arm64 builds: unit tests

[valentijnscholten]

Description

This PR takes another step towards publishing arm64 images (continuing on from #11673)
Most tutorials for multi platform builds just add a few lines to install Qemy and add -platforms: linux/amd64,linux/arm64 and are done. Unfortunately our nice python wheels such as uwsgi don't get build successfully under Qemu.
So we have run the builds natively on Githubs arm64 runners.

Steps taken (before I knew that native runners was the only way):

• Build locally for arm64 with Qemu -> FAILED
• Try to switch our builds to install upstream binaries for uwsgi so we don't have to build them -> FAILED
• Build on a AWS t4g instance -> FAILED (With PyOpenSSL error)
• Build on a GitHub ARM runner -> FAILED (With PyOpenSSL error)

At first the PyOpenSSL error seemed related to ARM64 as I had no other reports.
So I thought it was a good idea to run the unit tests also on arm64 runners to make sure they work.
Afterwards I found out the PyOpenSSL error was also present on amd64 and I fixed that.
Now that we have unit tests working in GitHub actions anyway, I think it's good to have them running.
At least for a while during the next couple of releases to see if anything pops up on these arm64 builds.

The integration test are not run for arm64. These tests are fully based on Chrome for which there is no arm64 build.
I tried to switch the integration tests to Chromium, but that would need some more work: #11810 and might not be worth it.

Test results
GitHub usually doesn't take workflow definitions from forks, so I created a branch in the Defect Dojo repository.
GitHub might still not pick up the workflow changes as it may look at master. Let's see if we have to wait until the next monthly release.

Next steps (in another PR)

• Publish the arm64 images during our releases

[dryrunsecurity]

DryRun Security Summary

Multiple GitHub Actions workflow files were updated to enable dynamic runner selection, modify Docker paths, and increase timeouts, introducing both enhanced testing flexibility and potential security considerations around configuration exposure and extended build times.

Expand for full summary

The PR updates multiple GitHub Actions workflow files to support dynamic runner selection, modify Docker image loading paths, and increase test timeouts across various workflows. Security findings include: 1) Potential configuration risks from dynamic runner selection in .github/workflows/build-docker-images-for-testing.yml, 2) Environment variable interpolation that might expose internal naming conventions, 3) Increased build timeouts potentially extending exposure during build processes, and 4) Workflow configurations that now support more flexible cross-platform testing environments.

Code Analysis

We ran 9 analyzers against 7 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[valentijnscholten]

Hi, The 25% refund sounds good to me. I have a suggestion as well. It would be nice to be able to set the Monitor to be in Celsius always and not switch when you press the button to measure Co2. Valentijn

…

________________________________ From: github-actions[bot] ***@***.***> Sent: Thursday, February 20, 2025 00:49 To: DefectDojo/django-DefectDojo ***@***.***> Cc: valentijnscholten ***@***.***>; Author ***@***.***> Subject: Re: [DefectDojo/django-DefectDojo] arm64 builds: unit tests (PR #11830) This pull request has conflicts, please resolve those before we can evaluate the pull request. — Reply to this email directly, view it on GitHub<#11830 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABBYSQQIKV5OIGVVFL4EHZL2QUJ7LAVCNFSM6AAAAABXH23MZKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNZQGAZTCNBRHE>. You are receiving this because you authored the thread.Message ID: ***@***.***> [github-actions[bot]]github-actions[bot] left a comment (DefectDojo/django-DefectDojo#11830)<#11830 (comment)> This pull request has conflicts, please resolve those before we can evaluate the pull request. — Reply to this email directly, view it on GitHub<#11830 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABBYSQQIKV5OIGVVFL4EHZL2QUJ7LAVCNFSM6AAAAABXH23MZKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNZQGAZTCNBRHE>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[Maffooch]

@valentijnscholten I would also like a 25% refund on my monitor 😂

[valentijnscholten]

Consider it done. @Maffooch 😅

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[dogboat]

25% coupon applied.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.