Hardens entrypoint.clickhouse.sh so a transient GitHub download failure of the clickhouse-backup binary cannot crash-loop the clickhouse-server. Caches on the persistent /var/lib/clickhouse volume, retries with backoff, never blocks server start (clickhouse-backup is the backup tool, not a server dependency), un-silences wget. Enables cc-ci full-lifecycle testing (Q4.7b). No behaviour change when the first download succeeds.
Hardens entrypoint.clickhouse.sh so a transient GitHub download failure of the clickhouse-backup binary cannot crash-loop the clickhouse-server. Caches on the persistent /var/lib/clickhouse volume, retries with backoff, never blocks server start (clickhouse-backup is the backup tool, not a server dependency), un-silences wget. Enables cc-ci full-lifecycle testing (Q4.7b). No behaviour change when the first download succeeds.
The published entrypoint downloads the 22MB clickhouse-backup binary from GitHub at container boot
with 'set -ex' + a single silenced no-retry wget to ephemeral /tmp. Any transient failure of that
download (rate-limit / network) exits the container BEFORE clickhouse-server starts, so swarm restarts
it, it re-downloads, and the throttle is amplified into a crash-loop (deploy timeout).
clickhouse-backup is the BACKUP tool (backupbot pre/post hooks), not required for clickhouse-server to
run. This hardening caches the binary on the persistent /var/lib/clickhouse volume (fetched at most
once, reused on restart), retries with backoff, never blocks the server start on a fetch failure, and
un-silences the wget for diagnosability. No behaviour change when the first download succeeds.
@notplants — flagging this open PR from the cc-ci build for your review. Per the updated mirror workflow we no longer auto-close superseded/unrelated PRs, so it's left open for you to merge or close at your discretion.
@notplants — flagging this open PR from the cc-ci build for your review. Per the updated mirror workflow we no longer auto-close superseded/unrelated PRs, so it's left open for you to merge or close at your discretion.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Hardens entrypoint.clickhouse.sh so a transient GitHub download failure of the clickhouse-backup binary cannot crash-loop the clickhouse-server. Caches on the persistent /var/lib/clickhouse volume, retries with backoff, never blocks server start (clickhouse-backup is the backup tool, not a server dependency), un-silences wget. Enables cc-ci full-lifecycle testing (Q4.7b). No behaviour change when the first download succeeds.
@notplants — flagging this open PR from the cc-ci build for your review. Per the updated mirror workflow we no longer auto-close superseded/unrelated PRs, so it's left open for you to merge or close at your discretion.
!testme
🌻 cc-ci —
plausible@bd8bd93d❌ failurefull logs · dashboard
autonomic-bot referenced this pull request2026-06-09 15:44:56 +00:00
Superseded by #3 (rebased onto the current entrypoint comments, version corrected to 3.1.0+v2.0.0). Closing.
Pull request closed