Skip to content

Use Ubuntu 24.04 point-release ISO URLs - #2100

Open
MaxRink wants to merge 5 commits into
kubernetes-sigs:mainfrom
MaxRink:codex/issue-1334-immutable-iso-urls
Open

Use Ubuntu 24.04 point-release ISO URLs#2100
MaxRink wants to merge 5 commits into
kubernetes-sigs:mainfrom
MaxRink:codex/issue-1334-immutable-iso-urls

Conversation

@MaxRink

@MaxRink MaxRink commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

Change description

Use Ubuntu 24.04 point-release download directories for the live-server ISO configs that already pin the 24.04.4 checksum, and update the MAAS arm64 24.04 config from 24.04.3 to 24.04.4.

This avoids depending on mutable series or codename aliases for Ubuntu 24.04 ISO downloads where Ubuntu already publishes point-release artifacts.

26.04 is intentionally unchanged because Ubuntu currently exposes ubuntu-26.04-live-server-amd64.iso but not a 26.04.0 point-release URL.

This also adds update-ubuntu-iso-urls and wires it into update-ubuntu-iso-checksums, so a scheduled/manual update workflow can discover newer Ubuntu point-release ISO URLs and checksums. Dependabot was checked, but it cannot track these arbitrary Packer JSON URL strings because Dependabot updates are driven by supported package ecosystems/manifests; the Make target is the maintainable path here.

Related issues

Related to #1334

Validation

  • git diff --check
  • jq empty for all changed JSON configs
  • Verified Ubuntu SHA256SUMS entries for 24.04.4 amd64 and arm64
  • Verified HTTP availability for the new 24.04.4 amd64 and arm64 ISO URLs
  • bash -n images/capi/hack/update-ubuntu-iso-urls.sh images/capi/hack/update-iso-checksums.sh
  • shellcheck images/capi/hack/update-ubuntu-iso-urls.sh images/capi/hack/update-iso-checksums.sh
  • cd images/capi && make update-ubuntu-iso-checksums
  • make validate-qemu-ubuntu-2404 validate-qemu-ubuntu-2404-efi
  • make validate-raw-ubuntu-2404 validate-raw-ubuntu-2404-efi
  • make validate-maas-ubuntu-2404-efi validate-maas-ubuntu-2404-arm64
  • make validate-node-ova-local-ubuntu-2404
  • env PROXMOX_URL=https://example.invalid:8006/api2/json PROXMOX_USERNAME=root@pam PROXMOX_TOKEN=dummy PROXMOX_NODE=pve1 PROXMOX_ISO_POOL=local PROXMOX_BRIDGE=vmbr0 PROXMOX_STORAGE_POOL=local-lvm make validate-proxmox-ubuntu-2404 validate-proxmox-ubuntu-2404-efi

@kubernetes-prow

Copy link
Copy Markdown
Contributor

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@kubernetes-prow kubernetes-prow Bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 5, 2026
@kubernetes-prow
kubernetes-prow Bot requested review from jsturtevant and mdbooth July 5, 2026 21:15
@kubernetes-prow kubernetes-prow Bot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jul 5, 2026
@MaxRink
MaxRink marked this pull request as ready for review July 6, 2026 12:23
@kubernetes-prow kubernetes-prow Bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 6, 2026
@kubernetes-prow
kubernetes-prow Bot requested review from drew-viles and vasartori July 6, 2026 12:23
@MaxRink
MaxRink marked this pull request as draft July 6, 2026 15:51
@kubernetes-prow kubernetes-prow Bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 6, 2026
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch from 07eb012 to 14f491e Compare July 7, 2026 04:21
@MaxRink
MaxRink marked this pull request as ready for review July 7, 2026 18:06
@kubernetes-prow kubernetes-prow Bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 7, 2026
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch 2 times, most recently from 43b9465 to 6734b7b Compare July 8, 2026 00:08

@drew-viles drew-viles left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/ok-to-test

@kubernetes-prow kubernetes-prow Bot added the ok-to-test Indicates a non-member PR verified by an org member that is safe to test. label Jul 8, 2026

@mboersma mboersma left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/assign @drew-viles

This looks good to me, but let's get more eyes on it if possible.

@kubernetes-prow kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jul 15, 2026
Comment thread images/capi/hack/update-ubuntu-iso-urls.sh Outdated
Comment thread images/capi/hack/update-ubuntu-iso-urls.sh Outdated
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch from 6734b7b to 01be0e8 Compare July 17, 2026 16:15
@kubernetes-prow kubernetes-prow Bot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jul 17, 2026
@drew-viles

Copy link
Copy Markdown
Contributor

/lgtm

@kubernetes-prow kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jul 18, 2026
@mboersma

Copy link
Copy Markdown
Contributor

/label tide/merge-method-squash

@kubernetes-prow kubernetes-prow Bot added the tide/merge-method-squash Denotes a PR that should be squashed by tide when it merges. label Jul 19, 2026
@drew-viles

Copy link
Copy Markdown
Contributor

/approve

@kubernetes-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: drew-viles

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 6, 2026
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch from 01be0e8 to ae1ba04 Compare August 9, 2026 14:45
@kubernetes-prow

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@kubernetes-prow kubernetes-prow Bot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Aug 9, 2026
@linux-foundation-easycla

linux-foundation-easycla Bot commented Aug 11, 2026

Copy link
Copy Markdown

CLA Signed
The committers listed above are authorized under a signed CLA.

@kubernetes-prow kubernetes-prow Bot added cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. and removed cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Aug 11, 2026
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch from c295a11 to 971a78d Compare August 12, 2026 00:59
@kubernetes-prow kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. and removed cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. labels Aug 12, 2026
Comment thread images/capi/packer/qemu/scripts/render_ubuntu_autoinstall_test.py Outdated
@kubernetes-prow kubernetes-prow Bot added cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. and removed cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Aug 22, 2026
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch from a1621ad to 8ab571d Compare August 22, 2026 16:30
@kubernetes-prow kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. and removed cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. labels Aug 22, 2026
@MaxRink

MaxRink commented Aug 22, 2026

Copy link
Copy Markdown
Contributor Author

/test pull-ova-all

…ntu-iso-urls.sh

Split the jq/mv pipeline into separate statements so a jq failure on the
left side of && no longer gets masked by errexit, which previously let
"Updated ..." print even when the file was left unchanged.

Distinguish a legitimate "no point release yet" 404 from real
curl/network/HTTP failures when fetching SHA256SUMS: 404 remains a soft
skip, while connection errors or non-200/404 responses now abort the
script with a non-zero exit instead of only warning and continuing.
@MaxRink
MaxRink force-pushed the codex/issue-1334-immutable-iso-urls branch from 8ab571d to 5831cd1 Compare August 28, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. tide/merge-method-squash Denotes a PR that should be squashed by tide when it merges.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants