Backport: fix: Allow non-root user to run the bundle-certificates script 17.4

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2044



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Resolve "UBI FIPS: Error in bashrc due to hardening script" (17.4)

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2058



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Dmytro Makovey <dmakovey@gitlab.com>

Co-authored-by: Jason Plum <jplum@gitlab.com>

fix: Allow non-root user to run the bundle-certificates script

Closes gitlab-com/gl-infra/gitlab-dedicated/team#6336

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2043



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: John Edge <13796758-jedge1@users.noreply.gitlab.com>

(cherry picked from commit ff65154b

)

f3342f04 fix: Allow non-root user to run update-ca-trust
73b1823b Add write permissions to /etc/pki/tls/certs
ba0bc1ad Set extraction path to prevent modifying permissions

Co-authored-by: Jason Plum <jplum@gitlab.com>

Backport: fix: Specify an absolute directory for SCHEMA_VERSIONS_DIR to 17-4-stable

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2041



Merged-by: John Skarbek <jskarbek@gitlab.com>
Approved-by: Craig Miskell <cmiskell@gitlab.com>
Approved-by: John Skarbek <jskarbek@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

fix: Specify an absolute directory for SCHEMA_VERSIONS_DIR

Closes #2097

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2039



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: John Skarbek <jskarbek@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Craig Miskell <cmiskell@gitlab.com>

(cherry picked from commit 5927672b)

32edc374

 fix: Specify an absolute directory for SCHEMA_VERSIONS_DIR

Co-authored-by: Jason Plum <jplum@gitlab.com>

Ensure projects built from branches are rebuilt always

Closes #2070

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1965



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Remove gsutil from deps config

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2016



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Update gitlab-org/container-registry from v4.8.0-gitlab to v4.9.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2021



Merged-by: João Pereira <jpereira@gitlab.com>
Approved-by: Jaime Martinez <jmartinez@gitlab.com>
Approved-by: João Pereira <jpereira@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

[ci skip]

Updates for gsutil are now managed with renovate. The renovate
configuration was validated in
https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2007.

Update python/cpython from 3.9.19 to 3.9.20

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2013



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

Changelog: changed

Update dependency GoogleCloudPlatform/gsutil to v5.30

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2007



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Alec Xu <axu@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Changelog: changed

Update docker Docker tag to v27.2.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1990



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

Remove exiftool and Go from deps

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1988



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Fix warnings in docker-compose.yml setup

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2003



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

- Fix some warnings from docker-compose.yml
- Update PG to 16
- Add ci database to configuration, removing rails warnings

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

UBI: gitlab-ruby: explicitly install openssl gem 3.2.0+

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2011



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>