repo $CONTAINER_CACHE_REPO --cache-ttl=$CONTAINER_CACHE_TTL $FINAL_IGNORE_PATHS $KANIKO_TARGET $FINAL_BUILD_ARGS $KANIKO_PLATFORM $ANNOTATIONS $KANIKO_DEFAULT_FLAGS $KANIKO_EXTRA_FLAGS
318 23:36:26 + /kaniko/executor --context /build/internal/gitlab-templates/context/ --dockerfile Dockerfile.python '--destination=registry.scandit.com/internal/gitlab-templates:37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873' '--destination=registry.scandit.com/internal/gitlab-templates:latest-MR636' '--cache=true' --cache-copy-layers --cache-dir /cache/kaniko --cache-repo registry.scandit.com/internal/gitlab-templates/cache '--cache-ttl=336h' --build-arg 'BASE_IMAGE_TAG=ubuntu-3.12-root' --annotation 'org.opencontainers.image.ref.name=renovate/martizih-kaniko-1.x' --annotation 'org.opencontainers.image.revision=50468f6f2468dfc2204ca6e162113f80d494530f' --annotation 'org.opencontainers.image.url=https://gitlab.scandit.com/internal/gitlab-templates/-/jobs/54243445' --annotation 'io.gitlab.ci.pipeline_id=1575288' --annotation 'io.gitlab.ci.job_id=54243445' --annotation 'io.gitlab.ci.job_image=registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac' --annotation 'org.opencontainers.image.title=registry.scandit.com/internal/gitlab-templates:latest' --annotation 'org.opencontainers.image.created=2026-05-01T23:36:26Z' --annotation 'org.opencontainers.image.vendor=Scandit' --annotation 'io.scandit.ci.hash=37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873' --preserve-context '--credential-helpers=gitlab' --secret 'id=netrc,src=/kaniko/.netrc' --secret 'id=ci_job_token,env=CI_JOB_TOKEN'
319 23:36:26 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
320 23:36:26 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
321 23:36:26 INFO[0000] Retrieving image registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root from registry registry.scandit.com
322 23:36:26 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
323 23:36:26 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
324 23:36:26 INFO[0000] Returning cached image manifest
325 23:36:26 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
326 23:36:26 INFO[0000] Returning cached image manifest
327 23:36:26 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
328 23:36:26 INFO[0000] Returning cached image manifest
329 23:36:26 INFO[0000] Built cross stage deps: map[]
330 23:36:26 INFO[0000] Skipping context snapshot as no-one requires it
331 23:36:26 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
332 23:36:26 INFO[0000] Returning cached image manifest
333 23:36:26 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
334 23:36:26 INFO[0000] Returning cached image manifest
335 23:36:26 INFO[0000] Building stage 'registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root' [idx: '0', base-idx: '-1']
336 23:36:26 INFO[0000] Checking for cached layer registry.scandit.com/internal/gitlab-templates/cache:48b13139b10133d25033e7503e892c77ca6c64ac464e7312fa1a58d227bce4dc...
337 23:36:26 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
338 23:36:26 INFO[0000] Using caching version of cmd: COPY requirements.txt requirements.txt
339 23:36:26 INFO[0000] Checking for cached layer registry.scandit.com/internal/gitlab-templates/cache:1079e679a2f8ba72eada75d619eb0b57e499f246b1af1814a26752cccfee9220...
340 23:36:26 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
341 23:36:26 INFO[0000] Using caching version of cmd: RUN --mount=type=secret,id=netrc,target=/root/.netrc --mount=type=cache,target=/root/.cache/uv uv pip install --system -r requirements.txt
342 23:36:26 INFO[0000] Skipping unpacking as no commands require it.
343 23:36:26 INFO[0000] COPY requirements.txt requirements.txt
344 23:36:26 INFO[0000] Found cached layer, extracting to filesystem
345 23:36:26 INFO[0000] ARG PYTHONDONTWRITEBYTECODE=1
346 23:36:26 INFO[0000] Taking snapshot of files...
