From 1f9ce203046471f4c026d09bd93db7e379316bb6 Mon Sep 17 00:00:00 2001
From: Yishuai Li <yishuai.li@pingcap.com>
Date: Wed, 29 Apr 2026 15:47:44 +0800
Subject: [PATCH] fix(tikv/rust-rocksdb): migrate CI from CentOS 7 to Rocky
 Linux 8

openssl-sys v0.9.114 dropped support for OpenSSL < 1.1.0, which breaks
the encryption feature build on CentOS 7 (OpenSSL 1.0.2k). The Rocky
Linux 8 tikv builder image already ships openssl-devel 1.1.1 and a
modern GCC, so no extra install steps are needed.

Signed-off-by: Yishuai Li <yishuai.li@pingcap.com>
---
 .../tikv/rust-rocksdb/latest-presubmits.yaml  | 24 ++++---------------
 1 file changed, 4 insertions(+), 20 deletions(-)

diff --git a/prow-jobs/tikv/rust-rocksdb/latest-presubmits.yaml b/prow-jobs/tikv/rust-rocksdb/latest-presubmits.yaml
index d634f25fe0..095b0892cf 100644
--- a/prow-jobs/tikv/rust-rocksdb/latest-presubmits.yaml
+++ b/prow-jobs/tikv/rust-rocksdb/latest-presubmits.yaml
@@ -23,7 +23,7 @@ presubmits:
                         - amd64
         containers:
           - name: rust
-            image: ghcr.io/pingcap-qe/cd/builders/tikv:v2025.12.14-1-g33e22ac-centos7-devtoolset8
+            image: ghcr.io/pingcap-qe/cd/builders/tikv:v2026.3.22-3-g892e449
             command: [bash, -ce]
             args:
               - |
@@ -38,11 +38,7 @@ presubmits:
 
                 # Check C++ formatting
                 if ! command -v clang-format &> /dev/null; then
-                  # CentOS 7 uses yum and llvm-toolset-7.0
-                  yum install -y llvm-toolset-7.0
-                  if [ -f /opt/rh/llvm-toolset-7.0/enable ]; then
-                    source /opt/rh/llvm-toolset-7.0/enable
-                  fi
+                  dnf install -y clang-tools-extra
                 fi
                 find librocksdb_sys/crocksdb/ \( -iname "*.h" -o -iname "*.cc" \) | while read f; do
                   diff -q <(clang-format "$f") "$f" || (echo "❌ $f" && exit 1)
@@ -72,7 +68,7 @@ presubmits:
                         - amd64
         containers:
           - name: rust
-            image: ghcr.io/pingcap-qe/cd/builders/tikv:v2025.12.14-1-g33e22ac-centos7-devtoolset8
+            image: ghcr.io/pingcap-qe/cd/builders/tikv:v2026.3.22-3-g892e449
             command: [bash, -ce]
             env:
               - name: RUST_BACKTRACE
@@ -82,12 +78,6 @@ presubmits:
                 #!/usr/bin/env bash
                 set -exo pipefail
 
-                yum install -y openssl-devel
-
-                # Setup GCC 8
-                if [ -f /opt/rh/devtoolset-8/enable ]; then
-                  source /opt/rh/devtoolset-8/enable
-                fi
                 g++ --version
                 cmake --version
 
@@ -149,7 +139,7 @@ presubmits:
                         - arm64
         containers:
           - name: rust
-            image: ghcr.io/pingcap-qe/cd/builders/tikv:v2025.12.14-1-g33e22ac-centos7-devtoolset8
+            image: ghcr.io/pingcap-qe/cd/builders/tikv:v2026.3.22-3-g892e449
             command: [bash, -ce]
             env:
               - name: RUST_BACKTRACE
@@ -159,12 +149,6 @@ presubmits:
                 #!/usr/bin/env bash
                 set -exo pipefail
 
-                yum install -y openssl-devel
-
-                # Setup GCC 8
-                if [ -f /opt/rh/devtoolset-8/enable ]; then
-                  source /opt/rh/devtoolset-8/enable
-                fi
                 g++ --version
                 cmake --version