build-python3-image-root-user ○ success
⏱
Duration: 1m 19s
⏳
Queued: 2s
📁
Stage: docker-image
🖥
Runner: linux-1
Average Duration
30s
This job: 1m 19s
Failure Rate
0.7%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
427 lines
Match - of 0
1
17:05:25
Running with gitlab-runner 18.9.0 (07e534ba)
2
17:05:25
on gitlab-runner-linux-1-5b9cfd64ff-k5sg5 aP4tCsXyp, system ID: r_wQDtEh3nNZsL
3
17:05:25
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_ENABLE_JOB_CLEANUP:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
17:05:25
Resolving secrets
5
17:05:25
section_start:1777827925:prepare_executor
6
17:05:25
+Preparing the "kubernetes" executor
7
17:05:25
"CPURequest" overwritten with "2"
8
17:05:25
"MemoryRequest" overwritten with "4G"
9
17:05:25
Using Kubernetes namespace: gitlab-runner
10
17:05:25
Using Kubernetes executor with image registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac ...
11
17:05:25
Using attach strategy to execute scripts...
12
17:05:25
Using effective pull policy of [Always] for container build
13
17:05:25
Using effective pull policy of [Always] for container helper
14
17:05:25
Using effective pull policy of [Always] for container init-permissions
15
17:05:25
section_end:1777827925:prepare_executor
16
17:05:25
+section_start:1777827925:prepare_script
17
17:05:25
+Preparing environment
18
17:05:25
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
19
17:05:25
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
20
17:05:26
Subscribing to Kubernetes Pod events...
21
17:05:26
Type Reason Message
22
17:05:26
Normal Scheduled Successfully assigned gitlab-runner/runner-ap4tcsxyp-project-621-concurrent-1-jq36iuan to ci10
23
17:05:27
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
24
17:05:27
Normal Created Created container: init-permissions
25
17:05:27
Normal Started Started container init-permissions
26
17:05:27
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
27
17:05:28
Normal Created Created container: helper
28
17:05:28
Normal Started Started container helper
29
17:05:28
Normal Pulling Pulling image "registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac"
30
17:05:33
Normal Pulled Successfully pulled image "registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac" in 5.36s (5.36s including waiting). Image size: 49989654 bytes.
31
17:05:33
Normal Created Created container: build
32
17:05:33
Normal Started Started container build
33
17:05:35
Running on runner-ap4tcsxyp-project-621-concurrent-1-jq36iuan via gitlab-runner-linux-1-5b9cfd64ff-k5sg5...
34
17:05:35
35
17:05:35
section_end:1777827935:prepare_script
36
17:05:35
+section_start:1777827936:get_sources
37
17:05:36
+Getting source from Git repository
38
17:05:36
Gitaly correlation ID: 01KQQCTK6W7DPJ3N927K5FAG4Q
39
17:05:36
Fetching changes with git depth set to 1...
40
17:05:36
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
41
17:05:36
Created fresh repository.
42
17:05:37
Checking out 32840034 as detached HEAD (ref is master)...
43
17:05:37
44
17:05:37
Skipping Git submodules setup
45
17:05:37
46
17:05:37
section_end:1777827937:get_sources
47
17:05:37
+section_start:1777827937:step_script
48
17:05:37
+Executing "step_script" stage of the job script
49
17:05:37
section_start:1777827937:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
50
17:05:37
rv=$?
51
17:05:37
if [ $rv -ne 0 ]; then
52
17:05:37
echo ""
53
17:05:37
echo " Failure Cause Analysis might help, please open this link:"
54
17:05:37
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
55
17:05:37
echo ""
56
17:05:37
fi
57
17:05:37
echo ""
58
17:05:37
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
59
17:05:37
echo ""
60
17:05:37
echo ""
61
17:05:37
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
62
17:05:37
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
63
17:05:37
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
64
17:05:37
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
65
17:05:37
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
66
17:05:37
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
67
17:05:37
echo ""
68
17:05:37
exit $rv
69
17:05:37
}
70
17:05:37
trap cleanup EXIT
71
17:05:37
echo "INFO: This is the CI job pre_build_script"
72
17:05:37
echo "INFO: It's defined in the backend/infra/onprem/k8s repo."