347 23:36:26 INFO[0000] RUN --mount=type=secret,id=netrc,target=/root/.netrc --mount=type=cache,target=/root/.cache/uv uv pip install --system -r requirements.txt
348 23:36:26 INFO[0000] Found cached layer, extracting to filesystem
349 23:36:27 INFO[0001] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
350 23:36:27 INFO[0001] Pushing image to registry.scandit.com/internal/gitlab-templates:37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873
351 23:36:28 INFO[0002] Pushed registry.scandit.com/internal/gitlab-templates@sha256:4fc6d537b553562ec87c1b6e11818d4dd8aa3746a487019da8703518e8d96a78
352 23:36:28 INFO[0002] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
353 23:36:28 INFO[0002] Pushing image to registry.scandit.com/internal/gitlab-templates:latest-MR636
354 23:36:29 INFO[0002] Pushed registry.scandit.com/internal/gitlab-templates@sha256:4fc6d537b553562ec87c1b6e11818d4dd8aa3746a487019da8703518e8d96a78
355 23:36:29 + cleanup
356 23:36:29 + rv=0
357 23:36:29 + '[' 0 -ne 0 ]
358 23:36:29 + echo
359 23:36:29
360 23:36:29 + echo 'Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54243445'
361 23:36:29 Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54243445
362 23:36:29 + echo
363 23:36:29
364 23:36:29 + echo
365 23:36:29
366 23:36:29 + echo 'Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-3-uablsxq0&var-resolution=15&from=1777678586000&to=1777678589000'
367 23:36:29 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-3-uablsxq0&var-resolution=15&from=1777678586000&to=1777678589000
368 23:36:29 + echo 'Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1777678586000&to=1777678589000'
369 23:36:29 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1777678586000&to=1777678589000
370 23:36:29 + echo 'Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1575288&var-filters=CI_JOB_ID%7C%3D%7C54243445&sortOrder=Ascending&from=1777678586000&to=1777678589000'
371 23:36:29 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1575288&var-filters=CI_JOB_ID%7C%3D%7C54243445&sortOrder=Ascending&from=1777678586000&to=1777678589000
372 23:36:29 + date -d @1777073789 '+%Y-%m-%d'
373 23:36:29 + __date_from=2026-04-24
374 23:36:29 + date -d @1778283389 '+%Y-%m-%d'
375 23:36:29 + __date_to=2026-05-08
376 23:36:29 + echo 'Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-24~2026-05-08&job_name=build-python3-image-root-user&project=internal/gitlab-templates'
377 23:36:29 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-24~2026-05-08&job_name=build-python3-image-root-user&project=internal/gitlab-templates
378 23:36:29 + echo
379 23:36:29
380 23:36:29 + exit 0
381 23:36:29
382 23:36:29 section_end:1777678589:step_script
383 23:36:29 +section_start:1777678589:upload_artifacts_on_success
384 23:36:29 +Uploading artifacts for successful job
385 23:36:29 Uploading artifacts...
386 23:36:29 docker_image_build.env: found 1 matching artifact files and directories
387 23:36:30 Uploading artifacts as "dotenv" to coordinator... 201 Created correlation_id=01KQJYD7TRB820WQHWPK8PT8VG id=54243445 responseStatus=201 Created token=64_L_gW7U
388 23:36:30
389 23:36:30 section_end:1777678590:upload_artifacts_on_success
390 23:36:30 +section_start:1777678590:cleanup_file_variables
391 23:36:30 +Cleaning up project directory and file based variables
392 23:36:31 Removing context/
393 23:36:31 Removing docker_image_build.env
394 23:36:31 HEAD is now at 50468f6 Merge branch 'renovate/martizih-kaniko-1.x' into 'master'
395 23:36:31
396 23:36:31 section_end:1777678591:cleanup_file_variables
397 23:36:31 +
398 23:36:31 Job succeeded
399