Mini-RCA doc: ubuntu-latest issues on edx-platform

October 9 (overnight):

• edx-platform build started failing when ubuntu-latest rolled over from 22.04 to 24.04:

  • successful job: Merge pull request #35618 from openedx/katrinan029/upgrade-edx-enterp… · openedx/edx-platform@f2ad108

• unsuccessful jobs were running into two issues:

  • undefined symbol: xmlSecOpenSSLTransformRsaMd5GetKlass

    • example job: chore: version bump · openedx/edx-platform@977e849

  • mongodb-org-mongos : Depends: libssl1.1 (>= 1.1.1) but it is not installable

    • example job: chore: version bump · openedx/edx-platform@977e849

October 10:

• 2U fixes both issues in the same PR: feat: use jammy repositories to install mongo for testing and unpin lxml and xmlsec. by dianakhuang · Pull Request #35634 · openedx/edx-platform

  • use the jammy repositories to install mongo (the noble repositories do not have mongo 7.0, which is the version we use): https://github.com/openedx/edx-platform/pull/35634/commits/126cdb14c57c1ddbc5d97937bfef263ca0d76b5e

  • unpin xml-sec and lxml and upgrade all dependencies: https://github.com/openedx/edx-platform/pull/35634/commits/b0f6af92f823ca0de8f8256f29ee005f4da612e9

• When attempting to deploy to edx.org, 2U runs into this error: AssertionError: Internal issue: Candidate is not for this requirement lxml[html-clean,html-clean] vs lxml[html-clean]

  •  

  • this is probably already related to the breaking changes referred to in the lxml upgrade ticket: unpin lxml in edx-platform · Issue #35272 · openedx/edx-platform

• 2U puts together a PR to revert out the changes and pin to 22.04: Revert out updates and pins many of the jobs to Ubuntu 22.04 by dianakhuang · Pull Request #35635 · openedx/edx-platform

  • This PR is blocked because the static assets check was required and still referred to ubuntu-latest

October 11:

• 2U reaches out to AXIM as the owners of edx-platform to remove the requirement for the static assets check in order to merge the fixes:

  • [GH Request] remove/re-enable static-assets-check for edx-platform in order to land a PR · Issue #1276 · openedx/axim-engineering

• When the requirement is removed, however, renovate merged an upgrade to edx-cookie-policy-banner, even though the upgrade broke the static assets check.

  • fix(deps): update dependency @edx/frontend-component-cookie-policy-ba… · openedx/edx-platform@a39367b

• A revert to the renovate upgrade was added to the revert PR:

  • Revert out updates and pins many of the jobs to Ubuntu 22.04 by dianakhuang · Pull Request #35635 · openedx/edx-platform

• The revert PR was merged, and the static assets requirement was re-instated, this time for ubuntu-22.04.