LTS channel

.expeditor/build.habitat.yml

@@ -19,7 +19,9 @@ studio_secrets:
   OPENSEARCH_NODE1_KEY_PEM:
     path: secret/a2/a2ha/opensearch
     field: node1-key.pem
+  HAB_BLDR_CHANNEL:
+    value : "chef-automate-habitat-build-test"
   HAB_FALLBACK_CHANNEL:
-    value: "stable"
+    value: "LTS-2024"
   GOPROXY:
     value: "https://proxy.golang.org,direct"

.expeditor/generate-automate-cli-docs.sh

@@ -2,7 +2,7 @@
 set -eou pipefail
 
 # bumping expeditor to go 1.22
-hab pkg install --binlink core/go22 --force
+hab pkg install --binlink core/go1_22 --force
 
 pushd components/automate-cli
   make docs

.expeditor/license_scout.sh

@@ -43,7 +43,7 @@ gem install license_scout -v 2.5.1
 log "Finished Installing License Scout"
 
 log_section_start "Installing Go 1.22.5"
-hab pkg install --force --binlink core/go22/1.22.5 && rm -rf /hab/cache && mkdir -p "$GOPATH/src" "$GOPATH/bin"
+hab pkg install --force --binlink core/go1_22/1.22.5 && rm -rf /hab/cache && mkdir -p "$GOPATH/src" "$GOPATH/bin"
 go version
 log "Finished Installing Go 1.22.5"
 

.expeditor/verify.pipeline.yml

@@ -1,11 +1,12 @@
 env:
   DOCKER_CONFIG: /var/lib/buildkite-agent/.docker
-  HAB_BLDR_CHANNEL: "stable"
+  HAB_BLDR_CHANNEL: "LTS-2024"
   HAB_STUDIO_SECRET_HAB_FALLBACK_CHANNEL: "stable"
   # Use the Go module mirror and checksum database by default.
   # See https://proxy.golang.org for details.
   GOPROXY: "https://proxy.golang.org,direct"
   GOSUMDB: "sum.golang.org"
+  PGGSSENCMODE: "disable"
 
 expeditor:
   defaults:
@@ -165,7 +166,7 @@ steps:
       - rm -rf /bin/zdump
       - rm -rf /bin/sprof
       - scripts/install_hab_pkg.sh core/glibc # opa depends implicitly glibc
-      - scripts/install_hab_pkg.sh core/opa
+      - scripts/install_hab_pkg.sh core/opa/0.34.2/20240106123544
       - cd components/authz-service/engine/opa/policy
       - make static unit
     timeout_in_minutes: 10
@@ -301,7 +302,7 @@ steps:
           privileged: true
 
   - label: "[unit] automate-gateway"
-    command:
+    command:  
       - hab studio run "source .studiorc && go_component_unit automate-gateway"
       - cd components/automate-gateway
       - make lint fmt
@@ -420,6 +421,7 @@ steps:
 
   - label: "[unit] event-feed-service"
     command:
+      - git config --global --add safe.directory /go/src/github.com/chef/automate
       - hab studio run "source .studiorc && go_component_unit event-feed-service && go_component_static_tests event-feed-service && go_component_lint event-feed-service"
     timeout_in_minutes: 10
     retry:
@@ -435,6 +437,7 @@ steps:
 
   - label: "[unit] ingest-service"
     command:
+      - git config --global --add safe.directory /go/src/github.com/chef/automate
       - hab studio run "source .studiorc && go_component_unit ingest-service && go_component_static_tests ingest-service && go_component_lint ingest-service"
     timeout_in_minutes: 10
     retry:

.expeditor/verify_private.pipeline.yml

@@ -4,7 +4,7 @@
 
 env:
   DOCKER_CONFIG: /var/lib/buildkite-agent/.docker
-  HAB_BLDR_CHANNEL: "stable"
+  HAB_BLDR_CHANNEL: "LTS-2024"
   #HAB_STUDIO_SECRET_HAB_BLDR_CHANNEL: "curl8"
   #HAB_FALLBACK_CHANNEL: "stable"
   HAB_STUDIO_SECRET_HAB_FALLBACK_CHANNEL: "stable"

.license_scout.yml

@@ -60,7 +60,7 @@ habitat:
   - origin: chef
     channel: dev
   - origin: core
-    channel: stable
+    channel: LTS-2024
 allowed_licenses:
 - 0BSD
 - Apache-1.0
@@ -1535,6 +1535,36 @@ exceptions:
     reason: Ruby license (previously shipped in Automate 1)
   - name: core/ruby27
     reason: Exception made for chef server upgrade
+  - name: core/acl
+    reason: Exception made by Chef Legal
+  - name: core/diffutils
+    reason: Exception made by Chef Legal
+  - name: core/file
+    reason: Exception made by Chef Legal
+  - name: core/libxau
+    reason: Exception made by Chef Legal
+  - name: core/libxcb
+    reason: Exception made by Chef Legal
+  - name: core/libxdmcp
+    reason: Exception made by Chef Legal 
+  - name: core/libxi
+    reason: Exception made by Chef Legal
+  - name: core/libxrender
+    reason: Exception made by Chef Legal
+  - name: core/libxtst
+    reason: Exception made by Chef Legal
+  - name: core/lzo
+    reason: Exception made by Chef Legal
+  - name: core/lzop
+    reason: Exception made by Chef Legal  
+  - name: core/ncurses
+    reason: Exception made by Chef Legal
+  - name: core/sqlite
+    reason: Exception made by Chef Legal 
+  - name: core/ruby3_1
+    reason: Ruby license (previously shipped in Automate 1)
+  - name : core/libmpc   
+    reason: Exception made by Chef Legal    
 
   ruby:
   - name: highline
@@ -1823,4 +1853,3 @@ exceptions:
     reason: Exception made by Chef Legal
   - name: golang.org/x/telemetry
     reason: Exception made by Chef Legal
-

.studio/common

@@ -63,7 +63,9 @@ document "verify_products_generation" <<DOC
 DOC
 function verify_products_generation() {
   install_if_missing core/git git
-
+  git config --global --add safe.directory /go/src/github.com/chef/automate
+  git config --global --add safe.directory '*'
+
   deployment_generate || return $?
 
   git add .
@@ -98,7 +100,7 @@ function link_component_bin() {
 }
 
 function desired_golang_ident() {
-    echo "core/go22/$(cat /src/GOLANG_VERSION)"
+    echo "core/go1_22/$(cat /src/GOLANG_VERSION)"
 }
 
 function verify_components_have_platform_config() {
@@ -202,13 +204,15 @@ EOF
 function build() {
   local hab_build
   #set HAB_BLDR_CHANNEL to dev as part of the hab package refresh
-  local HAB_BLDR_CHANNEL=dev
+  local HAB_BLDR_CHANNEL=LTS-2024
 
   # Support for hab v.0.63.0
   if [ -f /bin/build ]; then
     hab_build=/bin/build
   fi
 
+  echo "Building from channel: $HAB_BLDR_CHANNEL"
+
   # Support prior hab versions
   if [ -f /hab/bin/build ]; then
     hab_build=/hab/bin/build
@@ -217,7 +221,7 @@ function build() {
   if [ -z "$hab_build" ]; then
     exit_with "Hab build binary not found. Verify the 'build' wrapper inside the studio." 22
   else
-    HAB_FEAT_IGNORE_LOCAL=true HAB_BLDR_CHANNEL=${HAB_BLDR_CHANNEL:-dev} $hab_build "$@"
+    HAB_FEAT_IGNORE_LOCAL=false HAB_BLDR_CHANNEL=${HAB_BLDR_CHANNEL:-LTS-2024} $hab_build "$@"
   fi
 }
 
@@ -356,7 +360,7 @@ function build_all_changed_components() {
   local whitelist=$*
 
   install_if_missing core/git git
-  install_if_missing core/ruby ruby
+  install_if_missing core/ruby/3.0.6/20240108025751 ruby
   hab pkg binlink core/ruby gem
   gem install toml
   hab pkg install core/coreutils >/dev/null

.studio/compliance-service

@@ -146,7 +146,7 @@ function load_scan_jobs() {
     # shellcheck disable=SC1091
     source dev/secrets-env.sh
     pushd dev-docs/adding-data &> /dev/null
-    iinstall_if_missing core/go22 go
+    iinstall_if_missing core/go1_22/1.22.5 go
     go run add_scanjobs.go
     popd &> /dev/null
   fi

.studio/golang

@@ -32,6 +32,8 @@ DOC
 function go_component_unit() {
   install_go
 
+  GOFLAGS=-buildvcs=false
+
   VERBOSE_TESTS=
   if [[ "$1" == "-v" ]]; then
       VERBOSE_TESTS=$1
@@ -271,7 +273,7 @@ function go_component_lint() {
   [ "x$1" == "x" ] && error "Missing component name argument; try 'describe ${FUNCNAME[0]}'" && return 1
   verify_component $1 || return $?
   local component=$1
-  install_golangci && run_golangci components/$component/...
+  export GOFLAGS=-buildvcs=false && install_golangci && run_golangci components/$component/...
 }
 
 complete -F _component_auto_complete go_component_lint

.studio/protobuf

@@ -21,7 +21,7 @@ document "install_protoc_toolchain" <<DOC
   Install all the protobuf plugins, linters, etc. we use to compile and vet our protobufs.
 DOC
 function install_protoc_toolchain() {
-  install_if_missing core/protobuf-cpp protoc
+  install_if_missing core/protobuf-cpp/3.19.0/20240106033100 protoc
   install_go_tool github.com/golang/protobuf/protoc-gen-go
   compile_go_protobuf api/scripts/bootstrap_protoc.sh
   compile_go_protobuf components/automate-grpc/scripts/bootstrap_protoc.sh
@@ -240,7 +240,8 @@ document "verify_all_protobuf_components" <<DOC
 DOC
 function verify_all_protobuf_components() {
   install_if_missing core/git git
-
+  git config --global --add safe.directory /go/src/github.com/chef/automate
+  git config --global --add safe.directory '*'
   clean_all_compiled_protos || return $?
   bootstrap_proto_compilers || return $?
   compile_all_protobuf_components || return $?

.studiorc

@@ -8,7 +8,7 @@ RECOMMENDED_HAB_VERSION="1.6.1205"
 GOLANGCILINTVERSION=1.60.1
 
 # TODO(ssd) 2019-11-19: https://github.com/habitat-sh/habitat/issues/7219
-unset SSL_CERT_FILE
+# unset SSL_CERT_FILE
 
 # TODO (tc) Let's get rid of this hard-coded config long-term.
 # Opensearch
@@ -32,7 +32,8 @@ export GATEWAY_PORT=2000
 export CGO_ENABLED=0
 export GOPROXY="https://proxy.golang.org,direct" 
 export GOSUMDB="sum.golang.org"
-
+SSL_CERT_FILE="/hab/pkgs/$(hab pkg list core/cacerts)/ssl/cert.pem"
+export SSL_CERT_FILE
 # Go >= 1.13 will assume this but we have tools like protoc extensions that
 # look for it.
 export GO111MODULE=on

components/automate-backend-ctl/habitat/plan.sh

@@ -13,19 +13,19 @@ do_before() {
 }
 
 pkg_deps=(
-  core/ruby31
-  core/libffi
-  chef/mlsa
-  core/bash
-  core/coreutils
-  core/glibc
-  core/postgresql-client
+  core/ruby31/3.1.6/20240912144513
+  core/libffi/3.4.2/20240105233930
+  chef/mlsa/1.0.1/20240125084021
+  core/bash/5.1/20240105214248
+  core/coreutils/8.32/20240105213308
+  core/glibc/2.35/20240105171810
+  core/postgresql-client/9.6.24/20240106122111
 )
 
 pkg_build_deps=(
-  core/make
-  core/gcc
-  core/rsync
+  core/make/4.3/20240105222044
+  core/gcc/9.5.0/20240105175314
+  core/rsync/3.2.3/20240107034222
 )
 
 pkg_bin_dirs=(bin)
@@ -101,3 +101,4 @@ EOF
   chmod -v 755 "$bin"
 }
 
+

components/automate-backend-deployment/habitat/plan.sh

@@ -32,7 +32,7 @@ pkg_deps=(
    # core/python ( core/python/3.10.0/20231020105702 core/python/3.10.0/20220817121853 )
    #
 pkg_build_deps=(
-  core/gcc
+  core/gcc/9.5.0/20240105175314
 )
 
 # workaround for https://github.com/habitat-sh/habitat/issues/6341
@@ -130,3 +130,4 @@ do_strip() {
 
 
 
+

components/automate-backend-elasticsidecar/habitat/plan.sh

@@ -11,13 +11,13 @@ pkg_license=("Chef-MLSA")
 pkg_version="0.1.0"
 pkg_upstream_url="http://github.com/chef/automate/components/automate-backend-elasticsidecar"
 pkg_deps=(
-  core/bash
+  core/bash/5.1/20240105214248
   chef/automate-openjdk
   chef/automate-ha-opensearch
 )
 pkg_build_deps=(
-  core/make
-  core/gcc
+  core/make/4.3/20240105222044
+  core/gcc/9.5.0/20240105175314
 )
 
 pkg_binds=(

components/automate-backend-haproxy/habitat/plan.sh

@@ -47,3 +47,4 @@ do_install() {
   return 0
 }
 
+

components/automate-backend-opensearch/habitat/plan.sh

@@ -12,21 +12,21 @@ pkg_upstream_url="https://www.chef.io/automate"
 pkg_source="https://artifacts.opensearch.org/releases/bundle/opensearch/1.3.20/opensearch-1.3.20-linux-x64.tar.gz"
 pkg_shasum=a786fe52b4d25db85cc49f34df6118f19c434b25935f28bd98c0f874ae77ccc3
 pkg_build_deps=(
-  core/patchelf
-  core/make
-  core/gcc
+  core/patchelf/0.13/20240105212025
+  core/make/4.3/20240105222044
+  core/gcc/9.5.0/20240105175314
 )
 
 pkg_deps=(
-  core/coreutils
-  core/glibc
-  core/zlib
-  core/bash # hooks
-  chef/mlsa
-  core/curl # health_check
+  core/coreutils/8.32/20240105213308
+  core/glibc/2.35/20240105171810
+  core/zlib/1.3/20240105173710
+  core/bash/5.1/20240105214248 # hooks
+  chef/mlsa/1.0.1/20240125084021
+  core/curl/8.7.1/20240614090648 #healthcheck
   chef/automate-openjdk
-  chef/automate-platform-tools
-  core/ruby31
+  chef/automate-platform-tools/0.1.0/20241212061203
+  core/ruby31/3.1.6/20240912144513
 )
 pkg_interpreters=(bin/ruby)
 pkg_bin_dirs=(os/bin)

components/automate-backend-postgresql/habitat/plan.sh

@@ -2,7 +2,7 @@
 # stable channel
 
 
-UPSTREAM_PKG_IDENT="core/postgresql13/13.18"
+UPSTREAM_PKG_IDENT="core/postgresql13/13.18/20241203070217"
 pkg_name="automate-ha-postgresql"
 pkg_description="Wrapper package for core/postgresql13"
 pkg_origin="chef"
@@ -13,8 +13,8 @@ pkg_license=("Chef-MLSA")
 pkg_upstream_url="https://www.chef.io/automate"
 
 pkg_deps=(
-  chef/mlsa
-  core/bash
+  chef/mlsa/1.0.1/20240125084021
+  core/bash/5.1/20240105214248
   "${UPSTREAM_PKG_IDENT}"
 )
 
@@ -52,3 +52,5 @@ do_end() {
   return 0
 }
 
+
+