build-python3-image-root-user ○ success

Duration: 14s
Queued: 3s
📁 Stage: docker-image
🖥 Runner: linux-3
Average Duration
30s
This job: 14s
Failure Rate
0.7%
last 30 days

Job Execution Phases

💡 Tip: Click on any phase bar to jump to that section in the log below

Job Analysis

Job Status: Passed

Status: Job passed successfully

Full Job Log

399 lines
Match - of 0
1 22:35:37 Running with gitlab-runner 18.9.0 (07e534ba)
2 22:35:37 on gitlab-runner-linux-3-59cc58cb8f-zhhfl m6BsGHXRX, system ID: r_cd3Y9Qk7x1y9
3 22:35:37 feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_ENABLE_JOB_CLEANUP:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4 22:35:37 Resolving secrets
5 22:35:37 section_start:1778106937:prepare_executor
6 22:35:37 +Preparing the "kubernetes" executor
7 22:35:37 "CPURequest" overwritten with "2"
8 22:35:37 "MemoryRequest" overwritten with "4G"
9 22:35:37 Using Kubernetes namespace: gitlab-runner
10 22:35:37 Using Kubernetes executor with image registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac ...
11 22:35:37 Using attach strategy to execute scripts...
12 22:35:37 Using effective pull policy of [Always] for container build
13 22:35:37 Using effective pull policy of [Always] for container helper
14 22:35:37 Using effective pull policy of [Always] for container init-permissions
15 22:35:37 section_end:1778106937:prepare_executor
16 22:35:37 +section_start:1778106937:prepare_script
17 22:35:37 +Preparing environment
18 22:35:37 Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
19 22:35:37 WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
20 22:35:37 Subscribing to Kubernetes Pod events...
21 22:35:37 Type Reason Message
22 22:35:37 Normal Scheduled Successfully assigned gitlab-runner/runner-m6bsghxrx-project-621-concurrent-3-pxa7cyvv to ci4
23 22:35:38 Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
24 22:35:38 Normal Created Created container: init-permissions
25 22:35:38 Normal Started Started container init-permissions
26 22:35:39 Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
27 22:35:39 Normal Created Created container: helper
28 22:35:39 Normal Started Started container helper
29 22:35:39 Normal Pulling Pulling image "registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac"
30 22:35:40 Normal Pulled Successfully pulled image "registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac" in 1.115s (1.115s including waiting). Image size: 49989654 bytes.
31 22:35:41 Normal Created Created container: build
32 22:35:41 Normal Started Started container build
33 22:35:44 Running on runner-m6bsghxrx-project-621-concurrent-3-pxa7cyvv via gitlab-runner-linux-3-59cc58cb8f-zhhfl...
34 22:35:44
35 22:35:44 section_end:1778106944:prepare_script
36 22:35:44 +section_start:1778106944:get_sources
37 22:35:44 +Getting source from Git repository
38 22:35:44 Gitaly correlation ID: 01KQZPXBBANBGKN08HA3WADKEC
39 22:35:44 Fetching changes with git depth set to 1...
40 22:35:44 Initialized empty Git repository in /build/internal/gitlab-templates/.git/
41 22:35:44 Created fresh repository.
42 22:35:45 Checking out 7f6b32cc as detached HEAD (ref is refs/merge-requests/640/merge)...
43 22:35:45
44 22:35:45 Skipping Git submodules setup
45 22:35:45
46 22:35:45 section_end:1778106945:get_sources
47 22:35:45 +section_start:1778106945:step_script
48 22:35:45 +Executing "step_script" stage of the job script
49 22:35:45 section_start:1778106945:section_pre_build_script_0[hide_duration=true,collapsed=true] $ function cleanup {
50 22:35:45 rv=$?
