ansible: add Alpine Linux 3.20 and 3.21

[targos]

Closes: #3988

[targos]

I'll mark ready after testing it.

[targos]

Created Jenkins nodes: https://ci.nodejs.org/label/alpine-new320-x64/ https://ci.nodejs.org/label/alpine-new321-x64/

[targos]

Error for test-digitalocean-ubuntu2204_docker-x64-1: ERROR: failed to solve: alpine:3.20: failed to copy: httpReadSeeker: failed open: unexpected status code https://registry-1.docker.io/v2/library/alpine/manifests/sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a: 429 Too Many Requests - Server message: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit

Guess I'll have to retry later...

[targos]

Success for test-digitalocean-ubuntu2204_docker-x64-1.
Test on main: https://ci.nodejs.org/view/All/job/node-test-commit-linux-targos-alpine/ ✅

[targos]

Applied the changes to test-ibm-ubuntu2204_docker-x64-1 too.
Tried again on test-digitalocean-ubuntu2204_docker-x64-1 but I still got the rate limit error.

[targos]

I tried again today and still got the rate limit error. Don't know what to do at this point.

[targos]

@nodejs/build-infra any idea?

[richardlau]

If we're hitting rate limits pulling from Dockerhub, I think we'd have to either switch to a mirror (and hope we don't hit a rate limit on the mirror) or use an account (which we may need to talk to the Foundation about).

According to https://docs.docker.com/docker-hub/download-rate-limit/#pull-rate-limit, unauthenticated we ought to be able to pull 10 images per hour per IP address.

[targos]

Is the machine regularly pulling stuff from Docker hub? I'm hitting the rate limit on the first try.

[richardlau]

Is the machine regularly pulling stuff from Docker hub? I'm hitting the rate limit on the first try.

Not to my knowledge -- it should only need to pull when running the playbook.

[targos]

# curl --head -H "Authorization: Bearer $TOKEN" https://registry-1.docker.io/v2/ratelimitpreview/test/manifests/latest
HTTP/1.1 200 OK
content-length: 527
content-type: application/vnd.docker.distribution.manifest.v2+json
docker-content-digest: sha256:c2d41d2ba6d8b7b4a3ffec621578eb4d9a0909df29dfa2f6fd8a2e5fd0836aed
docker-distribution-api-version: registry/2.0
etag: "sha256:c2d41d2ba6d8b7b4a3ffec621578eb4d9a0909df29dfa2f6fd8a2e5fd0836aed"
date: Tue, 14 Jan 2025 07:46:59 GMT
strict-transport-security: max-age=31536000
ratelimit-limit: 100;w=21600
ratelimit-remaining: 0;w=21600
docker-ratelimit-source: 2604:a880:2:d0::

Source is ipv6. We're probably blocked because of other DO customers with the same prefix.

[richardlau]

@ryanaslett Do you know if other projects have hit Docker Hub pull limits, and if so how they dealt with them?