Skip to content

[Python] Update musllinux wheels from musllinux_1_1 to musllinux_1_2#40317

Closed
sreenithi wants to merge 8 commits intogrpc:masterfrom
sreenithi:python_314_musllinux_docker_update
Closed

[Python] Update musllinux wheels from musllinux_1_1 to musllinux_1_2#40317
sreenithi wants to merge 8 commits intogrpc:masterfrom
sreenithi:python_314_musllinux_docker_update

Conversation

@sreenithi
Copy link
Contributor

@sreenithi sreenithi commented Jul 24, 2025

This PR updates base musllinux docker images used by Python artifacts from musllinux_1_1 to musllinux_1_2. (Pre-requisite for Python 3.14 support)

musllinux_1_1 image support reached EOL in November 2024: pypa/manylinux#1629. Hence these images will not be updated further and will not support Python 3.14 going forward.

@sreenithi sreenithi self-assigned this Jul 29, 2025
@sreenithi sreenithi added the release notes: yes Indicates if PR needs to be in release notes label Jul 29, 2025
@sreenithi sreenithi changed the title [Python] Update musllinux docker images from musllinux_1_1 to musllinux_1_2 [Python] Update musllinux release artifacts from musllinux_1_1 to musllinux_1_2 Jul 29, 2025
@sreenithi sreenithi requested a review from asheshvidyut July 29, 2025 11:38
@sreenithi sreenithi marked this pull request as ready for review July 29, 2025 11:38
@sreenithi
Copy link
Contributor Author

Note for reviewers:

The below mentioned files are generated from the generate_projects.sh and push_testing_images.sh scripts and don't need to be reviewed explicitly:

  • all Dockerfiles (these are generated from respective Dockerfile.inja template files`
  • *.current_version and tools/bazelify_tests/dockerimage_current_versions.bzl files are all auto-generated from the push_testing_images.sh script

# AUTO-GENERATED FROM `$REPO_ROOT/templates/tools/dockerfile/grpc_artifact_python_musllinux_1_2_aarch64/Dockerfile.inja`!!!

FROM quay.io/pypa/musllinux_1_1_aarch64:2024-09-09-f386546
FROM quay.io/pypa/musllinux_1_2_aarch64:2025.07.14-2
Copy link
Member

@asheshvidyut asheshvidyut Jul 31, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Regarding the tag - https://quay.io/repository/pypa/musllinux_1_2_aarch64?tab=tags

The tag that we have used has 3 cirtical checks for security failing in above link.

Should we use 2025.07.25-1? This one has all checks passing.

Curious how do we decide on the tags?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just used the most recent tag available at the time I made the update. I've updated with the mentioned tag.

But it looks like these security test results on Pypa keeps changing. The tag you've specified showed all Passed that day, but now it also shows as having 2 issues. So I believe the results keep changing on a daily basis and is not consistent. So probably this shouldn't be a factor to decide what tag to use.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as in #40317 (comment), we can done this separately in a follow-up PR.

Copy link
Member

@asheshvidyut asheshvidyut left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

# AUTO-GENERATED FROM `$REPO_ROOT/templates/tools/dockerfile/grpc_artifact_python_musllinux_1_2_aarch64/Dockerfile.inja`!!!

FROM quay.io/pypa/musllinux_1_1_aarch64:2024-09-09-f386546
FROM quay.io/pypa/musllinux_1_2_aarch64:2025.07.27-1
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be done separately, but we should bump this to 2025.08.02-1 (or later) to take care of the most recent setuptools CVE: https://nvd.nist.gov/vuln/detail/CVE-2025-47273

copybara-service bot pushed a commit that referenced this pull request Aug 11, 2025
This PR does the following:
- updates the base docker images to recent ones for manylinux-x86 and manylinux-x64
- updates Python version to be installed in the armv7 images

Related PRs updating other Python docker images:
- #40317
- #40354

Closes #40383

COPYBARA_INTEGRATE_REVIEW=#40383 from sreenithi:update_manylinux_docker_base_images dbfe777
PiperOrigin-RevId: 793828964
copybara-service bot pushed a commit that referenced this pull request Aug 22, 2025
This PR does the following:
- Updates the base docker image used by the manylinux2014_aarch64 artifact build from a dockcross image that uses cross-compilation to a simple pypa image that doesn't require cross-compilation
- Hence switch the manylinux2014_aarch64 build to run in an ARM64 machine without cross compiling.
  - We already have a '**Distribution Tests Python Linux Arm64**' job that runs on an ARM64 machine to build only `musllinux_aarch64` targets.
  - Updating the build process so that the manylinux2014_aarch64 target is also now built as part of the '**Distribution Tests Python Linux Arm64**' job instead of the '**Distribution Tests Python Linux**' job.