73
17:05:37
echo "INFO: These additional Scandit variables are available to you:"
74
17:05:37
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
75
17:05:37
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
76
17:05:37
echo " SC_K8S_KYVERNO_PATCHES: |"
77
17:05:37
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
78
17:05:37
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
79
17:05:37
if command -v numfmt >/dev/null 2>&1; then
80
17:05:37
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
81
17:05:37
else
82
17:05:37
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
83
17:05:37
fi
84
17:05:37
__start_time=${EPOCHSECONDS}
85
17:05:37
echo ""
86
17:05:37
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
87
17:05:37
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
88
17:05:37
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
89
17:05:37
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
90
17:05:37
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
91
17:05:37
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
92
17:05:37
echo ""
93
17:05:37
echo "Setting up credentials for Gitlab Python registries"
94
17:05:37
mkdir -p ~
95
17:05:37
echo "machine gitlab.scandit.com" > ~/.netrc
96
17:05:37
echo "login gitlab-ci-token" >> ~/.netrc
97
17:05:37
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
98
17:05:37
chmod 600 ~/.netrc
99
17:05:37
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
100
17:05:37
git config --global --add safe.directory $CI_PROJECT_DIR
101
17:05:37
fi
102
17:05:37
sleep infinity &
103
17:05:37
echo $! > ~/.bg_pid
104
17:05:37
section_end:1777827937:section_pre_build_script_0
105
17:05:37
INFO: This is the CI job pre_build_script
106
17:05:37
INFO: It's defined in the backend/infra/onprem/k8s repo.
107
17:05:37
INFO: These additional Scandit variables are available to you:
108
17:05:37
SC_K8S_NODE_NAME: ci10
109
17:05:37
SC_K8S_IMAGE_ID:
110
17:05:37
SC_K8S_KYVERNO_PATCHES: |
111
17:05:37
112
17:05:37
cpu (r/l): 2/8
113
17:05:37
memory (r/l): 4000000000/17179869184
114
17:05:37
115
17:05:37
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=ci10&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-1-jq36iuan&var-resolution=15&from=1777827937000&to=now
116
17:05:37
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=ci10&var-resolution=15s&from=1777827937000&to=now
117
17:05:37
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1576293&var-filters=CI_JOB_ID%7C%3D%7C54273473&sortOrder=Ascending&from=1777827937000&to=now
118
17:05:37
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-26~2026-05-10&job_name=build-python3-image-root-user&project=internal/gitlab-templates
119
17:05:37
120
17:05:37
Setting up credentials for Gitlab Python registries
121
17:05:37
$ echo $DOCKER_CONFIG_JSON > /kaniko/.docker/config.json
122
17:05:37
$ mv /root/.netrc /kaniko/.netrc
123
17:05:37
section_start:1777827937:section_script_step_2[hide_duration=true,collapsed=true]
$ function copy_files() {
124
17:05:37
local src="$1"
125
17:05:37
local trg="$2"
126
17:05:37
for f in $src; do
127
17:05:37
t="$trg/`dirname $f`"
128
17:05:37
mkdir -p $t || true
129
17:05:37
echo "Copy $f"
130
17:05:37
cp -pr $f $trg/$f
131
17:05:37
done
132
17:05:37
}
133
17:05:37
function recursive_hash() {
134
17:05:37
local dir="$1"
135
17:05:37
find "$dir" -exec stat -c '%F|%a|%u:%g|%n' {} + -type f -exec sha256sum {} + | sort | sha256sum | cut -d ' ' -f1
136
17:05:37
}
137
17:05:37
function remote_docker_digest() {
138
17:05:37
local images="$1"
139
17:05:37
echo $images | xargs -n 1 crane digest
140
17:05:37
}
141
17:05:37
function remote_image_exists() {
142
17:05:37
local image="$1"
143
17:05:37
crane manifest $image > /dev/null 2>&1
144
17:05:37
}
145
17:05:37
function remote_images_are_identical() {
146
17:05:37
local imageA="$1"
147
17:05:37
local imageB="$2"
148
17:05:37
if [[ $(remote_docker_digest "$imageA") == $(remote_docker_digest "$imageB") ]]; then
149
17:05:37
return 0
150
17:05:37
else
151
17:05:37
return 1
152
17:05:37
fi
153
17:05:37
}
154
17:05:37
function copy_image() {
155
17:05:37
local image="$1"
156
17:05:37
local remotes="$2"
157
17:05:37
local backup_ext="$3"
158
17:05:37
echo "$image"
159
17:05:37
local source_digest=$(remote_docker_digest $image)
160
17:05:37
local target_digest
161
17:05:37
for registry in $remotes; do
162
17:05:37
if target_digest=$(remote_docker_digest $registry); then
163
17:05:37
if [ "$target_digest" != "$source_digest" ]; then
164
17:05:37
echo "image outdated, overwriting with newest version"
165
17:05:37
crane copy $image $registry
166
17:05:37
crane copy $image ${registry}${backup_ext}
167
17:05:37
fi
168
17:05:37
else
169
17:05:37
echo "image does not exist, writing newest version"
170
17:05:37
crane copy $image $registry
171
17:05:37
crane copy $image ${registry}${backup_ext}
172
17:05:37
fi
173
17:05:37
done
174
17:05:37
}
175
17:05:37
section_end:1777827937:section_script_step_2
176
17:05:37
section_start:1777827937:section_script_step_3[hide_duration=true,collapsed=true]
$ if [ "$CONTAINER_SUBDIR" != "" ]; then
177
17:05:37
echo "Entering subpath $CONTAINER_SUBDIR"
178
17:05:37
cd $CONTAINER_SUBDIR
179
17:05:37
fi
180
17:05:37
section_end:1777827937:section_script_step_3
181
17:05:37
$ copy_files "$CONTAINER_IMPLICIT_REQUIREMENTS $CONTAINER_REQUIREMENTS" "$CONTAINER_CONTEXT_PATH"
182
17:05:37
Copy Dockerfile.python
183
17:05:37
Copy requirements.txt
184
17:05:37
$ echo "$CONTAINER_BUILD_ENVIRONMENT" > $CONTAINER_CONTEXT_PATH/.docker-build-env
185
17:05:37
$ docker_checksum=$(recursive_hash $CONTAINER_CONTEXT_PATH)
186
17:05:37
section_start:1777827937:section_script_step_7[hide_duration=true,collapsed=true]
$ if [ "$CONTAINER_IMAGE_NAME" == "" ]; then
187
17:05:37
final_image_name=${CONTAINER_IMAGE_URL}
188
17:05:37
else
189
17:05:37
final_image_name=${CONTAINER_IMAGE_URL}/${CONTAINER_IMAGE_NAME}
190
17:05:37
fi
191
17:05:37
section_end:1777827937:section_script_step_7
192
17:05:37
$ final_image_url=${final_image_name}:${docker_checksum}
193
17:05:37
section_start:1777827937:section_script_step_9[hide_duration=true,collapsed=true]
$ if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
194
17:05:37
echo $CONTAINER_IMAGE_VARIABLE=${final_image_url}-P${CI_PROJECT_ID}-${CI_PIPELINE_ID} > $CI_PROJECT_DIR/docker_image_build.env
195
17:05:37
else
196
17:05:37
echo $CONTAINER_IMAGE_VARIABLE=$final_image_url > $CI_PROJECT_DIR/docker_image_build.env
197
17:05:37
fi
198
17:05:37
section_end:1777827937:section_script_step_9
199
17:05:37
$ echo ${CONTAINER_IMAGE_VARIABLE}_HASH=$docker_checksum >> $CI_PROJECT_DIR/docker_image_build.env
200
17:05:37
section_start:1777827937:section_script_step_11[hide_duration=true,collapsed=true]
$ if [ "${FORCE_BUILD}" != "true" ] || command -v crane &> /dev/null; then
201
17:05:37
echo $REGISTRY_PASSWORD | crane auth login $REGISTRY -u $REGISTRY_USER --password-stdin
202
17:05:37
fi
203
17:05:37
section_end:1777827937:section_script_step_11
204
17:05:37
205
17:05:37
WARNING! Your credentials are stored unencrypted in '/kaniko/.docker/config.json'.
