Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Pin Ubuntu image to allow link checker action to run #8242

Merged
merged 1 commit into from
Feb 7, 2025

Conversation

cshfang
Copy link
Member

@cshfang cshfang commented Feb 6, 2025

Description of changes:

This PR pins the the Ubuntu image used by the check_for_broken_links workflow to 22.04.

Currently, the workflow is failing due to using ubuntu-latest which has tightened its access to the user namespaces kernel feature. Chromium is no longer able to run with this new security feature in place as it currently requires it. (See: https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md) As it relates to this repo, we use Puppeteer with headless Chromium to drive link checking and, as of a few weeks ago, this workflow has been failing since GH Actions have been slowly rolling out version 24 as the new ubuntu-latest over 22.

Per the recommendations in this GitHub issue, pinning the Ubuntu image used by this workflow to 22.04 is a popular workaround and should unblock this workflow. (See test run conducted against a feature branch: https://github.com/aws-amplify/docs/actions/runs/13188025380/job/36814728240?pr=8241)

In the meantime, we can continue to explore other alternatives for a longer term solution (e.g. disabling the unprivileged user restriction - which other repos, including Puppeteer - has done, or introducing an AppAmor profile)

Related GitHub issue #, if available:

Instructions

If this PR should not be merged upon approval for any reason, please submit as a DRAFT

Which product(s) are affected by this PR (if applicable)?

  • amplify-cli
  • amplify-ui
  • amplify-studio
  • amplify-hosting
  • amplify-libraries

Which platform(s) are affected by this PR (if applicable)?

  • JS
  • Swift
  • Android
  • Flutter
  • React Native

Please add the product(s)/platform(s) affected to the PR title

Checks

  • Does this PR conform to the styleguide?

  • Does this PR include filetypes other than markdown or images? Please add or update unit tests accordingly.

  • Are any files being deleted with this PR? If so, have the needed redirects been created?

  • Are all links in MDX files using the MDX link syntax rather than HTML link syntax?

    ref: MDX: [link](https://docs.amplify.aws/)
    HTML: <a href="https://docs.amplify.aws/">link</a>

When this PR is ready to merge, please check the box below

  • Ready to merge

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@cshfang cshfang requested a review from a team as a code owner February 6, 2025 21:36
@cshfang cshfang merged commit f95de0c into aws-amplify:main Feb 7, 2025
12 checks passed
@cshfang cshfang deleted the fix/pin-image-for-link-checker branch February 7, 2025 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants