Skip to content

Run the conformance suite on MongoDB 9.0.4 #54

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thomasdarimont merged 1 commit into from
Oct 20, 2026
Merged

Run the conformance suite on MongoDB 9.0.4 #54

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,13 @@ The notable changes of every release. The section of a version is the text of it

## [Unreleased]

### Fixed

- The conformance tests start again on GitHub's current Ubuntu runners: their MongoDB is 9.0.4 now,
pinned by digest. MongoDB 8.0 and newer exit at startup on a Linux kernel from 6.19 up to 7.0.13,
and before 9.0.4 they took Ubuntu's 7.0 kernels for 7.0.0 (SERVER-121912, SERVER-131779), so the
suite found no database and the nightly run failed since the runner image of 2026-10-18.

## [0.6.0] - 2026-10-12

A receiver has to know the audience of its SETs. A Spring Boot receiver that configured
Expand Down
2 changes: 1 addition & 1 deletion easyssf-receiver-spring-boot-conformance-tests/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ reaches the receiver on the Docker host as `host.testcontainers.internal`.
|---|---|---|
| `cts.suite.image` / `CTS_SUITE_IMAGE` | `registry.gitlab.com/openid/conformance-suite@sha256:…` (`release-v5.3.2`, pinned by digest, see below) | the suite image |
| `cts.suite.nginx-image` | `registry.gitlab.com/openid/conformance-suite/nginx@sha256:…` (`release-v5.3.2`, pinned by digest) | its nginx image |
| `cts.suite.mongodb-image` | `mongo@sha256:…` (`9.0.2-noble`, pinned by digest; the suite itself runs 6.0.13 in production) | its MongoDB image |
| `cts.suite.mongodb-image` | `mongo@sha256:…` (`9.0.4`, pinned by digest; the suite itself runs 6.0.13 in production, older 8.x and 9.x releases do not start on current Ubuntu kernels) | its MongoDB image |
| `cts.suite.port` | `18443` | host port of the Testcontainers-started suite |
| `cts.receiver.port` | `9444` | port of the receiver under test |
| `cts.receiver.push-url` | `https://<host as seen from the suite>:<receiver port>/ssf/push` | the push URL the receiver registers |
Expand Down
8 changes: 6 additions & 2 deletions easyssf-test-conformance/src/main/java/org/easyssf/test/conformance/ConformanceSettings.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,9 +49,13 @@ public final class ConformanceSettings {
/**
* The suite's own compose file runs MongoDB 6.0.13, as the suite does in production.
* For the tests here a current release, with far fewer known vulnerabilities, works
* just as well: mongo:9.0.2-noble, pinned by digest like the suite images.
* just as well: mongo:9.0.4, pinned by digest like the suite images. Not older:
* MongoDB 8.0 and newer refuse to start on a Linux kernel from 6.19 up to 7.0.13 (a
* tcmalloc incompatibility, SERVER-121912), and before 9.0.4 they took Ubuntu's 7.0
* kernels, the ones of GitHub's runners since October 2026, for 7.0.0
* (SERVER-131779).
*/
static final String DEFAULT_SUITE_MONGODB_IMAGE = "mongo@sha256:61dd87ff554dc20386c63ebe1f7ede27314370ad5a7bf357c685fab424672158";
static final String DEFAULT_SUITE_MONGODB_IMAGE = "mongo@sha256:dc28ed5a9d0fc616903c3f463bb1e53b92b49f441721b91926e87d90bf957ce8";

static final int DEFAULT_SUITE_PORT = 18443;

Expand Down
Loading