51 22:35:45 if [ $rv -ne 0 ]; then
52 22:35:45 echo ""
53 22:35:45 echo " Failure Cause Analysis might help, please open this link:"
54 22:35:45 echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
55 22:35:45 echo ""
56 22:35:45 fi
57 22:35:45 echo ""
58 22:35:45 echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
59 22:35:45 echo ""
60 22:35:45 echo ""
61 22:35:45 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
62 22:35:45 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
63 22:35:45 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
64 22:35:45 __date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
65 22:35:45 __date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
66 22:35:45 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
67 22:35:45 echo ""
68 22:35:45 exit $rv
69 22:35:45 }
70 22:35:45 trap cleanup EXIT
71 22:35:45 echo "INFO: This is the CI job pre_build_script"
72 22:35:45 echo "INFO: It's defined in the backend/infra/onprem/k8s repo."
73 22:35:45 echo "INFO: These additional Scandit variables are available to you:"
74 22:35:45 echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
75 22:35:45 echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
76 22:35:45 echo " SC_K8S_KYVERNO_PATCHES: |"
77 22:35:45 echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
78 22:35:45 echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
79 22:35:45 if command -v numfmt >/dev/null 2>&1; then
80 22:35:45 echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
81 22:35:45 else
82 22:35:45 echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
83 22:35:45 fi
84 22:35:45 __start_time=${EPOCHSECONDS}
85 22:35:45 echo ""
86 22:35:45 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
87 22:35:45 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
88 22:35:45 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
89 22:35:45 __date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
90 22:35:45 __date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
91 22:35:45 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
92 22:35:45 echo ""
93 22:35:45 echo "Setting up credentials for Gitlab Python registries"
94 22:35:45 mkdir -p ~
95 22:35:45 echo "machine gitlab.scandit.com" > ~/.netrc
96 22:35:45 echo "login gitlab-ci-token" >> ~/.netrc
97 22:35:45 echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
98 22:35:45 chmod 600 ~/.netrc
99 22:35:45 if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
100 22:35:45 git config --global --add safe.directory $CI_PROJECT_DIR
101 22:35:45 fi
102 22:35:45 sleep infinity &
103 22:35:45 echo $! > ~/.bg_pid
104 22:35:45 section_end:1778106945:section_pre_build_script_0
105 22:35:45 INFO: This is the CI job pre_build_script
106 22:35:45 INFO: It's defined in the backend/infra/onprem/k8s repo.
107 22:35:45 INFO: These additional Scandit variables are available to you:
108 22:35:45 SC_K8S_NODE_NAME: ci4
109 22:35:45 SC_K8S_IMAGE_ID:
110 22:35:45 SC_K8S_KYVERNO_PATCHES: |
111 22:35:45
112 22:35:45 cpu (r/l): 2/8
113 22:35:45 memory (r/l): 4000000000/17179869184
114 22:35:45
115 22:35:45 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=ci4&var-namespace=gitlab-runner&var-pod=runner-m6bsghxrx-project-621-concurrent-3-pxa7cyvv&var-resolution=15&from=1778106945000&to=now
116 22:35:45 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=ci4&var-resolution=15s&from=1778106945000&to=now
117 22:35:45 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1582483&var-filters=CI_JOB_ID%7C%3D%7C54539140&sortOrder=Ascending&from=1778106945000&to=now
118 22:35:45 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=build-python3-image-root-user&project=internal/gitlab-templates
119 22:35:45
120 22:35:45 Setting up credentials for Gitlab Python registries
121 22:35:45 $ echo $DOCKER_CONFIG_JSON > /kaniko/.docker/config.json
122 22:35:45 $ mv /root/.netrc /kaniko/.netrc
123 22:35:45 section_start:1778106945:section_script_step_2[hide_duration=true,collapsed=true] $ function copy_files() {
124 22:35:45 local src="$1"
125 22:35:45 local trg="$2"
126 22:35:45 for f in $src; do
127 22:35:45 t="$trg/`dirname $f`"
128 22:35:45 mkdir -p $t || true
129 22:35:45 echo "Copy $f"
130 22:35:45 cp -pr $f $trg/$f
131 22:35:45 done
132 22:35:45 }
133 22:35:45 function recursive_hash() {
134 22:35:45 local dir="$1"
135 22:35:45 find "$dir" -exec stat -c '%F|%a|%u:%g|%n' {} + -type f -exec sha256sum {} + | sort | sha256sum | cut -d ' ' -f1
136 22:35:45 }
137 22:35:45 function remote_docker_digest() {
138 22:35:45 local images="$1"
139 22:35:45 echo $images | xargs -n 1 crane digest
140 22:35:45 }
141 22:35:45 function remote_image_exists() {
142 22:35:45 local image="$1"
143 22:35:45 crane manifest $image > /dev/null 2>&1
144 22:35:45 }
145 22:35:45 function remote_images_are_identical() {
146 22:35:45 local imageA="$1"
147 22:35:45 local imageB="$2"
148 22:35:45 if [[ $(remote_docker_digest "$imageA") == $(remote_docker_digest "$imageB") ]]; then
149 22:35:45 return 0
150 22:35:45 else
151 22:35:45 return 1
152 22:35:45 fi
153 22:35:45 }
154 22:35:45 function copy_image() {
155 22:35:45 local image="$1"
156 22:35:45 local remotes="$2"
157 22:35:45 local backup_ext="$3"
158 22:35:45 echo "$image"
159 22:35:45 local source_digest=$(remote_docker_digest $image)
160 22:35:45 local target_digest
161 22:35:45 for registry in $remotes; do
162 22:35:45 if target_digest=$(remote_docker_digest $registry); then
163 22:35:45 if [ "$target_digest" != "$source_digest" ]; then
164 22:35:45 echo "image outdated, overwriting with newest version"
165 22:35:45 crane copy $image $registry
166 22:35:45 crane copy $image ${registry}${backup_ext}
167 22:35:45 fi
168 22:35:45 else
169 22:35:45 echo "image does not exist, writing newest version"
170 22:35:45 crane copy $image $registry
171 22:35:45 crane copy $image ${registry}${backup_ext}
172 22:35:45 fi
173 22:35:45 done
174 22:35:45 }
175 22:35:45 section_end:1778106945:section_script_step_2
176 22:35:45 section_start:1778106945:section_script_step_3[hide_duration=true,collapsed=true] $ if [ "$CONTAINER_SUBDIR" != "" ]; then
177 22:35:45 echo "Entering subpath $CONTAINER_SUBDIR"
178 22:35:45 cd $CONTAINER_SUBDIR
179 22:35:45 fi
180 22:35:45 section_end:1778106945:section_script_step_3
181 22:35:45 $ copy_files "$CONTAINER_IMPLICIT_REQUIREMENTS $CONTAINER_REQUIREMENTS" "$CONTAINER_CONTEXT_PATH"
182 22:35:45 Copy Dockerfile.python
183 22:35:45 Copy requirements.txt
184 22:35:45 $ echo "$CONTAINER_BUILD_ENVIRONMENT" > $CONTAINER_CONTEXT_PATH/.docker-build-env
185 22:35:45 $ docker_checksum=$(recursive_hash $CONTAINER_CONTEXT_PATH)
186 22:35:45 section_start:1778106945:section_script_step_7[hide_duration=true,collapsed=true] $ if [ "$CONTAINER_IMAGE_NAME" == "" ]; then
187 22:35:45 final_image_name=${CONTAINER_IMAGE_URL}
188 22:35:45 else
189 22:35:45 final_image_name=${CONTAINER_IMAGE_URL}/${CONTAINER_IMAGE_NAME}
190 22:35:45 fi
191 22:35:45 section_end:1778106945:section_script_step_7
192 22:35:45 $ final_image_url=${final_image_name}:${docker_checksum}
193 22:35:45 section_start:1778106945:section_script_step_9[hide_duration=true,collapsed=true] $ if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
194 22:35:45 echo $CONTAINER_IMAGE_VARIABLE=${final_image_url}-P${CI_PROJECT_ID}-${CI_PIPELINE_ID} > $CI_PROJECT_DIR/docker_image_build.env
195 22:35:45 else
196 22:35:45 echo $CONTAINER_IMAGE_VARIABLE=$final_image_url > $CI_PROJECT_DIR/docker_image_build.env
197 22:35:45 fi
198 22:35:45 section_end:1778106945:section_script_step_9
199 22:35:45 $ echo ${CONTAINER_IMAGE_VARIABLE}_HASH=$docker_checksum >> $CI_PROJECT_DIR/docker_image_build.env
200 22:35:45 section_start:1778106945:section_script_step_11[hide_duration=true,collapsed=true] $ if [ "${FORCE_BUILD}" != "true" ] || command -v crane &> /dev/null; then
201 22:35:45 echo $REGISTRY_PASSWORD | crane auth login $REGISTRY -u $REGISTRY_USER --password-stdin
202 22:35:45 fi
203 22:35:45 section_end:1778106945:section_script_step_11
204 22:35:45
205 22:35:45 WARNING! Your credentials are stored unencrypted in '/kaniko/.docker/config.json'.
