Let's discuss and troubleshoot #9769 which is about some strangeness we'll seeing with images tagged as "stable". They are being updated at unexpected times.
Previously I reported this at #containers > Exception while loading the app but I think we deserve a fresh topic. :big_smile:
@Oliver Bertuch is https://github.com/IQSS/dataverse/actions/runs/5813835717/job/15762398940 a potential smoking gun simply due to timing?
I'm comparing digests and I don't find a match between that run and what I'm seeing on Docker Hub.
I'm also not finding a match between what I see for docker images gdcc/dataverse --digests locally and digests I see on Docker Hub, though. So maybe I'm doing something wrong. :sweat_smile:
I was hoping this would be simple, that I'd be able to track a digest from the GitHub Action run to Docker Hub (both activity and tags) to my local machine. But that's not what I'm seeing.
The only digest that's lining up so far is "pushed the tag unstable with the digest sha256:8dcef6d4166cc to the repository gdcc/dataverse" from https://hub.docker.com/repository/docker/gdcc/dataverse/activity
It lines up with the digest I see locally:
$ docker images gdcc/dataverse --digests
REPOSITORY TAG DIGEST IMAGE ID CREATED SIZE
gdcc/dataverse unstable sha256:8dcef6d4166cc5b83aa94fb7c886e190fc70a1894cf489e52feb6b006371a673 1e19f9de87db 22 hours ago 739MB
But I don't see that digest at https://hub.docker.com/repository/docker/gdcc/dataverse/tags
Or at https://github.com/IQSS/dataverse/actions/runs/5813835717/job/15762398940
Over at #9769 we're looking at - if: ${{ github.event_name != 'pull_request' }}
image.png
@Philip Durbin WDYT?
Built with GraphViz, source in Sphinx. The layout is not perfect, but it's hard to arrange things
Wow. Brain hurting a bit. I switched to decaf but I might need to switch back for this. Overall, looks great!
Well we are doing complicated things in there...
If you want to mess around and edit, here's a link to an editor with the graph
Maybe it's easier to read this way, but it takes up way more space.
image.png
Yes, this is better. I'll probably print it out.
We can probably enumerate the common cases
etc.
And trace them in the diagram. Make sure it makes sense.
Technically, this is only the app push workflow. It's not depicting the others
So it's not showing how the Maven Unit tests might trigger it
It's not showing the PR comment workflow, that works slightly different
Is this showing before/current behavior? Is the bug we're fixing in the diagram? Or is this diagram aspirational and bug free?
I did a fix locally in the push workflow and created a diagram to explain the flow's logic
So it will describe the "current" behaviour as it will be after merging the PR
Here's an updated diagram @Philip Durbin, hopefully easier to follow
I pushed what I have so far: https://dataverse-guide--9772.org.readthedocs.build/en/9772/container/auto-usage.html
Am I forgetting any CI triggers?
Depends on your definition of trigger. Some of these are technically the same
Let's call them actions that can lead to a trigger, then. :big_smile:
Does creating a release trigger a push to Docker Hub? What about a draft release?
No. Releases are a very different kind of activitiy which we do not have any workflows for at the moment.
ok
We only ever react to: push, pull_request, schedule and comments
I'm having trouble understanding "trigger was no push or on branches develop or master".
Should we do a quick call?
Sure
Plz help me rephrase that
https://fz-juelich-de.zoom.us/j/62105154469?pwd=dSsxKzkzbkZVa01MOTdXV2l4UXh4UT09
https://harvard.zoom.us/my/pdurbin?pwd=em1WNUZGbnY2YjhxNEdSbjJJMXNSUT09
:see_no_evil:
Updated version:
I added some more notes from what we spoke about to https://github.com/IQSS/dataverse/pull/9772
Cool. I'll probably add a review. Nice diagram.
Created https://github.com/IQSS/dataverse/pull/9777 as requested, containing just the fix
https://github.com/IQSS/dataverse/pull/9776 contains the docs (and is a draft)
Yes. Perfect. I assigned the PR to myself. When I move things to "ready to QA" I don't get a chance to talk about them at standup (because we skip that column) so I left it in "in review" (which we don't skip) so I can. Thanks, @Oliver Bertuch !
#9777 was just merged!
Did it fix the bug?
I just pushed a branch under IQSS: https://github.com/IQSS/dataverse/tree/9260-solr9
So that is an upstream branch. I see https://github.com/IQSS/dataverse/actions/runs/5859827266/job/15886911953 that publishing an image was skipped, which is what we wanted.
@Philip Durbin did you open a PR yet? It _should_ push a preview image then...
Nope and that may not happen today for this branch. Still hacking.
Will try with the DMP update branch then
I just ran https://github.com/pdurbin/dataverse-api-test-runner/actions/runs/5867681833 against the develop branch and it failed. Perhaps we need a PR merge to develop to fix the develop/unstable images?
Nope. Someone needs to update https://github.com/IQSS/dataverse/tree/9714-files-api-extension-filters
It still has the old workflow file because it did not merge develop
And as it is a branch in the upstream repo, it has access to secrets
The only way I can think of to prevent this: rename the secret in develop and delete the old - all old workflows will fail that way because no login
Ah. @Guillermo Portas please take note ^^
https://github.com/IQSS/dataverse/tree/9714-files-api-extension-filters has been updated
I think this is solved now. Marking as resolved.
Oliver Bertuch has marked this topic as resolved.
Last updated: Oct 30 2025 at 05:14 UTC