206
17:05:37
Configure a credential helper to remove this warning. See
207
17:05:37
https://docs.docker.com/go/credential-store/
208
17:05:37
209
17:05:37
2026/05/03 17:05:37 logged in via /kaniko/.docker/config.json
210
17:05:37
section_start:1777827937:section_script_step_12[hide_duration=true,collapsed=true]
$ if [ "${FORCE_BUILD}" != "true" ] && remote_image_exists "$final_image_url"; then
211
17:05:37
echo "Image already exists, skip the build."
212
17:05:37
echo "$final_image_url"
213
17:05:37
if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
214
17:05:37
_EXT=""
215
17:05:37
_BACKUP_EXT="-CI${CI_JOB_ID}-$(date '+%Y%m%d')"
216
17:05:37
elif [[ -n "$CI_MERGE_REQUEST_ID" ]]; then
217
17:05:37
_EXT="-MR${CI_MERGE_REQUEST_IID}"
218
17:05:37
_BACKUP_EXT=""
219
17:05:37
elif [[ "$CI_COMMIT_REF_PROTECTED" == "true" ]]; then
220
17:05:37
_EXT="-${CI_COMMIT_REF_SLUG}"
221
17:05:37
_BACKUP_EXT="-CI${CI_JOB_ID}-$(date '+%Y%m%d')"
222
17:05:37
fi
223
17:05:37
for _TAG in $CONTAINER_IMAGE_TAG; do
224
17:05:37
echo "Copying ${final_image_url} to ${final_image_name}:${_TAG}${_EXT}"
225
17:05:37
copy_image "${final_image_url}" "${final_image_name}:${_TAG}${_EXT}" "${_BACKUP_EXT}"
226
17:05:37
done
227
17:05:37
if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
228
17:05:37
_EXT="-P${CI_PROJECT_ID}-${CI_PIPELINE_ID}"
229
17:05:37
echo "Copying ${final_image_url} to ${final_image_url}${_EXT}"
230
17:05:37
copy_image "${final_image_url}" "${final_image_url}${_EXT}"
231
17:05:37
for _TAG in $CONTAINER_IMAGE_TAG; do
232
17:05:37
echo "Copying ${final_image_url} to ${final_image_name}:${_TAG}${_EXT}"
233
17:05:37
copy_image "${final_image_url}" "${final_image_name}:${_TAG}${_EXT}"
234
17:05:37
done
235
17:05:37
fi
236
17:05:37
exit 0
237
17:05:37
fi
238
17:05:37
section_end:1777827937:section_script_step_12
239
17:05:37
$ DESTINATIONS="--destination=$final_image_url"
240
17:05:37
section_start:1777827937:section_script_step_14[hide_duration=true,collapsed=true]
$ if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
241
17:05:37
_EXT=""
242
17:05:37
TIMESTAMP_TAGS=$CONTAINER_IMAGE_TAG
243
17:05:37
elif [[ -n "$CI_MERGE_REQUEST_ID" ]]; then
244
17:05:37
_EXT="-MR${CI_MERGE_REQUEST_IID}"
245
17:05:37
TIMESTAMP_TAGS=""
246
17:05:37
elif [[ "$CI_COMMIT_REF_PROTECTED" == "true" ]]; then
247
17:05:37
_EXT="-${CI_COMMIT_REF_SLUG}"
248
17:05:37
TIMESTAMP_TAGS=$CONTAINER_IMAGE_TAG
249
17:05:37
fi
250
17:05:37
section_end:1777827937:section_script_step_14
251
17:05:37
section_start:1777827937:section_script_step_15[hide_duration=true,collapsed=true]
$ for _TAG in $CONTAINER_IMAGE_TAG; do
252
17:05:37
DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}"
253
17:05:37
done
254
17:05:37
section_end:1777827937:section_script_step_15
255
17:05:37
section_start:1777827937:section_script_step_16[hide_duration=true,collapsed=true]
$ if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
256
17:05:37
_EXT="-P${CI_PROJECT_ID}-${CI_PIPELINE_ID}"
257
17:05:37
DESTINATIONS="${DESTINATIONS} --destination=${final_image_url}${_EXT}"
258
17:05:37
for _TAG in $CONTAINER_IMAGE_TAG; do
259
17:05:37
DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}"
260
17:05:37
done
261
17:05:37
fi
262
17:05:37
section_end:1777827937:section_script_step_16
263
17:05:37
section_start:1777827937:section_script_step_17[hide_duration=true,collapsed=true]
$ DATE=$(date '+%Y%m%d')
264
17:05:37
for _TAG in $TIMESTAMP_TAGS; do
265
17:05:37
DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}-CI${CI_JOB_ID}-${DATE}"
266
17:05:37
done
267
17:05:37
section_end:1777827937:section_script_step_17
268
17:05:37
section_start:1777827937:section_script_step_18[hide_duration=true,collapsed=true]
$ if [ -n "${CONTAINER_BUILD_ARGS}" ]; then
269
17:05:37
for _BUILD_ARG in $CONTAINER_BUILD_ARGS; do
270
17:05:37
FINAL_BUILD_ARGS="--build-arg $_BUILD_ARG $FINAL_BUILD_ARGS"
271
17:05:37
done
272
17:05:37
fi
273
17:05:37
section_end:1777827937:section_script_step_18
274
17:05:37
section_start:1777827937:section_script_step_19[hide_duration=true,collapsed=true]
$ for _PATH in $CONTAINER_IGNORE_PATHS; do
275
17:05:37
FINAL_IGNORE_PATHS="--ignore-path=$_PATH $FINAL_IGNORE_PATHS"
276
17:05:37
done
277
17:05:37
section_end:1777827937:section_script_step_19
278
17:05:37
section_start:1777827937:section_script_step_20[hide_duration=true,collapsed=true]
$ if [ -n "${CONTAINER_PLATFORM}" ]; then
279
17:05:37
KANIKO_PLATFORM="--custom-platform=${CONTAINER_PLATFORM}"
280
17:05:37
fi
281
17:05:37
section_end:1777827937:section_script_step_20
282
17:05:37
$ ANNOTATIONS=""
283
17:05:37
section_start:1777827937:section_script_step_22[hide_duration=true,collapsed=true]
$ if [[ -n "$CI_COMMIT_REF_NAME" ]]; then
284
17:05:37
ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.ref.name=${CI_COMMIT_REF_NAME}"
285
17:05:37
fi
286
17:05:37
section_end:1777827937:section_script_step_22
287
17:05:37
section_start:1777827937:section_script_step_23[hide_duration=true,collapsed=true]
$ if [[ -n "$CI_COMMIT_SHA" ]]; then
288
17:05:37
ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.revision=${CI_COMMIT_SHA}"
289
17:05:37
fi
290
17:05:37
section_end:1777827937:section_script_step_23
291
17:05:37
section_start:1777827937:section_script_step_24[hide_duration=true,collapsed=true]
$ if [[ -n "$CI_JOB_URL" ]]; then
292
17:05:37
ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.url=${CI_JOB_URL}"
293
17:05:37
fi
294
17:05:37
section_end:1777827937:section_script_step_24
295
17:05:37
section_start:1777827937:section_script_step_25[hide_duration=true,collapsed=true]
$ if [[ -n "$CI_PIPELINE_ID" ]]; then
296
17:05:37
ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.pipeline_id=${CI_PIPELINE_ID}"
297
17:05:37
fi
298
17:05:37
section_end:1777827937:section_script_step_25
299
17:05:37
section_start:1777827937:section_script_step_26[hide_duration=true,collapsed=true]
$ if [[ -n "$CI_JOB_ID" ]]; then
300
17:05:37
ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.job_id=${CI_JOB_ID}"
301
17:05:37
fi
302
17:05:37
section_end:1777827937:section_script_step_26
303
17:05:37
section_start:1777827937:section_script_step_27[hide_duration=true,collapsed=true]
$ if [[ -n "$CI_JOB_IMAGE" ]]; then
304
17:05:37
ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.job_image=${CI_JOB_IMAGE}"
305
17:05:37
fi
306
17:05:37
section_end:1777827937:section_script_step_27
307
17:05:37
$ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.title=${final_image_name}:$(echo $CONTAINER_IMAGE_TAG | cut -d' ' -f1)"
308
17:05:37
$ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.created=$(date -u +%Y-%m-%dT%H:%M:%SZ)"
309
17:05:37
$ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.vendor=Scandit"
310
17:05:37
$ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.scandit.ci.hash=${docker_checksum}"
311
17:05:37
section_start:1777827937:section_script_step_32[hide_duration=true,collapsed=true]
$ if [ -n "${CONTAINER_TARGET_STAGE}" ]; then
312
17:05:37
KANIKO_TARGET="--target $CONTAINER_TARGET_STAGE"
313
17:05:37
fi
314
17:05:37
section_end:1777827937:section_script_step_32
315
17:05:37
$ set -x
316
17:05:37
+ echo '$ /kaniko/executor --context $CONTAINER_CONTEXT_PATH --dockerfile $CONTAINER_DOCKERFILE $DESTINATIONS --cache=true --cache-copy-layers --cache-dir /cache/kaniko --cache-repo $CONTAINER_CACHE_REPO --cache-ttl=$CONTAINER_CACHE_TTL $FINAL_IGNORE_PATHS $KANIKO_TARGET $FINAL_BUILD_ARGS $KANIKO_PLATFORM $ANNOTATIONS $KANIKO_DEFAULT_FLAGS $KANIKO_EXTRA_FLAGS'
317
17:05:37
$ /kaniko/executor --context $CONTAINER_CONTEXT_PATH --dockerfile $CONTAINER_DOCKERFILE $DESTINATIONS --cache=true --cache-copy-layers --cache-dir /cache/kaniko --cache-repo $CONTAINER_CACHE_REPO --cache-ttl=$CONTAINER_CACHE_TTL $FINAL_IGNORE_PATHS $KANIKO_TARGET $FINAL_BUILD_ARGS $KANIKO_PLATFORM $ANNOTATIONS $KANIKO_DEFAULT_FLAGS $KANIKO_EXTRA_FLAGS
318
17:05:37
+ /kaniko/executor --context /build/internal/gitlab-templates/context/ --dockerfile Dockerfile.python '--destination=registry.scandit.com/internal/gitlab-templates:37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873' '--destination=registry.scandit.com/internal/gitlab-templates:latest' '--destination=registry.scandit.com/internal/gitlab-templates:latest-CI54273473-20260503' '--cache=true' --cache-copy-layers --cache-dir /cache/kaniko --cache-repo registry.scandit.com/internal/gitlab-templates/cache '--cache-ttl=336h' --build-arg 'BASE_IMAGE_TAG=ubuntu-3.12-root' --annotation 'org.opencontainers.image.ref.name=master' --annotation 'org.opencontainers.image.revision=3284003440e09877917148c203626f055079d1b3' --annotation 'org.opencontainers.image.url=https://gitlab.scandit.com/internal/gitlab-templates/-/jobs/54273473' --annotation 'io.gitlab.ci.pipeline_id=1576293' --annotation 'io.gitlab.ci.job_id=54273473' --annotation 'io.gitlab.ci.job_image=registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac' --annotation 'org.opencontainers.image.title=registry.scandit.com/internal/gitlab-templates:latest' --annotation 'org.opencontainers.image.created=2026-05-03T17:05:37Z' --annotation 'org.opencontainers.image.vendor=Scandit' --annotation 'io.scandit.ci.hash=37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873' --preserve-context '--credential-helpers=gitlab' --secret 'id=netrc,src=/kaniko/.netrc' --secret 'id=ci_job_token,env=CI_JOB_TOKEN'
319
17:05:37
INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
320
17:05:38
INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
321
17:05:38
INFO[0000] Retrieving image registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root from registry registry.scandit.com
322
17:05:38
INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
323
17:05:38
INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
324
17:05:38
INFO[0000] Returning cached image manifest
325
17:05:38
INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
326
17:05:38
INFO[0000] Returning cached image manifest
327
17:05:38
INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
328
17:05:38
INFO[0000] Returning cached image manifest
329
17:05:38
INFO[0000] Built cross stage deps: map[]
330
17:05:38
INFO[0000] Skipping context snapshot as no-one requires it
331
17:05:38
INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
332
17:05:38
INFO[0000] Returning cached image manifest
333
17:05:38
INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
334
17:05:38
INFO[0000] Returning cached image manifest
335
17:05:38
INFO[0000] Building stage 'registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root' [idx: '0', base-idx: '-1']
336
17:05:38
INFO[0000] Checking for cached layer registry.scandit.com/internal/gitlab-templates/cache:48b13139b10133d25033e7503e892c77ca6c64ac464e7312fa1a58d227bce4dc...
337
17:05:38
INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
338
17:05:38
INFO[0000] No cached layer found for cmd COPY requirements.txt requirements.txt
339
17:05:38
INFO[0000] Unpacking rootfs as cmd COPY requirements.txt requirements.txt requires it.
340
17:05:56
INFO[0019] COPY requirements.txt requirements.txt
341
17:05:56
INFO[0019] Taking snapshot of files...
342
17:05:56
INFO[0019] Pushing layer registry.scandit.com/internal/gitlab-templates/cache:48b13139b10133d25033e7503e892c77ca6c64ac464e7312fa1a58d227bce4dc to cache now
343
17:05:56
INFO[0019] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
344
17:05:56
INFO[0019] ARG PYTHONDONTWRITEBYTECODE=1
345
17:05:56
INFO[0019] Pushing image to registry.scandit.com/internal/gitlab-templates/cache:48b13139b10133d25033e7503e892c77ca6c64ac464e7312fa1a58d227bce4dc
346
17:05:56
INFO[0019] Taking snapshot of files...
347
17:05:56
INFO[0019] RUN --mount=type=secret,id=netrc,target=/root/.netrc --mount=type=cache,target=/root/.cache/uv uv pip install --system -r requirements.txt
348
17:05:56
INFO[0019] Initializing snapshotter ...
349
17:05:56
INFO[0019] Taking snapshot of full filesystem...
350
17:05:57
INFO[0019] Pushed registry.scandit.com/internal/gitlab-templates/cache@sha256:b6dd919e1e5b1260cafe2967b50bf682b5d21298f7fc3f65181c6a736db73ae9
351
17:06:17
INFO[0039] Cmd: /bin/sh
352
17:06:17
INFO[0039] Args: [-c uv pip install --system -r requirements.txt]
353
17:06:17
INFO[0039] Util.Lookup returned: &{Uid:0 Gid:0 Username:root Name:root HomeDir:/root}
354
17:06:17
INFO[0039] Performing slow lookup of group ids for root
355
17:06:17
INFO[0039] Running: [/kaniko/tini -s -- /bin/sh -c uv pip install --system -r requirements.txt]
356
17:06:17
Using Python 3.12.12 environment at: /root/.pyenv/versions/3.12.12
357
17:06:17
Resolved 7 packages in 456ms
358
17:06:17
Downloading pygments (1.2MiB)
359
17:06:18
Downloaded pygments
360
17:06:18
Prepared 7 packages in 394ms
361
17:06:18
Installed 7 packages in 155ms
362
17:06:18
+ coverage==7.13.5
363
17:06:18
+ iniconfig==2.3.0
364
17:06:18
+ packaging==26.2
365
17:06:18
+ pluggy==1.6.0
366
17:06:18
+ pygments==2.20.0
367
17:06:18
+ pytest==9.0.3
368
17:06:18
+ pytest-cov==7.1.0
369
17:06:18
INFO[0040] Taking snapshot of full filesystem...
370
17:06:41
INFO[0063] Pushing layer registry.scandit.com/internal/gitlab-templates/cache:1079e679a2f8ba72eada75d619eb0b57e499f246b1af1814a26752cccfee9220 to cache now
371
17:06:41
INFO[0063] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
372
17:06:41
INFO[0063] Pushing image to registry.scandit.com/internal/gitlab-templates/cache:1079e679a2f8ba72eada75d619eb0b57e499f246b1af1814a26752cccfee9220
373
17:06:41
INFO[0063] Pushed registry.scandit.com/internal/gitlab-templates/cache@sha256:54670c38f5a14ab3a4e597b825b6d069b2b5b7c90a5260996275e622383bd897
374
17:06:41
INFO[0063] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
375
17:06:41
INFO[0063] Pushing image to registry.scandit.com/internal/gitlab-templates:37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873
376
17:06:42
INFO[0064] Pushed registry.scandit.com/internal/gitlab-templates@sha256:9c037f8ca6a160b2d9e1bd8580cd4a8891525438d62885b7e803068a9c1f2bf5
377
17:06:42
INFO[0064] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
378
17:06:42
INFO[0064] Pushing image to registry.scandit.com/internal/gitlab-templates:latest
379
17:06:43
INFO[0065] Pushed registry.scandit.com/internal/gitlab-templates@sha256:9c037f8ca6a160b2d9e1bd8580cd4a8891525438d62885b7e803068a9c1f2bf5
380
17:06:43
INFO[0065] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
381
17:06:43
INFO[0065] Pushing image to registry.scandit.com/internal/gitlab-templates:latest-CI54273473-20260503
382
17:06:43
INFO[0065] Pushed registry.scandit.com/internal/gitlab-templates@sha256:9c037f8ca6a160b2d9e1bd8580cd4a8891525438d62885b7e803068a9c1f2bf5
383
17:06:43
+ cleanup
384
17:06:43
+ rv=0
385
17:06:43
+ '[' 0 -ne 0 ]
386
17:06:43
+ echo
387
17:06:43
388
17:06:43
+ echo 'Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54273473'
389
17:06:43
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54273473
390
17:06:43
+ echo
391
17:06:43
392
17:06:43
+ echo
393
17:06:43
394
17:06:43
+ echo 'Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=ci10&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-1-jq36iuan&var-resolution=15&from=1777827937000&to=1777828003000'
395
17:06:43
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=ci10&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-1-jq36iuan&var-resolution=15&from=1777827937000&to=1777828003000
396
17:06:43
+ echo 'Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=ci10&var-resolution=15s&from=1777827937000&to=1777828003000'
397
17:06:43
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=ci10&var-resolution=15s&from=1777827937000&to=1777828003000
398
17:06:43
+ echo 'Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1576293&var-filters=CI_JOB_ID%7C%3D%7C54273473&sortOrder=Ascending&from=1777827937000&to=1777828003000'
399
17:06:43
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1576293&var-filters=CI_JOB_ID%7C%3D%7C54273473&sortOrder=Ascending&from=1777827937000&to=1777828003000
400
17:06:43
+ date -d @1777223203 '+%Y-%m-%d'
401
17:06:43
+ __date_from=2026-04-26
402
17:06:43
+ date -d @1778432803 '+%Y-%m-%d'
403
17:06:43
+ __date_to=2026-05-10
404
17:06:43
+ echo 'Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-26~2026-05-10&job_name=build-python3-image-root-user&project=internal/gitlab-templates'
405
17:06:43
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-26~2026-05-10&job_name=build-python3-image-root-user&project=internal/gitlab-templates
406
17:06:43
+ echo
407
17:06:43
408
17:06:43
+ exit 0
409
17:06:43
410
17:06:43
section_end:1777828003:step_script
411
17:06:43
+section_start:1777828003:upload_artifacts_on_success
412
17:06:43
+Uploading artifacts for successful job
413
17:06:44
Uploading artifacts...
414
17:06:44
docker_image_build.env: found 1 matching artifact files and directories
415
17:06:44
Uploading artifacts as "dotenv" to coordinator... 201 Created correlation_id=01KQQCX06ST54V84MFYYKV8PT5 id=54273473 responseStatus=201 Created token=64_ydGjJc
416
17:06:44
417
17:06:44
section_end:1777828004:upload_artifacts_on_success
418
17:06:44
+section_start:1777828004:cleanup_file_variables
419
17:06:44
+Cleaning up project directory and file based variables
420
17:06:45
Removing context/
421
17:06:45
Removing docker_image_build.env
422
17:06:45
HEAD is now at 3284003 Merge branch 'renovate/docker-digests' into 'master'
423
17:06:45
424
17:06:45
section_end:1777828005:cleanup_file_variables
425
17:06:45
+
426
17:06:45
Job succeeded
427