update EnterpriseTests containers#123702
Conversation
|
Tagging subscribers to this area: @karelz, @dotnet/ncl |
There was a problem hiding this comment.
Pull request overview
Updates the System.Net EnterpriseTests Linux container setup to newer Ubuntu base images and refreshes authentication/test services to keep the environment working on current distros.
Changes:
- Bump EnterpriseTests Docker base images to
mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-24.04. - Replace Apache Kerberos auth module configuration from
mod_auth_kerbtomod_auth_gssapi. - Add FTPS (ProFTPD w/ TLS) and vendor/build the legacy
mod_auth_ntlm_winbindmodule from source.
Reviewed changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/linuxclient/Dockerfile | Updates linux client container base image to Ubuntu 24.04. |
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/kdc/Dockerfile | Updates KDC container base image to Ubuntu 24.04. |
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile | Updates apacheweb base image/packages; builds legacy NTLM module from source; adds ProFTPD/FTPS setup. |
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/apache2.conf | Switches Kerberos auth configuration to mod_auth_gssapi and updates related directives. |
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/run.sh | Starts ProFTPD alongside Apache to support FTPS testing. |
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c | Adds vendored legacy Apache NTLM module source to build on Ubuntu 24.04. |
| src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/README | Adds documentation for the vendored NTLM module. |
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/run.sh
Show resolved
Hide resolved
...braries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/README
Show resolved
Hide resolved
|
We also have 26.04 https://github.com/dotnet/dotnet-buildtools-prereqs-docker/tree/9bf227e4863d38717bf4fcbd036e8d7cb6239720/src/ubuntu/26.04. It will buy us more time before it expires. At their April / RTM cut, we can request engineering to rebuild the images from that tree (empirically, they rebuild images from scratch from time to time). |
The 24 & 26 have broken NTLM GSSAPI so I'm hesitant to jump there. |
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/apache2.conf
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/apache2.conf
Outdated
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/run.sh
Show resolved
Hide resolved
...sts/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c
Show resolved
Hide resolved
...sts/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/apache2.conf
Outdated
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/run.sh
Show resolved
Hide resolved
...sts/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/run.sh
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/proftpd.conf
Show resolved
Hide resolved
...sts/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/proftpd.conf
Show resolved
Hide resolved
...sts/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/mod_auth_ntlm_winbind.c
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/proftpd.conf
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Show resolved
Hide resolved
...braries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/mod_auth_ntlm_winbind/README
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/Dockerfile
Outdated
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/apache2.conf
Outdated
Show resolved
Hide resolved
src/libraries/Common/tests/System/Net/EnterpriseTests/setup/apacheweb/proftpd.conf
Show resolved
Hide resolved
Co-authored-by: Copilot <[email protected]>
This updates long gone Ubuntu 18.04 Ubuntu to newer 24.04.
This brings two problems and old libapache2-mod-auth-kerb and libapache2-mod-auth-ntlm-winbind are obsolete now and no longer available as package.
The Kerberos module was replaced by libapache2-mod-auth-gssapi so I updated the configuration.
The libapache2-mod-auth-ntlm-winbind is true legacy but it still seems to work fine so we can build it from sources to cover legacy use cases.
This change also pro-actively adds FTP with tls as preparation for #123135