Skip to content

Failure building images/gitea #4

@jnaulty

Description

@jnaulty

Ran into issue when running make
Pinpointed issue to make images/gitea.tar

Seems like we need to upgrade the version of node + npm in the build container.

Here's a snippet of the error:

#5 [build 2/3] RUN git clone https://github.com/go-gitea/gitea.git ~/src   ...
#5 0.301 Cloning into '/home/build/src'...
#5 69.74 Note: checking out 'aa1d9ef6cba71c80170ec8c9ef424cb780fa6481'.
#5 69.74 
#5 69.74 You are in 'detached HEAD' state. You can look around, make experimental
#5 69.74 changes and commit them, and you can discard any commits you make in this
#5 69.74 state without impacting any branches by performing another checkout.
#5 69.74 
#5 69.74 If you want to create a new branch to retain commits you create, you may
#5 69.74 do so (now or later) by using -b with the checkout command again. Example:
#5 69.74 
#5 69.74   git checkout -b <new-branch-name>
#5 69.74 
#5 69.74 HEAD is now at aa1d9ef6c Changelog 1.12.5 (#13002)
#5 69.84 npm install --no-save
#5 70.33 npm WARN npm npm does not support Node.js v10.21.0
#5 70.34 npm WARN npm You should probably upgrade to a newer version of node as we
#5 70.34 npm WARN npm can't make any promises that npm will work with this version.
#5 70.34 npm WARN npm Supported releases of Node.js are the latest release of 4, 6, 7, 8, 9.
#5 70.34 npm WARN npm You can find the latest version at https://nodejs.org/

Here's a full paste of the error: http://paste.debian.net/1174757/

Side-Note:
It's interesting finding the security issues present in this version of gitea as well, that might need further upstream poking to fix though:

➜  stack git:(jnaulty/remove-old-stack-containers) ✗ cat make.build.log| grep -i security  
#5 75.62 npm WARN notice [SECURITY] yargs-parser has the following vulnerability: 1 low. Go here for more details: https://www.npmjs.com/advisories?search=yargs-parser&version=5.0.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 80.47 npm WARN notice [SECURITY] serialize-javascript has the following vulnerability: 1 high. Go here for more details: https://www.npmjs.com/advisories?search=serialize-javascript&version=2.1.2 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 83.40 npm WARN notice [SECURITY] url-regex has the following vulnerability: 1 high. Go here for more details: https://www.npmjs.com/advisories?search=url-regex&version=3.2.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 89.09 npm WARN notice [SECURITY] set-value has the following vulnerability: 1 high. Go here for more details: https://www.npmjs.com/advisories?search=set-value&version=2.0.1 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 89.59 npm WARN notice [SECURITY] serialize-javascript has the following vulnerability: 1 high. Go here for more details: https://www.npmjs.com/advisories?search=serialize-javascript&version=3.0.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 89.73 npm WARN notice [SECURITY] node-fetch has the following vulnerability: 1 low. Go here for more details: https://www.npmjs.com/advisories?search=node-fetch&version=1.7.3 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 93.54 npm WARN notice [SECURITY] node-fetch has the following vulnerability: 1 low. Go here for more details: https://www.npmjs.com/advisories?search=node-fetch&version=2.6.0 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 93.92 npm WARN notice [SECURITY] elliptic has the following vulnerability: 1 high. Go here for more details: https://www.npmjs.com/advisories?search=elliptic&version=6.5.2 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.
#5 94.50 npm WARN notice [SECURITY] lodash has the following vulnerabilities: 1 high, 1 low. Go here for more details: https://www.npmjs.com/advisories?search=lodash&version=4.17.15 - Run `npm i npm@latest -g` to upgrade your npm version, and then `npm audit` to get more info.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions