Weekly 2.545 images have been published with JDK17 tags by mistake

[lemeurherve]

As Jenkins Core 2.545 is now requiring JDK21, JDK17 tags shouldn't have been published.

latest-jdk17 tags have to be republished to point to corresponding 2.544 images (with skopeo or docker builx imagetools), and all other JDK17 tags have to be deleted from Docker Hub.

Refs:

• https://www.jenkins.io/changelog/2.545/
• Require Java 21 or newer jenkins#26018
• Jenkins 2.545 AlmaLinux package forces Java 17 dependency, breaks startup requiring Java 21 packaging#729
• https://docs.docker.com/reference/cli/docker/buildx/imagetools/create

[lemeurherve]

List of Linux tags that need to be republished to point to 2.544 images:

docker buildx imagetools create --tag jenkins/jenkins:latest-jdk17 jenkins/jenkins:2.544-jdk17
docker buildx imagetools create --tag jenkins/jenkins:jdk17 jenkins/jenkins:2.544-jdk17
docker buildx imagetools create --tag jenkins/jenkins:rhel-ubi9-jdk17 jenkins/jenkins:2.544-rhel-ubi9-jdk17
docker buildx imagetools create --tag jenkins/jenkins:slim-jdk17 jenkins/jenkins:2.544-slim-jdk17
docker buildx imagetools create --tag jenkins/jenkins:alpine3.23-jdk17 jenkins/jenkins:2.544-alpine-jdk17
docker buildx imagetools create --tag jenkins/jenkins:alpine-jdk17 jenkins/jenkins:2.544-alpine-jdk17

skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-jdk17 docker://docker.io/jenkins/jenkins:latest-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-jdk17 docker://docker.io/jenkins/jenkins:jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-rhel-ubi9-jdk17 docker://docker.io/jenkins/jenkins:rhel-ubi9-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-slim-jdk17 docker://docker.io/jenkins/jenkins:slim-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-alpine-jdk17 docker://docker.io/jenkins/jenkins:alpine3.23-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-alpine-jdk17 docker://docker.io/jenkins/jenkins:alpine-jdk17

docker buildx imagetools dry-run

$ docker buildx imagetools create --dry-run --tag jenkins/jenkins:latest-jdk17 jenkins/jenkins:2.544-jdk17
{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "manifests": [
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:8f092a384bebb7fbf290f3f7c6ddb9770fff621bce262758a5e729f2ae38b63f",
      "size": 2577,
      "platform": {
        "architecture": "amd64",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:9fa635efbdc95bc74cd01e8a4e9aab04ac50d872732bfe740e31823755d477f4",
      "size": 2577,
      "platform": {
        "architecture": "arm64",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:ed482d448d844bdcf1a626dcb18172be19a1afcbf9a584fea0545d4fdd25904d",
      "size": 2577,
      "platform": {
        "architecture": "s390x",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:7b1d6676042994af45cf486bdbcb4acd451afcfb9729883137e9e44e8c265a2d",
      "size": 2577,
      "platform": {
        "architecture": "ppc64le",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:fa5c34da90b61b29927b6302d3d29fa07f068fa53228ad2bf5cd52ef6140a2a3",
      "size": 566,
      "annotations": {
        "vnd.docker.reference.digest": "sha256:8f092a384bebb7fbf290f3f7c6ddb9770fff621bce262758a5e729f2ae38b63f",
        "vnd.docker.reference.type": "attestation-manifest"
      },
      "platform": {
        "architecture": "unknown",
        "os": "unknown"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:b17df4aab2a7c57213c30476284de567518982e79b3bc5c561f7e15c7db53e94",
      "size": 566,
      "annotations": {
        "vnd.docker.reference.digest": "sha256:9fa635efbdc95bc74cd01e8a4e9aab04ac50d872732bfe740e31823755d477f4",
        "vnd.docker.reference.type": "attestation-manifest"
      },
      "platform": {
        "architecture": "unknown",
        "os": "unknown"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:d59981e18b8c736753c7a456daf303a0fa1ef038cc3fff0d9b15f82dfd2ac4c4",
      "size": 566,
      "annotations": {
        "vnd.docker.reference.digest": "sha256:ed482d448d844bdcf1a626dcb18172be19a1afcbf9a584fea0545d4fdd25904d",
        "vnd.docker.reference.type": "attestation-manifest"
      },
      "platform": {
        "architecture": "unknown",
        "os": "unknown"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "digest": "sha256:f0ca21eeea2c2b4c01d7f679b9050cabb52aa05b31dd6f0b68a713a47ce12f67",
      "size": 566,
      "annotations": {
        "vnd.docker.reference.digest": "sha256:7b1d6676042994af45cf486bdbcb4acd451afcfb9729883137e9e44e8c265a2d",
        "vnd.docker.reference.type": "attestation-manifest"
      },
      "platform": {
        "architecture": "unknown",
        "os": "unknown"
      }
    }
  ]
}

[lemeurherve]

List of tags that need to be deleted from Docker Hub:

• Windows tags:
  • 2.545-jdk17-hotspot-windowsservercore-ltsc2022
  • jdk17-hotspot-windowsservercore-ltsc2022
    • No Windows Server Core 20219 JDK17 to republish thanks to breaking(windows): replace Windows Server Core 2019 by Windows Server Core 2022 #2170 🎉
• Linux tags
  • 2.545-alpine-jdk17
  • 2.545-jdk17
  • 2.545-rhel-ubi9-jdk17
  • 2.545-slim-jdk17

(Obtained from the diff of #2179 minus the tags to republish above)

diff --git a/tests/golden/expected_tags_latest_weekly.txt b/tests/golden/expected_tags_latest_weekly.txt
index 5b4c64bfb618b2f5ff3b3fa12cf598023b59aa34..22538ab5125acb792baffbdf80af79042f193608 100644
--- a/tests/golden/expected_tags_latest_weekly.txt
+++ b/tests/golden/expected_tags_latest_weekly.txt
@@ -1,36 +1,26 @@
 docker.io/jenkins/jenkins:2.534 (debian_jdk21)
 docker.io/jenkins/jenkins:2.534-alpine (alpine_jdk21)
-docker.io/jenkins/jenkins:2.534-alpine-jdk17 (alpine_jdk17)
 docker.io/jenkins/jenkins:2.534-alpine-jdk21 (alpine_jdk21)
 docker.io/jenkins/jenkins:2.534-alpine-jdk25 (alpine_jdk25)
-docker.io/jenkins/jenkins:2.534-jdk17 (debian_jdk17)
 docker.io/jenkins/jenkins:2.534-jdk21 (debian_jdk21)
 docker.io/jenkins/jenkins:2.534-jdk25 (debian_jdk25)
-docker.io/jenkins/jenkins:2.534-rhel-ubi9-jdk17 (rhel_jdk17)
 docker.io/jenkins/jenkins:2.534-rhel-ubi9-jdk21 (rhel_jdk21)
 docker.io/jenkins/jenkins:2.534-rhel-ubi9-jdk25 (rhel_jdk25)
 docker.io/jenkins/jenkins:2.534-slim (debian-slim_jdk21)
-docker.io/jenkins/jenkins:2.534-slim-jdk17 (debian-slim_jdk17)
 docker.io/jenkins/jenkins:2.534-slim-jdk21 (debian-slim_jdk21)
 docker.io/jenkins/jenkins:2.534-slim-jdk25 (debian-slim_jdk25)
 docker.io/jenkins/jenkins:alpine (alpine_jdk21)
-docker.io/jenkins/jenkins:alpine-jdk17 (alpine_jdk17)
 docker.io/jenkins/jenkins:alpine-jdk21 (alpine_jdk21)
 docker.io/jenkins/jenkins:alpine-jdk25 (alpine_jdk25)
-docker.io/jenkins/jenkins:alpine3.23-jdk17 (alpine_jdk17)
 docker.io/jenkins/jenkins:alpine3.23-jdk21 (alpine_jdk21)
 docker.io/jenkins/jenkins:alpine3.23-jdk25 (alpine_jdk25)
-docker.io/jenkins/jenkins:jdk17 (debian_jdk17)
 docker.io/jenkins/jenkins:jdk21 (debian_jdk21)
 docker.io/jenkins/jenkins:jdk25 (debian_jdk25)
 docker.io/jenkins/jenkins:latest (debian_jdk21)
-docker.io/jenkins/jenkins:latest-jdk17 (debian_jdk17)
 docker.io/jenkins/jenkins:latest-jdk21 (debian_jdk21)
 docker.io/jenkins/jenkins:latest-jdk25 (debian_jdk25)
-docker.io/jenkins/jenkins:rhel-ubi9-jdk17 (rhel_jdk17)
 docker.io/jenkins/jenkins:rhel-ubi9-jdk21 (rhel_jdk21)
 docker.io/jenkins/jenkins:rhel-ubi9-jdk25 (rhel_jdk25)
 docker.io/jenkins/jenkins:slim (debian-slim_jdk21)
-docker.io/jenkins/jenkins:slim-jdk17 (debian-slim_jdk17)
 docker.io/jenkins/jenkins:slim-jdk21 (debian-slim_jdk21)
 docker.io/jenkins/jenkins:slim-jdk25 (debian-slim_jdk25)

[dduportal]

List of Linux tags that need to be republished to point to 2.544 images:

docker buildx imagetools create --tag jenkins/jenkins:latest-jdk17 jenkins/jenkins:2.544-jdk17
docker buildx imagetools create --tag jenkins/jenkins:jdk17 jenkins/jenkins:2.544-jdk17
docker buildx imagetools create --tag jenkins/jenkins:rhel-ubi9-jdk17 jenkins/jenkins:2.544-rhel-ubi9-jdk17
docker buildx imagetools create --tag jenkins/jenkins:slim-jdk17 jenkins/jenkins:2.544-slim-jdk17
docker buildx imagetools create --tag jenkins/jenkins:alpine3.23-jdk17 jenkins/jenkins:2.544-alpine-jdk17
docker buildx imagetools create --tag jenkins/jenkins:alpine-jdk17 jenkins/jenkins:2.544-alpine-jdk17

skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-jdk17 docker://docker.io/jenkins/jenkins:latest-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-jdk17 docker://docker.io/jenkins/jenkins:jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-rhel-ubi9-jdk17 docker://docker.io/jenkins/jenkins:rhel-ubi9-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-slim-jdk17 docker://docker.io/jenkins/jenkins:slim-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-alpine-jdk17 docker://docker.io/jenkins/jenkins:alpine3.23-jdk17
skopeo copy --all docker://docker.io/jenkins/jenkins:2.544-alpine-jdk17 docker://docker.io/jenkins/jenkins:alpine-jdk17

docker buildx imagetools dry-run

Applied in pair with success the docker buildx imagetools on the 6 images. We confirmed that they are back to 2.544 using the image metadatas (was 2.545 before) with docker inspect jenkins/jenkins:latest-jdk17 | grep 'org.opencontainers.image.version' on each.

[dduportal]

List of tags that need to be deleted from Docker Hub:

* Windows tags:
  
  * `2.545-jdk17-hotspot-windowsservercore-ltsc2022`
  * `jdk17-hotspot-windowsservercore-ltsc2022`
    
    * No Windows Server Core 20219 JDK17 to republish thanks to [breaking(windows): replace Windows Server Core 2019 by Windows Server Core 2022 #2170](https://github.com/jenkinsci/docker/pull/2170) 🎉

* Linux tags
  
  * `2.545-alpine-jdk17`
  * `2.545-jdk17`
  * `2.545-rhel-ubi9-jdk17`
  * `2.545-slim-jdk17`

(Obtained from the diff of #2179 minus the tags to republish above)

Tags deleted in pair from DockerHub with success