This change cuts the execution time of the '**Distribution Tests Python Linux**' job significantly effectively reducing the total runtime by over 55% as shown below:
- Previously the presubmit runs usually take about 75-90 minutes of runtime: [Example run from #40317](https://btx.cloud.google.com/invocations/147e002e-12da-441f-a744-630233725563/targets)
- Now the presubmit run-time has reduced to about 30-40 minutes: [Test run from this PR](https://btx.cloud.google.com/invocations/93602c73-228b-48e1-9bcc-059f51479887/targets)

Given that the presubmit jobs building only a small subset of targets show such time improvement, the release job which currently builds many more aarch64 artifacts will also show significant  execution time improvement going forward.

Closes #40354

PiperOrigin-RevId: 798104586
paulosjca pushed a commit to paulosjca/grpc that referenced this pull request Aug 23, 2025
…llinux_1_2 (grpc#40317)

This PR updates base musllinux docker images used by Python artifacts from musllinux_1_1 to musllinux_1_2. (Pre-requisite for Python 3.14 support)

musllinux_1_1 image support reached EOL in November 2024: pypa/manylinux#1629. Hence these images will not be updated further and will not support Python 3.14 going forward.

Closes grpc#40317

PiperOrigin-RevId: 793808655
paulosjca pushed a commit to paulosjca/grpc that referenced this pull request Aug 23, 2025
This PR does the following:
- updates the base docker images to recent ones for manylinux-x86 and manylinux-x64
- updates Python version to be installed in the armv7 images

Related PRs updating other Python docker images:
- grpc#40317
- grpc#40354

Closes grpc#40383

COPYBARA_INTEGRATE_REVIEW=grpc#40383 from sreenithi:update_manylinux_docker_base_images dbfe777
PiperOrigin-RevId: 793828964
paulosjca pushed a commit to paulosjca/grpc that referenced this pull request Aug 23, 2025
This PR does the following:
- Updates the base docker image used by the manylinux2014_aarch64 artifact build from a dockcross image that uses cross-compilation to a simple pypa image that doesn't require cross-compilation
- Hence switch the manylinux2014_aarch64 build to run in an ARM64 machine without cross compiling.
  - We already have a '**Distribution Tests Python Linux Arm64**' job that runs on an ARM64 machine to build only `musllinux_aarch64` targets.
  - Updating the build process so that the manylinux2014_aarch64 target is also now built as part of the '**Distribution Tests Python Linux Arm64**' job instead of the '**Distribution Tests Python Linux**' job.

This change cuts the execution time of the '**Distribution Tests Python Linux**' job significantly effectively reducing the total runtime by over 55% as shown below:
- Previously the presubmit runs usually take about 75-90 minutes of runtime: [Example run from grpc#40317](https://btx.cloud.google.com/invocations/147e002e-12da-441f-a744-630233725563/targets)
- Now the presubmit run-time has reduced to about 30-40 minutes: [Test run from this PR](https://btx.cloud.google.com/invocations/93602c73-228b-48e1-9bcc-059f51479887/targets)

Given that the presubmit jobs building only a small subset of targets show such time improvement, the release job which currently builds many more aarch64 artifacts will also show significant  execution time improvement going forward.

Closes grpc#40354

PiperOrigin-RevId: 798104586
anniefrchz pushed a commit to anniefrchz/grpc that referenced this pull request Sep 3, 2025
This PR does the following:
- Updates the base docker image used by the manylinux2014_aarch64 artifact build from a dockcross image that uses cross-compilation to a simple pypa image that doesn't require cross-compilation
- Hence switch the manylinux2014_aarch64 build to run in an ARM64 machine without cross compiling.
  - We already have a '**Distribution Tests Python Linux Arm64**' job that runs on an ARM64 machine to build only `musllinux_aarch64` targets.
  - Updating the build process so that the manylinux2014_aarch64 target is also now built as part of the '**Distribution Tests Python Linux Arm64**' job instead of the '**Distribution Tests Python Linux**' job.

