Upcoming upgrades to libxcrypt split and glibc

[xnox]

• land libxcrypt: prepare for transition #15068 (preparing libxcrypt for taking over providing crypt.h and libcrypt.so)
• land sdk/tests: check all packages are up to date tools#97 (add a test case to see if most recent images are fully up to date)
• trigger tools images build https://github.com/wolfi-dev/tools/actions/workflows/release.yaml and check the result of previous step are there (text output, which we don't have at all lol see exec_test: don't emit output chainguard-dev/terraform-provider-oci#73) (not possible)
• ensure sdk image is up to date
• land Libxcrypt transition again part ii #15069
• wait for mainline builds & publish to complete (https://github.com/wolfi-dev/os/actions/runs/8451343514)
• trigger tools images build https://github.com/wolfi-dev/tools/actions/workflows/release.yaml (https://github.com/wolfi-dev/tools/actions/runs/8451597095)
• manually execute the check script to check that all packages are up to date
• run workflows to upgrade SDK images (https://github.com/wolfi-dev/os/actions/runs/8451843395 https://github.com/chainguard-dev/enterprise-packages/actions/runs/8451846895 https://github.com/chainguard-dev/extra-packages/actions/runs/8451850815)
• upgrade hashes to new sdk image i.e Update images digests #15899 https://github.com/chainguard-dev/enterprise-packages/pull/2961 https://github.com/chainguard-dev/extra-packages/pull/149
• trigger mass epoch bump of reverse deps of libcrypt.so.1 to rebuild against libxcrypt
• wait for those rebuilds to land
• upgrade glibc to 2.29 glibc/2.39 package update #12226
• possibly do a mass epoch bump for glibc 2.29 rebuilds

[xnox]

@ajayk @imjasonh @smoser Really need SDK upgrade to happen, such that libxcrypt can land; and sdk upgraded again.

[xnox]

d122b783b149:/work/packages# sed 's/=.*//' -i /etc/apk/world 
d122b783b149:/work/packages# apk update
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
 [https://packages.wolfi.dev/os]
 [/work/packages]
OK: 47875 distinct packages available
d122b783b149:/work/packages# apk upgrade --all --latest
(1/5) Upgrading ld-linux (2.38-r14 -> 2.38-r15)
(2/5) Upgrading glibc-locale-posix (2.38-r14 -> 2.38-r15)
(3/5) Upgrading glibc (2.38-r14 -> 2.38-r15)
(4/5) Installing libxcrypt (4.4.36-r4)
(5/5) Upgrading libcrypt1 (2.38-r14 -> 2.38-r15)
Executing glibc-2.38-r15.trigger
OK: 15 MiB in 15 packages

[xnox]

consistent libxcrypt in the sdk image:

$ docker run -ti --rm --entrypoint apk ghcr.io/wolfi-dev/sdk:latest@sha256:68e77b8239a35b121fbd18c19ca638aa75f911838c73ff6bcea91ef0866104ca list --installed | grep crypt
libcrypt1-2.38-r15 x86_64 {glibc} (GPL-3.0-or-later) [installed]
libcrypto3-3.2.1-r0 x86_64 {openssl} (Apache-2.0) [installed]
libxcrypt-4.4.36-r4 x86_64 {libxcrypt} (GPL-2.0-or-later AND LGPL-2.1-or-later) [installed]
libxcrypt-dev-4.4.36-r4 x86_64 {libxcrypt} (GPL-2.0-or-later AND LGPL-2.1-or-later) [installed]

No packages to upgrade either

$ docker run -ti --rm ghcr.io/wolfi-dev/sdk:latest@sha256:68e77b8239a35b121fbd18c19ca638aa75f911838c73ff6bcea91ef0866104ca

Welcome to the development environment!


[sdk] ❯ apk update
WARNING: opening ./../../packages: No such file or directory
fetch https://packages.wolfi.dev/os/x86_64/APKINDEX.tar.gz
 [https://packages.wolfi.dev/os]
OK: 47875 distinct packages available
[sdk] ❯ apk upgrade --all --latest
WARNING: opening ./../../packages: No such file or directory
OK: 969 MiB in 61 packages
[sdk] ❯ sed -i 's/=.*//' /etc/apk/world 
[sdk] ❯ apk upgrade --all --latest
WARNING: opening ./../../packages: No such file or directory
OK: 970 MiB in 61 packages
[sdk] ❯