Skip to content

Switch to Canonical Squid 7.2 image - #2476

Closed
Alex-Welsh wants to merge 1 commit into
stackhpc/2026.1from
2026.1-bump-squid
Closed

Switch to Canonical Squid 7.2 image#2476
Alex-Welsh wants to merge 1 commit into
stackhpc/2026.1from
2026.1-bump-squid

Conversation

@Alex-Welsh

@Alex-Welsh Alex-Welsh commented Aug 3, 2026

Copy link
Copy Markdown
Member

I haven't tested this new image. It looks like it should "just work", volumes mount in the same place etc.
If anyone wants to roll it out and try it, then that would be very much appreciated. Otherwise, I think it's a fairly safe switch

Summary by CodeRabbit

  • Changes
    • Updated the seed Squid container to Canonical’s public image.
    • Upgraded Squid from version 6.10 to 7.2.
    • Changed the container base operating system from Rocky Linux 10 to Ubuntu 26.04.

@Alex-Welsh
Alex-Welsh requested a review from a team as a code owner August 3, 2026 09:56
@coderabbitai

coderabbitai Bot commented Aug 3, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: e271638e-c08e-4013-bb29-bb23b55e3007

📥 Commits

Reviewing files that changed from the base of the PR and between 1864f0e and 4e418a8.

📒 Files selected for processing (2)
  • etc/kayobe/seed.yml
  • releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml
🚧 Files skipped from review as they are similar to previous changes (2)
  • etc/kayobe/seed.yml
  • releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml

📝 Walkthrough

Walkthrough

The seed configuration changes its Squid container image to Ubuntu Squid 7.2 on Ubuntu 26.04. A release note documents the image maintainer, version upgrade, and base distribution change.

Changes

Squid container update

Layer / File(s) Summary
Update Squid image and release documentation
etc/kayobe/seed.yml, releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml
The seed configuration uses ubuntu/squid:7.2-26.04_edge. The release note documents the image maintainer, Squid version, and base distribution changes.

Estimated code review effort: 1 (Trivial) | ~5 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: switching to Canonical's Squid 7.2 container image.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch 2026.1-bump-squid

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added the waiting-review PR is waiting for a review label Aug 3, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (1)
etc/kayobe/seed.yml (1)

142-144: 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick win

Pin the tested image digest.

7.2-26.04_edge is a channel tag. Docker Hub shows that its manifest was pushed recently. This indicates that later deployments can pull different image content without a repository change. Pin the digest used for validation, or add automated image-update testing. Verify that Kayobe’s separate image and tag fields support the required digest reference. (hub.docker.com)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@etc/kayobe/seed.yml` around lines 142 - 144, Update the Squid image reference
in the seed configuration around image and tag to use the digest corresponding
to the validated ubuntu/squid image instead of the mutable 7.2-26.04_edge
channel tag. Confirm Kayobe’s separate image and tag fields accept the digest
format, preserving the existing image and pre configuration.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml`:
- Line 7: Correct the wording in the release note by changing “the new on is
based” to “the new one is based,” leaving the rest of the note unchanged.

---

Nitpick comments:
In `@etc/kayobe/seed.yml`:
- Around line 142-144: Update the Squid image reference in the seed
configuration around image and tag to use the digest corresponding to the
validated ubuntu/squid image instead of the mutable 7.2-26.04_edge channel tag.
Confirm Kayobe’s separate image and tag fields accept the digest format,
preserving the existing image and pre configuration.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 292fefc8-ec9d-4590-9514-ac95085f4e0b

📥 Commits

Reviewing files that changed from the base of the PR and between 625c066 and 1864f0e.

📒 Files selected for processing (2)
  • etc/kayobe/seed.yml
  • releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml

Comment thread releasenotes/notes/ubuntu-squid-container-75698bf1b9535163.yaml Outdated
@Alex-Welsh
Alex-Welsh enabled auto-merge (rebase) August 6, 2026 09:04
@priteau

priteau commented Aug 11, 2026

Copy link
Copy Markdown
Member

Unfortunately the squid process doesn't start correctly:

$ docker exec squid pebble services
Service  Startup  Current  Since
squid    enabled  backoff  today at 12:52 UTC
2026-08-11T12:53:24.503Z [squid] 2026/08/11 12:53:24| WARNING: 'seed' rDNS test failed: (0) No error.
2026-08-11T12:53:24.503Z [squid] 2026/08/11 12:53:24| WARNING: Could not determine this machines public hostname. Please configure one or set 'visible_hostname'.
2026-08-11T12:53:24.503Z [squid] 2026/08/11 12:53:24| WARNING: 'seed' rDNS test failed: (0) No error.
2026-08-11T12:53:24.503Z [squid] 2026/08/11 12:53:24| WARNING: Could not determine this machines public hostname. Please configure one or set 'visible_hostname'.
2026-08-11T12:53:24.504Z [squid] 2026/08/11 12:53:24| WARNING: 'seed' rDNS test failed: (0) No error.
2026-08-11T12:53:24.504Z [squid] 2026/08/11 12:53:24| WARNING: Could not determine this machines public hostname. Please configure one or set 'visible_hostname'.
2026-08-11T12:53:24.504Z [squid] 2026/08/11 12:53:24| Logfile: opening log daemon:/var/log/squid/access.log
2026-08-11T12:53:24.504Z [squid] 2026/08/11 12:53:24| Logfile Daemon: opening log /var/log/squid/access.log
2026-08-11T12:53:24.505Z [squid] 2026/08/11 12:53:24| WARNING: no_suid: setuid(0): (1) Operation not permitted
2026-08-11T12:53:24.506Z [squid] 2026/08/11 12:53:24| WARNING: no_suid: setuid(0): (1) Operation not permitted
2026-08-11T12:53:24.527Z [squid] fopen: Permission denied
2026-08-11T12:53:24.756Z [squid] 2026/08/11 12:53:24| Unlinkd pipe opened on FD 14
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Store logging disabled
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Swap maxSize 4194304 + 786432 KB, estimated 383133 objects
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Target number of buckets: 19156
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Using 32768 Store buckets
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Max Mem  size: 786432 KB
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| Max Swap size: 4194304 KB
2026-08-11T12:53:24.757Z [squid] 2026/08/11 12:53:24| ERROR: /var/spool/squid/00: (13) Permission denied
2026-08-11T12:53:24.758Z [squid] 2026/08/11 12:53:24| Not currently OK to rewrite swap log.
2026-08-11T12:53:24.758Z [squid] 2026/08/11 12:53:24| storeDirWriteCleanLogs: Operation aborted.
2026-08-11T12:53:24.758Z [squid] 2026/08/11 12:53:24| FATAL:    Failed to verify one of the swap directories, Check cache.log
2026-08-11T12:53:24.758Z [squid]        for details.  Run 'squid -z' to create swap directories
2026-08-11T12:53:24.758Z [squid]        if needed, or if running Squid for the first time.
2026-08-11T12:53:24.758Z [squid] 2026/08/11 12:53:24| Squid Cache (Version 7.2): Terminated abnormally.
2026-08-11T12:53:24.758Z [squid] CPU Usage: 0.019 seconds = 0.009 user + 0.011 sys
2026-08-11T12:53:24.758Z [squid] Maximum Resident Size: 93104 KB
2026-08-11T12:53:24.758Z [squid] Page faults with physical i/o: 0
2026-08-11T12:53:24.758Z [squid] 2026/08/11 12:53:24| Removing PID file (/run/squid.pid)

@Alex-Welsh

Copy link
Copy Markdown
Member Author

Ah, nuts. Well, I really don't have time to fix that now. Let's stick with what we have

@Alex-Welsh Alex-Welsh closed this Aug 11, 2026
auto-merge was automatically disabled August 11, 2026 13:01

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

waiting-review PR is waiting for a review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants