Uploading an image#
This assumes you have taskgraph installed in a virtualenv, you have docker installed and are logged in via
docker login, and you’ve already built the trusted docker image via a level 3 docker image task.
load the image. Docker should be running; you should be logged into docker. Activate your taskgraph virtualenv and download+load the image:
taskgraph load-image --task-id CDDoj06lSTSQ6qs5teT-CA
This will download public/image.tar.zst into docker.
tag the image:
docker tag image_builder mozillareleases/image_builder:5.0.0
push the image:
docker push mozillareleases/image_builder:5.0.0
land the change in-tree. This will look like [this](https://searchfox.org/mozilla-central/rev/ce21a13035623c1d349980057d09000e70669802/taskcluster/taskgraph/transforms/docker_image.py#36-40): note that the format is
At the time of writing, there are 2 decision images: a general one and gecko’s. The former is built against the taskgraph repo, while gecko_decision is built in mozilla-central They are only rebuilt whenever a change is detected by the respective decision task. You may want to upload them on DockerHub so that decision tasks that are using these images can load them. The procedure is similar to the one above.
Load the image (see above)
Tag. For the generic image:
docker tag decision:latest mozillareleases/taskgraph:decision-$TC_INDEX_HASH
$TC_INDEX_HASH is found in the routes of the taskcluster task that generated the image. Eg:
$TC_INDEX_HASH is 5a222cefd6dd1397487a7b70f450a4ab16cf5eed71e126e34928b26d4ccf7577 when the route is
For the gecko-specific image:
docker tag decision:latest mozillareleases/gecko_decision:$VERSION
$VERSION is the contents of
taskcluster/docker/decision/VERSION (which should have been updated ahead of the image build).
Push the image:
docker push mozillareleases/taskgraph:decision-$TC_INDEX_HASH
docker push mozillareleases/gecko_decision:$VERSION
Land the change in-tree. See this example
Usually this will only be needed for re-pinnning the requirements, or minor changes to the image running hooks. If you don’t have a token, you will need to login to dockerhub and create a CLI token. The credentials for mozillareleases user is in sops.
[optional] Re-pin the requirements with python 3.8:
docker run --rm -it -w /files/build-decision -v $(pwd):/files python:3.8 /bin/bash -c "pip install -qqqU pip pip-compile-multi && pip-compile-multi -g base -g test"
Commit your changes, submit a PR, merge, wait for build-decision task to show up in treeherder
Load the image (see above).
Tag the image with your commit hash (get the hash from treeherder or
hg --debug id -i)
docker image tag build-decision mozillareleases/build-decision:86cc5419c32996b7d78422d7fed33ce79576f8eb
Push the image to dockerhub