This change cuts the execution time of the '**Distribution Tests Python Linux**' job significantly effectively reducing the total runtime by over 55% as shown below:
- Previously the presubmit runs usually take about 75-90 minutes of runtime: [Example run from grpc#40317](https://btx.cloud.google.com/invocations/147e002e-12da-441f-a744-630233725563/targets)
- Now the presubmit run-time has reduced to about 30-40 minutes: [Test run from this PR](https://btx.cloud.google.com/invocations/93602c73-228b-48e1-9bcc-059f51479887/targets)

Given that the presubmit jobs building only a small subset of targets show such time improvement, the release job which currently builds many more aarch64 artifacts will also show significant  execution time improvement going forward.

Closes grpc#40354

PiperOrigin-RevId: 798104586
copybara-service bot pushed a commit that referenced this pull request Sep 4, 2025
…ts (#40289)

This PR adds Python 3.14 support for Distribtests by updating relevant docker images and distribtest build files for Linux, MacOS and Windows environments. However, artifact generation in distribtests will be enabled in the next PR #40403

Prerequisites merged before this PR:
- #40317
- #40354
- #40383

Closes #40289

COPYBARA_INTEGRATE_REVIEW=#40289 from sreenithi:python_314_test_support 3b8bf96
PiperOrigin-RevId: 802967999
sreenithi added a commit to sreenithi/grpc that referenced this pull request Sep 8, 2025
This PR does the following:
- Updates the base docker image used by the manylinux2014_aarch64 artifact build from a dockcross image that uses cross-compilation to a simple pypa image that doesn't require cross-compilation
- Hence switch the manylinux2014_aarch64 build to run in an ARM64 machine without cross compiling.
  - We already have a '**Distribution Tests Python Linux Arm64**' job that runs on an ARM64 machine to build only `musllinux_aarch64` targets.
  - Updating the build process so that the manylinux2014_aarch64 target is also now built as part of the '**Distribution Tests Python Linux Arm64**' job instead of the '**Distribution Tests Python Linux**' job.

This change cuts the execution time of the '**Distribution Tests Python Linux**' job significantly effectively reducing the total runtime by over 55% as shown below:
- Previously the presubmit runs usually take about 75-90 minutes of runtime: [Example run from grpc#40317](https://btx.cloud.google.com/invocations/147e002e-12da-441f-a744-630233725563/targets)
- Now the presubmit run-time has reduced to about 30-40 minutes: [Test run from this PR](https://btx.cloud.google.com/invocations/93602c73-228b-48e1-9bcc-059f51479887/targets)

Given that the presubmit jobs building only a small subset of targets show such time improvement, the release job which currently builds many more aarch64 artifacts will also show significant  execution time improvement going forward.

Closes grpc#40354

PiperOrigin-RevId: 798104586
sreenithi added a commit to sreenithi/grpc that referenced this pull request Sep 8, 2025
…ts (grpc#40289)

This PR adds Python 3.14 support for Distribtests by updating relevant docker images and distribtest build files for Linux, MacOS and Windows environments. However, artifact generation in distribtests will be enabled in the next PR grpc#40403

Prerequisites merged before this PR:
- grpc#40317
- grpc#40354
- grpc#40383

Closes grpc#40289

COPYBARA_INTEGRATE_REVIEW=grpc#40289 from sreenithi:python_314_test_support 3b8bf96
PiperOrigin-RevId: 802967999
sergiitk pushed a commit that referenced this pull request Sep 8, 2025
…pilation (#40636)

Backport of #40354 to v1.75.x.
---
This PR does the following:
- Updates the base docker image used by the manylinux2014_aarch64
artifact build from a dockcross image that uses cross-compilation to a
simple pypa image that doesn't require cross-compilation
- Hence switch the manylinux2014_aarch64 build to run in an ARM64
machine without cross compiling.
- We already have a '**Distribution Tests Python Linux Arm64**' job that
runs on an ARM64 machine to build only `musllinux_aarch64` targets.
- Updating the build process so that the manylinux2014_aarch64 target is
also now built as part of the '**Distribution Tests Python Linux
Arm64**' job instead of the '**Distribution Tests Python Linux**' job.

This change cuts the execution time of the '**Distribution Tests Python
Linux**' job significantly effectively reducing the total runtime by
over 55% as shown below:
- Previously the presubmit runs usually take about 75-90 minutes of
runtime: [Example run from
#40317](https://btx.cloud.google.com/invocations/147e002e-12da-441f-a744-630233725563/targets)
- Now the presubmit run-time has reduced to about 30-40 minutes: [Test
run from this
PR](https://btx.cloud.google.com/invocations/93602c73-228b-48e1-9bcc-059f51479887/targets)

Given that the presubmit jobs building only a small subset of targets
show such time improvement, the release job which currently builds many
more aarch64 artifacts will also show significant execution time
improvement going forward.
sreenithi added a commit to sreenithi/grpc that referenced this pull request Sep 9, 2025
…ts (grpc#40289)

This PR adds Python 3.14 support for Distribtests by updating relevant docker images and distribtest build files for Linux, MacOS and Windows environments. However, artifact generation in distribtests will be enabled in the next PR grpc#40403

Prerequisites merged before this PR:
- grpc#40317
- grpc#40354
- grpc#40383

Closes grpc#40289

COPYBARA_INTEGRATE_REVIEW=grpc#40289 from sreenithi:python_314_test_support 3b8bf96
PiperOrigin-RevId: 802967999
sergiitk pushed a commit that referenced this pull request Sep 9, 2025
…ters for distribtests (#40637)

Backport of #40289 to v1.75.x.
---
This PR adds Python 3.14 support for Distribtests by updating relevant
docker images and distribtest build files for Linux, MacOS and Windows
environments. However, artifact generation in distribtests will be
enabled in the next PR #40403

Prerequisites merged before this PR:
- #40317
- #40354
- #40383
@sreenithi sreenithi changed the title [Python] Update musllinux release artifacts from musllinux_1_1 to musllinux_1_2 [Python] Update musllinux wheels from musllinux_1_1 to musllinux_1_2 Sep 10, 2025
asheshvidyut pushed a commit to asheshvidyut/grpc that referenced this pull request Sep 12, 2025
…llinux_1_2 (grpc#40317)

This PR updates base musllinux docker images used by Python artifacts from musllinux_1_1 to musllinux_1_2. (Pre-requisite for Python 3.14 support)

musllinux_1_1 image support reached EOL in November 2024: pypa/manylinux#1629. Hence these images will not be updated further and will not support Python 3.14 going forward.

Closes grpc#40317

PiperOrigin-RevId: 793808655
asheshvidyut pushed a commit to asheshvidyut/grpc that referenced this pull request Sep 12, 2025
This PR does the following:
- updates the base docker images to recent ones for manylinux-x86 and manylinux-x64
- updates Python version to be installed in the armv7 images

Related PRs updating other Python docker images:
- grpc#40317
- grpc#40354

Closes grpc#40383

COPYBARA_INTEGRATE_REVIEW=grpc#40383 from sreenithi:update_manylinux_docker_base_images dbfe777
PiperOrigin-RevId: 793828964
asheshvidyut pushed a commit to asheshvidyut/grpc that referenced this pull request Sep 12, 2025
This PR does the following:
- Updates the base docker image used by the manylinux2014_aarch64 artifact build from a dockcross image that uses cross-compilation to a simple pypa image that doesn't require cross-compilation
- Hence switch the manylinux2014_aarch64 build to run in an ARM64 machine without cross compiling.
  - We already have a '**Distribution Tests Python Linux Arm64**' job that runs on an ARM64 machine to build only `musllinux_aarch64` targets.
  - Updating the build process so that the manylinux2014_aarch64 target is also now built as part of the '**Distribution Tests Python Linux Arm64**' job instead of the '**Distribution Tests Python Linux**' job.

This change cuts the execution time of the '**Distribution Tests Python Linux**' job significantly effectively reducing the total runtime by over 55% as shown below:
- Previously the presubmit runs usually take about 75-90 minutes of runtime: [Example run from grpc#40317](https://btx.cloud.google.com/invocations/147e002e-12da-441f-a744-630233725563/targets)
- Now the presubmit run-time has reduced to about 30-40 minutes: [Test run from this PR](https://btx.cloud.google.com/invocations/93602c73-228b-48e1-9bcc-059f51479887/targets)

Given that the presubmit jobs building only a small subset of targets show such time improvement, the release job which currently builds many more aarch64 artifacts will also show significant  execution time improvement going forward.

Closes grpc#40354

PiperOrigin-RevId: 798104586
asheshvidyut pushed a commit to asheshvidyut/grpc that referenced this pull request Sep 12, 2025
…ts (grpc#40289)

This PR adds Python 3.14 support for Distribtests by updating relevant docker images and distribtest build files for Linux, MacOS and Windows environments. However, artifact generation in distribtests will be enabled in the next PR grpc#40403

Prerequisites merged before this PR:
- grpc#40317
- grpc#40354
- grpc#40383

Closes grpc#40289

COPYBARA_INTEGRATE_REVIEW=grpc#40289 from sreenithi:python_314_test_support 3b8bf96
PiperOrigin-RevId: 802967999
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants