mirror/vcpkg
1
0
Fork 0
mirror of https://github.com/microsoft/vcpkg.git synced 2024-12-12 11:49:07 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
3bedbaeea2
vcpkg/scripts/azure-pipelines/patch-tuesday-checklist.md

26 lines
1.6 KiB
Markdown
Raw Normal View History

Update VMs for Patch Tuesday May 2023 (#31358) * Update PowerShell Core to not vulnerable versions. * Fix Android create-image relative paths. * Update pools and add docs. * Get android create-vmss to setup managed identity.
2023-05-14 16:54:42 +08:00
## First time machine setup:
* [ ] Install Azure PowerShell: https://docs.microsoft.com/en-us/powershell/azure/install-az-ps
Patch Tuesday 2023-10-11 (except macOS) (#34431)
2023-10-14 05:57:51 +08:00
* [ ] Run `Connect-AzAccount -Subscription CPP_GITHUB`
Add checklist items for Android Docker (#33119)
2023-08-15 07:09:52 +08:00
* [ ] Install Docker
Update VMs for Patch Tuesday May 2023 (#31358) * Update PowerShell Core to not vulnerable versions. * Fix Android create-image relative paths. * Update pools and add docs. * Get android create-vmss to setup managed identity.
2023-05-14 16:54:42 +08:00
## Each Patch Tuesday:
* [ ] Check for depends:vm-update PRs and make relevant changes if possible.
Patch Tuesday 2023-10-11 (except macOS) (#34431)
2023-10-14 05:57:51 +08:00
* [ ] Check for Service 360 alerts (possibly at https://aka.ms/s360 ?) against the service named
"C++ VCPKG Validation" about vulnerable software we are installing in the VMs and update that.
(Most often PowerShell needs to be updated)
* [ ] Check for any other software for the Windows images we wish to update and make the edits to do
so in `scripts/azure-pipelines/windows`
Patch Tuesday for February 2024 (#36757) * Cherry-pick infrastructure changes from https://github.com/microsoft/vcpkg/pull/36081 as authored by @dg0yt * Suppress warnings for the monthly docker mint as suggested by Toddy Mladenov ( MS internal conversation https://teams.microsoft.com/l/message/19:f498f444e97f40b2a2027d015a9047ab@thread.tacv2/1707520630587?tenantId=72f988bf-86f1-41af-91ab-2d7cd011db47&groupId=2080ccbe-0cfb-49e6-a9c1-ea6a6bf82722&parentMessageId=1707520630587&teamName=Containers%20Secure%20Supply%20Chain&channelName=3P%20Registry%20and%20Images%20Guidance&createdTime=1707520630587 ) * Move Azure Container Registry for Android to WestUS3; with this we are officially entirely within one Azure region again :D * Explicitly grant Azure DevOps permissions to touch the scale set rather than relying on subscription-level assignments.
2024-02-22 08:30:42 +08:00
* [ ] Check for any updates possible to `vcpkgTools.xml`. Note that PowerShell currently uses the
7.2.x series due to customer reported problems on older Windows with 7.3.x and later.
* [ ] Update the first line of android/Dockerfile with the current 'focal' image according to
https://hub.docker.com/_/ubuntu
Add checklist items for Android Docker (#33119)
2023-08-15 07:09:52 +08:00
* [ ] Run android/create-docker-image.ps1
* [ ] Update azure-pipelines.yml to point to the new linux docker image from Azure Container Registry
Update VMs for Patch Tuesday May 2023 (#31358) * Update PowerShell Core to not vulnerable versions. * Fix Android create-image relative paths. * Update pools and add docs. * Get android create-vmss to setup managed identity.
2023-05-14 16:54:42 +08:00
* [ ] Run windows/create-image.ps1
Patch Tuesday for April 2024 (#38166) Changes this month: * Adopt [delegated-sas](https://learn.microsoft.com/en-us/rest/api/storageservices/create-user-delegation-sas) tokens to allow us to shut off the storage account keys, thanks to @ryanerdmann for the help * Visual Studio 2022 17.8.9, hopefully resolves CVE-2024-26190, CVE-2024-21392 . (These don't matter to us but they cause the Microsoft-internal tool 'Service 360' to yell at us) * https://github.com/microsoft/vcpkg/pull/37902 * https://github.com/microsoft/vcpkg/pull/37903 --------- Co-authored-by: Kai Pastor <dg0yt@darc.de>
2024-04-26 09:25:03 +08:00
* [ ] Update azure-pipelines.yml to point to the new Android image.
* [ ] Submit PR with those changes and merge it.
* [ ] In the Azure portal, mark the newly created image as the 'latest' one.
Patch Tuesday 2023-10-11 (except macOS) (#34431)
2023-10-14 05:57:51 +08:00
* [ ] Mint a new macOS base box. (See instructions in `scripts/azure-pipelines/osx/README.md`)
Update macOS to 13.5 and xcode 14.3.1. (#33722)
2023-09-15 05:02:46 +08:00
* [ ] Deploy the new base box to all hosts.
Update macOS for January 2024 (#35617) macOS 14.2.1 on amd64, 14.3 on arm64 XCode Console Tools 15.1 Other changes: macOS install is done from the installers rather than from the recovery partition readme.md is now written for a vcpkg-team audience vagrant is removed as a dependency so that discussion of how to persist the VMs between machines could be included arm64 is added using https://github.com/s-u/macosvm
2024-01-26 02:50:32 +08:00
* [ ] Update the software on the CTI's machine #12 to match.
Reference in New Issue Copy Permalink