206 22:35:45 Configure a credential helper to remove this warning. See
207 22:35:45 https://docs.docker.com/go/credential-store/
208 22:35:45
209 22:35:45 2026/05/06 22:35:45 logged in via /kaniko/.docker/config.json
210 22:35:45 section_start:1778106945:section_script_step_12[hide_duration=true,collapsed=true] $ if [ "${FORCE_BUILD}" != "true" ] && remote_image_exists "$final_image_url"; then
211 22:35:45 echo "Image already exists, skip the build."
212 22:35:45 echo "$final_image_url"
213 22:35:45 if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
214 22:35:45 _EXT=""
215 22:35:45 _BACKUP_EXT="-CI${CI_JOB_ID}-$(date '+%Y%m%d')"
216 22:35:45 elif [[ -n "$CI_MERGE_REQUEST_ID" ]]; then
217 22:35:45 _EXT="-MR${CI_MERGE_REQUEST_IID}"
218 22:35:45 _BACKUP_EXT=""
219 22:35:45 elif [[ "$CI_COMMIT_REF_PROTECTED" == "true" ]]; then
220 22:35:45 _EXT="-${CI_COMMIT_REF_SLUG}"
221 22:35:45 _BACKUP_EXT="-CI${CI_JOB_ID}-$(date '+%Y%m%d')"
222 22:35:45 fi
223 22:35:45 for _TAG in $CONTAINER_IMAGE_TAG; do
224 22:35:45 echo "Copying ${final_image_url} to ${final_image_name}:${_TAG}${_EXT}"
225 22:35:45 copy_image "${final_image_url}" "${final_image_name}:${_TAG}${_EXT}" "${_BACKUP_EXT}"
226 22:35:45 done
227 22:35:45 if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
228 22:35:45 _EXT="-P${CI_PROJECT_ID}-${CI_PIPELINE_ID}"
229 22:35:45 echo "Copying ${final_image_url} to ${final_image_url}${_EXT}"
230 22:35:45 copy_image "${final_image_url}" "${final_image_url}${_EXT}"
231 22:35:45 for _TAG in $CONTAINER_IMAGE_TAG; do
232 22:35:45 echo "Copying ${final_image_url} to ${final_image_name}:${_TAG}${_EXT}"
233 22:35:45 copy_image "${final_image_url}" "${final_image_name}:${_TAG}${_EXT}"
234 22:35:45 done
235 22:35:45 fi
236 22:35:45 exit 0
237 22:35:45 fi
238 22:35:45 section_end:1778106945:section_script_step_12
239 22:35:45 $ DESTINATIONS="--destination=$final_image_url"
240 22:35:45 section_start:1778106945:section_script_step_14[hide_duration=true,collapsed=true] $ if [[ "$CI_COMMIT_BRANCH" == "$CI_DEFAULT_BRANCH" ]]; then
241 22:35:45 _EXT=""
242 22:35:45 TIMESTAMP_TAGS=$CONTAINER_IMAGE_TAG
243 22:35:45 elif [[ -n "$CI_MERGE_REQUEST_ID" ]]; then
244 22:35:45 _EXT="-MR${CI_MERGE_REQUEST_IID}"
245 22:35:45 TIMESTAMP_TAGS=""
246 22:35:45 elif [[ "$CI_COMMIT_REF_PROTECTED" == "true" ]]; then
247 22:35:45 _EXT="-${CI_COMMIT_REF_SLUG}"
248 22:35:45 TIMESTAMP_TAGS=$CONTAINER_IMAGE_TAG
249 22:35:45 fi
250 22:35:45 section_end:1778106945:section_script_step_14
251 22:35:45 section_start:1778106945:section_script_step_15[hide_duration=true,collapsed=true] $ for _TAG in $CONTAINER_IMAGE_TAG; do
252 22:35:45 DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}"
253 22:35:45 done
254 22:35:45 section_end:1778106945:section_script_step_15
255 22:35:45 section_start:1778106945:section_script_step_16[hide_duration=true,collapsed=true] $ if [ "${PIPELINE_IMAGE_REFS}" == "1" ]; then
256 22:35:45 _EXT="-P${CI_PROJECT_ID}-${CI_PIPELINE_ID}"
257 22:35:45 DESTINATIONS="${DESTINATIONS} --destination=${final_image_url}${_EXT}"
258 22:35:45 for _TAG in $CONTAINER_IMAGE_TAG; do
259 22:35:45 DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}"
260 22:35:45 done
261 22:35:45 fi
262 22:35:45 section_end:1778106945:section_script_step_16
263 22:35:45 section_start:1778106945:section_script_step_17[hide_duration=true,collapsed=true] $ DATE=$(date '+%Y%m%d')
264 22:35:45 for _TAG in $TIMESTAMP_TAGS; do
265 22:35:45 DESTINATIONS="${DESTINATIONS} --destination=${final_image_name}:${_TAG}${_EXT}-CI${CI_JOB_ID}-${DATE}"
266 22:35:45 done
267 22:35:45 section_end:1778106945:section_script_step_17
268 22:35:45 section_start:1778106945:section_script_step_18[hide_duration=true,collapsed=true] $ if [ -n "${CONTAINER_BUILD_ARGS}" ]; then
269 22:35:45 for _BUILD_ARG in $CONTAINER_BUILD_ARGS; do
270 22:35:45 FINAL_BUILD_ARGS="--build-arg $_BUILD_ARG $FINAL_BUILD_ARGS"
271 22:35:45 done
272 22:35:45 fi
273 22:35:45 section_end:1778106945:section_script_step_18
274 22:35:45 section_start:1778106945:section_script_step_19[hide_duration=true,collapsed=true] $ for _PATH in $CONTAINER_IGNORE_PATHS; do
275 22:35:45 FINAL_IGNORE_PATHS="--ignore-path=$_PATH $FINAL_IGNORE_PATHS"
276 22:35:45 done
277 22:35:45 section_end:1778106945:section_script_step_19
278 22:35:45 section_start:1778106945:section_script_step_20[hide_duration=true,collapsed=true] $ if [ -n "${CONTAINER_PLATFORM}" ]; then
279 22:35:45 KANIKO_PLATFORM="--custom-platform=${CONTAINER_PLATFORM}"
280 22:35:45 fi
281 22:35:45 section_end:1778106945:section_script_step_20
282 22:35:45 $ ANNOTATIONS=""
283 22:35:45 section_start:1778106945:section_script_step_22[hide_duration=true,collapsed=true] $ if [[ -n "$CI_COMMIT_REF_NAME" ]]; then
284 22:35:45 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.ref.name=${CI_COMMIT_REF_NAME}"
285 22:35:45 fi
286 22:35:45 section_end:1778106945:section_script_step_22
287 22:35:45 section_start:1778106945:section_script_step_23[hide_duration=true,collapsed=true] $ if [[ -n "$CI_COMMIT_SHA" ]]; then
288 22:35:45 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.revision=${CI_COMMIT_SHA}"
289 22:35:45 fi
290 22:35:45 section_end:1778106945:section_script_step_23
291 22:35:45 section_start:1778106945:section_script_step_24[hide_duration=true,collapsed=true] $ if [[ -n "$CI_JOB_URL" ]]; then
292 22:35:45 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.url=${CI_JOB_URL}"
293 22:35:45 fi
294 22:35:45 section_end:1778106945:section_script_step_24
295 22:35:45 section_start:1778106945:section_script_step_25[hide_duration=true,collapsed=true] $ if [[ -n "$CI_PIPELINE_ID" ]]; then
296 22:35:45 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.pipeline_id=${CI_PIPELINE_ID}"
297 22:35:45 fi
298 22:35:45 section_end:1778106945:section_script_step_25
299 22:35:45 section_start:1778106945:section_script_step_26[hide_duration=true,collapsed=true] $ if [[ -n "$CI_JOB_ID" ]]; then
300 22:35:45 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.job_id=${CI_JOB_ID}"
301 22:35:45 fi
302 22:35:45 section_end:1778106945:section_script_step_26
303 22:35:45 section_start:1778106945:section_script_step_27[hide_duration=true,collapsed=true] $ if [[ -n "$CI_JOB_IMAGE" ]]; then
304 22:35:45 ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.gitlab.ci.job_image=${CI_JOB_IMAGE}"
305 22:35:45 fi
306 22:35:45 section_end:1778106945:section_script_step_27
307 22:35:45 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.title=${final_image_name}:$(echo $CONTAINER_IMAGE_TAG | cut -d' ' -f1)"
308 22:35:45 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.created=$(date -u +%Y-%m-%dT%H:%M:%SZ)"
309 22:35:45 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY org.opencontainers.image.vendor=Scandit"
310 22:35:45 $ ANNOTATIONS="${ANNOTATIONS} $KANIKO_ANNOTATION_KEY io.scandit.ci.hash=${docker_checksum}"
311 22:35:45 section_start:1778106945:section_script_step_32[hide_duration=true,collapsed=true] $ if [ -n "${CONTAINER_TARGET_STAGE}" ]; then
312 22:35:45 KANIKO_TARGET="--target $CONTAINER_TARGET_STAGE"
313 22:35:45 fi
314 22:35:45 section_end:1778106945:section_script_step_32
315 22:35:45 $ set -x
316 22:35:45 + echo '$ /kaniko/executor --context $CONTAINER_CONTEXT_PATH --dockerfile $CONTAINER_DOCKERFILE $DESTINATIONS --cache=true --cache-copy-layers --cache-dir /cache/kaniko --cache-repo $CONTAINER_CACHE_REPO --cache-ttl=$CONTAINER_CACHE_TTL $FINAL_IGNORE_PATHS $KANIKO_TARGET $FINAL_BUILD_ARGS $KANIKO_PLATFORM $ANNOTATIONS $KANIKO_DEFAULT_FLAGS $KANIKO_EXTRA_FLAGS'
317 22:35:45 $ /kaniko/executor --context $CONTAINER_CONTEXT_PATH --dockerfile $CONTAINER_DOCKERFILE $DESTINATIONS --cache=true --cache-copy-layers --cache-dir /cache/kaniko --cache-repo $CONTAINER_CACHE_REPO --cache-ttl=$CONTAINER_CACHE_TTL $FINAL_IGNORE_PATHS $KANIKO_TARGET $FINAL_BUILD_ARGS $KANIKO_PLATFORM $ANNOTATIONS $KANIKO_DEFAULT_FLAGS $KANIKO_EXTRA_FLAGS
318 22:35:45 + /kaniko/executor --context /build/internal/gitlab-templates/context/ --dockerfile Dockerfile.python '--destination=registry.scandit.com/internal/gitlab-templates:37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873' '--destination=registry.scandit.com/internal/gitlab-templates:latest-MR640' '--cache=true' --cache-copy-layers --cache-dir /cache/kaniko --cache-repo registry.scandit.com/internal/gitlab-templates/cache '--cache-ttl=336h' --build-arg 'BASE_IMAGE_TAG=ubuntu-3.12-root' --annotation 'org.opencontainers.image.ref.name=renovate/docker-digests' --annotation 'org.opencontainers.image.revision=7f6b32cc858f497915cdbf195c3784d827544149' --annotation 'org.opencontainers.image.url=https://gitlab.scandit.com/internal/gitlab-templates/-/jobs/54539140' --annotation 'io.gitlab.ci.pipeline_id=1582483' --annotation 'io.gitlab.ci.job_id=54539140' --annotation 'io.gitlab.ci.job_image=registry.scandit.com/dockerfiles/kaniko:v1.27.3-crane@sha256:72bdc063db14f38a45910d33ccf066ecb088d4833fb2437fef336e49b81fd4ac' --annotation 'org.opencontainers.image.title=registry.scandit.com/internal/gitlab-templates:latest' --annotation 'org.opencontainers.image.created=2026-05-06T22:35:45Z' --annotation 'org.opencontainers.image.vendor=Scandit' --annotation 'io.scandit.ci.hash=37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873' --preserve-context '--credential-helpers=gitlab' --secret 'id=netrc,src=/kaniko/.netrc' --secret 'id=ci_job_token,env=CI_JOB_TOKEN'
319 22:35:46 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
320 22:35:46 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
321 22:35:46 INFO[0000] Retrieving image registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root from registry registry.scandit.com
322 22:35:46 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
323 22:35:46 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
324 22:35:46 INFO[0000] Returning cached image manifest
325 22:35:46 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
326 22:35:46 INFO[0000] Returning cached image manifest
327 22:35:46 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
328 22:35:46 INFO[0000] Returning cached image manifest
329 22:35:46 INFO[0000] Built cross stage deps: map[]
330 22:35:46 INFO[0000] Skipping context snapshot as no-one requires it
331 22:35:46 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
332 22:35:46 INFO[0000] Returning cached image manifest
333 22:35:46 INFO[0000] Retrieving image manifest registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root
334 22:35:46 INFO[0000] Returning cached image manifest
335 22:35:46 INFO[0000] Building stage 'registry.scandit.com/dockerfiles/pyenv:ubuntu-3.12-root' [idx: '0', base-idx: '-1']
336 22:35:46 INFO[0000] Checking for cached layer registry.scandit.com/internal/gitlab-templates/cache:20d2ebdcd331c7378c30abd4046dfeedae915145b2b15d6819ebb21c0e2e10ea...
337 22:35:46 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
338 22:35:46 INFO[0000] Using caching version of cmd: COPY requirements.txt requirements.txt
339 22:35:46 INFO[0000] Checking for cached layer registry.scandit.com/internal/gitlab-templates/cache:3f400bfbfa83196dc8827a835680ded84c071c3774af0c88de95986c2828d1bb...
340 22:35:46 INFO[0000] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
341 22:35:46 INFO[0000] Using caching version of cmd: RUN --mount=type=secret,id=netrc,target=/root/.netrc --mount=type=cache,target=/root/.cache/uv uv pip install --system -r requirements.txt
342 22:35:46 INFO[0000] Skipping unpacking as no commands require it.
343 22:35:46 INFO[0000] COPY requirements.txt requirements.txt
344 22:35:46 INFO[0000] Found cached layer, extracting to filesystem
345 22:35:46 INFO[0000] ARG PYTHONDONTWRITEBYTECODE=1
346 22:35:46 INFO[0000] Taking snapshot of files...
347 22:35:46 INFO[0000] RUN --mount=type=secret,id=netrc,target=/root/.netrc --mount=type=cache,target=/root/.cache/uv uv pip install --system -r requirements.txt
348 22:35:46 INFO[0000] Found cached layer, extracting to filesystem
349 22:35:47 INFO[0001] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
350 22:35:47 INFO[0001] Pushing image to registry.scandit.com/internal/gitlab-templates:37ef3772b2786f9e8fc1560bf12bf7b4b608a0dedccd164159afad5059844873
351 22:35:49 INFO[0003] Pushed registry.scandit.com/internal/gitlab-templates@sha256:165af4ccfdfc9b9f9496b6756a41b30f6ebab92e3a24e45f8b55fded3483c09d
352 22:35:49 INFO[0003] credential providers by priority: [file:/kaniko/.docker/config.json, gitlab]
353 22:35:49 INFO[0003] Pushing image to registry.scandit.com/internal/gitlab-templates:latest-MR640
354 22:35:49 INFO[0003] Pushed registry.scandit.com/internal/gitlab-templates@sha256:165af4ccfdfc9b9f9496b6756a41b30f6ebab92e3a24e45f8b55fded3483c09d
355 22:35:49 + cleanup
356 22:35:49 + rv=0
357 22:35:49 + '[' 0 -ne 0 ]
358 22:35:49 + echo
359 22:35:49
360 22:35:49 + echo 'Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54539140'
361 22:35:49 Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54539140
362 22:35:49 + echo
363 22:35:49
364 22:35:49 + echo
365 22:35:49
366 22:35:49 + echo 'Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=ci4&var-namespace=gitlab-runner&var-pod=runner-m6bsghxrx-project-621-concurrent-3-pxa7cyvv&var-resolution=15&from=1778106945000&to=1778106949000'
367 22:35:49 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=ci4&var-namespace=gitlab-runner&var-pod=runner-m6bsghxrx-project-621-concurrent-3-pxa7cyvv&var-resolution=15&from=1778106945000&to=1778106949000
368 22:35:49 + echo 'Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=ci4&var-resolution=15s&from=1778106945000&to=1778106949000'
369 22:35:49 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=ci4&var-resolution=15s&from=1778106945000&to=1778106949000
370 22:35:49 + echo 'Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1582483&var-filters=CI_JOB_ID%7C%3D%7C54539140&sortOrder=Ascending&from=1778106945000&to=1778106949000'
371 22:35:49 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1582483&var-filters=CI_JOB_ID%7C%3D%7C54539140&sortOrder=Ascending&from=1778106945000&to=1778106949000
372 22:35:49 + date -d @1777502149 '+%Y-%m-%d'
373 22:35:49 + __date_from=2026-04-29
374 22:35:49 + date -d @1778711749 '+%Y-%m-%d'
375 22:35:49 + __date_to=2026-05-13
376 22:35:49 + echo 'Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=build-python3-image-root-user&project=internal/gitlab-templates'
377 22:35:49 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=build-python3-image-root-user&project=internal/gitlab-templates
378 22:35:49 + echo
379 22:35:49
380 22:35:49 + exit 0
381 22:35:49
382 22:35:49 section_end:1778106949:step_script
383 22:35:49 +section_start:1778106949:upload_artifacts_on_success
384 22:35:49 +Uploading artifacts for successful job
385 22:35:50 Uploading artifacts...
386 22:35:50 docker_image_build.env: found 1 matching artifact files and directories
387 22:35:50 Uploading artifacts as "dotenv" to coordinator... 201 Created correlation_id=01KQZPXRF4S3ZYYDXH5WFJJ2XK id=54539140 responseStatus=201 Created token=64_vziJsj
388 22:35:50
389 22:35:50 section_end:1778106950:upload_artifacts_on_success
390 22:35:50 +section_start:1778106950:cleanup_file_variables
391 22:35:50 +Cleaning up project directory and file based variables
392 22:35:51 Removing context/
393 22:35:51 Removing docker_image_build.env
394 22:35:51 HEAD is now at 7f6b32c Merge branch 'renovate/docker-digests' into 'master'
395 22:35:51
396 22:35:51 section_end:1778106951:cleanup_file_variables
397 22:35:51 +
398 22:35:51 Job succeeded
399