Update main

# Conflicts:
#	apps/services/core_isolation_manager.h
#	lib/cu_cp/task_schedulers/cu_up_task_scheduler.cpp
#	lib/cu_cp/task_schedulers/cu_up_task_scheduler.h
#	lib/mac/mac_ctrl/du_time_controller.cpp
#	lib/mac/mac_ctrl/du_time_controller.h
#	lib/pdcp/pdcp_tx_buf_info.h
#	lib/phy/upper/channel_processors/pdsch/pdsch_processor_asynchronous_pool.h
#	lib/scheduler/pucch_scheduling/pucch_guardbands_scheduler.cpp
#	lib/scheduler/pucch_scheduling/pucch_guardbands_scheduler.h
#	tests/unittests/mac/du_timer_controller_test.cpp
#	tests/unittests/scheduler/uci_and_pucch/pucch_guardbands_sched_test.cpp

Author: codebot

.github/workflows/docker.yml

@@ -11,6 +11,8 @@ jobs:
   docker:
     if: ${{ vars.SKIP_DOCKER_JOB != 'true' }}
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     strategy:
       matrix:
         include:
@@ -24,6 +26,7 @@ jobs:
             DPDK_VERSION: ""
             DOCKERFILE: ./docker/telegraf/Dockerfile
             CONTEXT: ./docker/telegraf
+            ATTESTATION_FILE: ""
           # --> grafana
           - TAGNAME: ""
             REPOSITORY: grafana
@@ -34,43 +37,48 @@ jobs:
             DPDK_VERSION: ""
             DOCKERFILE: ./docker/grafana/Dockerfile
             CONTEXT: ./docker/grafana
+            ATTESTATION_FILE: ""
           # --> gnb
           # AMD AVX2
           - TAGNAME: release_avx2
             REPOSITORY: srsran-project
             MARCH: x86-64-v3
             PLATFORM: amd64
             UHD_VERSION: "4.7.0.0"
-            DPDK_VERSION: "23.11.1"
+            DPDK_VERSION: "24.11.2"
             DOCKERFILE: ./docker/Dockerfile
             CONTEXT: ./
+            ATTESTATION_FILE: /usr/local/etc/srsran_image.spdx
           - TAGNAME: release_with_debug_avx2
             REPOSITORY: srsran-project
             EXTRA_CMAKE_ARGS: -DFORCE_DEBUG_INFO=On
             MARCH: x86-64-v3
             PLATFORM: amd64
             UHD_VERSION: "4.7.0.0"
-            DPDK_VERSION: "23.11.1"
+            DPDK_VERSION: "24.11.2"
             DOCKERFILE: ./docker/Dockerfile
             CONTEXT: ./
+            ATTESTATION_FILE: /usr/local/etc/srsran_image.spdx
           # AMD AVX512
           - TAGNAME: release_avx512
             REPOSITORY: srsran-project
             MARCH: x86-64-v4
             PLATFORM: amd64
             UHD_VERSION: "4.7.0.0"
-            DPDK_VERSION: "23.11.1"
+            DPDK_VERSION: "24.11.2"
             DOCKERFILE: ./docker/Dockerfile
             CONTEXT: ./
+            ATTESTATION_FILE: /usr/local/etc/srsran_image.spdx
           - TAGNAME: release_with_debug_avx512
             REPOSITORY: srsran-project
             EXTRA_CMAKE_ARGS: -DFORCE_DEBUG_INFO=On
             MARCH: x86-64-v4
             PLATFORM: amd64
             UHD_VERSION: "4.7.0.0"
-            DPDK_VERSION: "23.11.1"
+            DPDK_VERSION: "24.11.2"
             DOCKERFILE: ./docker/Dockerfile
             CONTEXT: ./
+            ATTESTATION_FILE: /usr/local/etc/srsran_image.spdx
     env:
       PREFIX: softwareradiosystems/${{ matrix.REPOSITORY }}:${{ matrix.TAGNAME }}
     environment: dockerhub
@@ -84,6 +92,18 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
+      - name: Set up cosign
+        uses: sigstore/cosign-installer@v3
+
+      - name: Install regctl
+        uses: actions/setup-go@v3
+        with:
+          go-version: '1.x'
+      - name: Set up regctl
+        run: |
+          go install github.com/regclient/regclient/cmd/regctl@latest
+        shell: bash
+
       - name: Determine tags based on branch
         id: tags
         run: |
@@ -114,6 +134,7 @@ jobs:
           ecr: false
 
       - name: Build and push
+        id: build_and_push
         uses: docker/build-push-action@v6
         with:
           push: true
@@ -126,3 +147,19 @@ jobs:
             UHD_VERSION=${{ matrix.UHD_VERSION }}
             DPDK_VERSION=${{ matrix.DPDK_VERSION }}
             MARCH=${{ matrix.MARCH }}
+
+      - name: Attest image
+        if: ${{ matrix.ATTESTATION_FILE != '' }}
+        run: |
+          IFS=',' read -ra TAG_LIST <<< "${{ steps.tags.outputs.tags }}"
+          DIGEST=${{ steps.build_and_push.outputs.digest }}
+          
+          for IMAGE_TAG in "${TAG_LIST[@]}"; do
+            IMAGE_DIGEST="$IMAGE_TAG@$DIGEST"
+            regctl image get-file "$IMAGE_TAG" ${{ matrix.ATTESTATION_FILE }} > image.spdx
+            cosign attest --predicate image.spdx --type spdx "$IMAGE_DIGEST"
+          done
+        shell: bash
+        env:
+          COSIGN_EXPERIMENTAL: 1
+          COSIGN_YES: 1

.gitlab-ci.yml

@@ -25,16 +25,16 @@
 
 include:
   - project: softwareradiosystems/ci/tools
-    ref: "22"
+    ref: "23"
     file: .gitlab/ci-shared/setup/all.yml
   - project: softwareradiosystems/ci/tools
-    ref: "22"
+    ref: "23"
     file: .gitlab/ci-shared/features/all.yml
   - project: softwareradiosystems/ci/tools
-    ref: "22"
+    ref: "23"
     file: .gitlab/ci-shared/tools/python.yml
   - project: softwareradiosystems/ci/tools
-    ref: "22"
+    ref: "23"
     file: .gitlab/ci-shared/tools/tagger.yml
   - local: .gitlab/ci/builders/version.yml
   - local: .gitlab/ci/build.yml
@@ -222,6 +222,28 @@ pr reminder:
       when: never
     - if: $CI_DESCRIPTION =~ /Nightly Build Unit Tests Plugin/
 
+handle stale issues:
+  extends: .handle_stale_issues
+  rules:
+    - if: $CI_DESCRIPTION =~ /Nightly Build Unit Tests Plugin/
+  variables:
+    WARN_LABEL: "not seen in a while"
+    CLOSE_MESSAGE: "Issue closed due to inactivity. Please reopen it if it happens again."
+  parallel:
+    matrix:
+      - LABELS_INCLUDE: "bug::ci"
+        LABELS_EXCLUDE: "low_priority,mid_priority"
+        WARN_THRESHOLD: 10
+        CLOSE_THRESHOLD: 30
+      - LABELS_INCLUDE: "bug::ci,mid_priority"
+        LABELS_EXCLUDE: "low_priority"
+        WARN_THRESHOLD: 20
+        CLOSE_THRESHOLD: 60
+      - LABELS_INCLUDE: "bug::ci,low_priority"
+        LABELS_EXCLUDE: ""
+        WARN_THRESHOLD: 30
+        CLOSE_THRESHOLD: 90
+
 matlab nightly:
   stage: ci
   rules:

.gitlab/ci-shared/build.yml

@@ -87,7 +87,8 @@ variables:
   before_script:
     - |
       for var in \
-        CMAKE_BUILD_TYPE ASSERT_LEVEL ENABLE_EXPORT ENABLE_BACKWARD \
+        CMAKE_BUILD_TYPE LINKER \
+        ASSERT_LEVEL ENABLE_EXPORT ENABLE_BACKWARD \
         ENABLE_FFTW ENABLE_MKL ENABLE_ARMPL \
         ENABLE_UHD ENABLE_DPDK ENABLE_ZEROMQ \
         ENABLE_ASAN ENABLE_TSAN ENABLE_GCOV \

.gitlab/ci-shared/e2e.yml

@@ -7,6 +7,7 @@ variables:
       - "zmq_deb"
       - "zmq_srsue"
       - "zmq_cudu"
+      - "zmq_cu2du"
       - "rf_b200"
       - "rf_hp"
       - "android_b200"
@@ -110,7 +111,7 @@ variables:
       done < <(git lfs ls-files | sed -r 's/^.{13}//')
       echo "srsGNB sources+build size is" $(du -hs .)
     # Remove any existing retina resource for this group
-    - retina-delete-orchestration-network --user-name ci_${GROUP}
+    - retina release --username ci_${GROUP}
     # Add extra config env variables to the .env file
     - |
       echo "" >> .gitlab/ci/e2e/.env
@@ -134,7 +135,7 @@ variables:
   after_script:
     # Remove any existing retina resource for this group
     - *setup_kube_config
-    - retina-delete-orchestration-network --user-name ci_${GROUP}
+    - retina release --username ci_${GROUP}
     # Push test metrics
     - |
       find . -iname "test_metrics.csv" -exec sh -c \

.gitlab/ci-shared/template.yml

@@ -1,9 +1,9 @@
 include:
   - project: softwareradiosystems/ci/tools
-    ref: "22"
+    ref: "23"
     file: .gitlab/ci-shared/setup/all.yml
   - project: softwareradiosystems/ci/tools
-    ref: "22"
+    ref: "23"
     file: .gitlab/ci-shared/features/all.yml
   - local: .gitlab/ci-shared/e2e.yml
   - local: .gitlab/ci-shared/build.yml