chore(antithesis): Pin all rig container dependencies

[blt]

Summary

This commit modifies the rig so that we are always using Datadog Agent +
ADP as the SUT. In the general case this is ADP-on and in the
differential case this is between ADP-off and ADP-on. We make one small
modification to the Datadog Agent container in that we do not restart
ADP if it faults, giving antithesis a cleaner exit signal.

I have tried to make all our containers sync'ed properly with the rest
of the project, as they had drifted. If I understand the auto-update
proecess correctly this should all stay square from now on. From Vector
I have ported the launch script and, hopefully, this makes it a little
more clear how to launch these things. Of interest I have changed the
endpoint and turned OFF node faults for both scenarios as we cannot
ensure that, especially in the differential case, that faults happen at
the same instant and are fair.

Change Type

• Bug fix
• New feature
• Non-functional (chore, refactoring, docs)
• Performance

How did you test this PR?

References

[blt]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• chore(antithesis): Make rig intake lenient #2039
• chore(antithesis): Pin all rig container dependencies #2017 👈 (View in Graphite)
• chore(antithesis): dogstatsd generation with byte limit #1974
• chore(antithesis): Add Pyld25, series are not empty #1961
• chore(antithesis): Add two new Pyld properties #1960
• chore(antithesis): Track dropped transactions in as sometimes! assertion #1949
• chore(antithesis): Differential comparison between ADP and Datadog Agent context egress #1891
• chore(antithesis): Parallel drivers retry sends #1950
• chore(antithesis): Generate configs for scenario purposes #1938
• chore(antithesis): LogLevel set only to 'error' #1937
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[pr-commenter]

Regression Detector (Agent Data Plane)

Run ID: bcb4bfdd-17d6-4ae0-802e-d8498f2bcc6b
Baseline: dff16546 · Comparison: bc500ec5 · diff

Optimization Goals: ✅ No significant changes detected

Fine details of change detection per experiment (5)

Experiments configured erratic: true are tagged (ignored) and skipped when determining which experiments regressed or improved. Experiments which are detected as erratic at runtime are tagged (erratic) to flag that the run's sample dispersion was high, but their regression / improvement signal still counts.

experiment	goal	Δ mean %	links
quality_gates_rss_dsd_medium	memory	⚪ +0.16	metrics profiles logs
quality_gates_rss_idle	memory	⚪ -0.02	metrics profiles logs
quality_gates_rss_dsd_ultraheavy	memory	⚪ -0.22	metrics profiles logs
quality_gates_rss_dsd_heavy	memory	⚪ -0.32	metrics profiles logs
quality_gates_rss_dsd_low	memory	⚪ -0.46	metrics profiles logs

Bounds Checks: ✅ Passed (5)

experiment	check	replicates	observed	links
quality_gates_rss_dsd_heavy	memory_usage	10/10	✅ 137 MiB ≤ 140 MiB	metrics profiles logs
quality_gates_rss_dsd_low	memory_usage	10/10	✅ 43 MiB ≤ 50 MiB	metrics profiles logs
quality_gates_rss_dsd_medium	memory_usage	10/10	✅ 64.9 MiB ≤ 75 MiB	metrics profiles logs
quality_gates_rss_dsd_ultraheavy	memory_usage	10/10	✅ 191 MiB ≤ 200 MiB	metrics profiles logs
quality_gates_rss_idle	memory_usage	10/10	✅ 29 MiB ≤ 40 MiB	metrics profiles logs

Explanation

A change is flagged as a regression when |Δ mean %| > 5.00% in the regressing direction for its optimization goal AND SMP marks the experiment as a regression (is_regression: true). Improvements use the matching criteria for the improving direction. Experiments configured erratic: true (tagged (ignored)) are skipped outright; experiments detected as erratic at runtime (tagged (erratic)) still count, since that flag describes sample dispersion rather than directional certainty. The Δ mean % cell is colored accordingly: 🟢 = improvement, 🔴 = regression, ⚪ = neutral. Reduction in CPU or memory is an improvement; reduction in ingress throughput is a regression.

[tobz]

Hmmm, do you have any examples of what things looked like before this?

It would make sense to me if we had an out-of-date pinned version of ca-certificates, but I'm not seeing how the versionless dependency reference would end up giving us an out-of-date version... and given that, pinning everything feels a bit labored/fragile.

[blt]

Hmmm, do you have any examples of what things looked like before this?

It would make sense to me if we had an out-of-date pinned version of ca-certificates, but I'm not seeing how the versionless dependency reference would end up giving us an out-of-date version... and given that, pinning everything feels a bit labored/fragile.

@tobz Ah yeah so this is me misunderstanding the deal with AWS-LC, agreed on your read. I'm going to rework this PR to address the artifact mismatch under test, will ping when this is ready to go.

[pr-commenter]

Binary Size Analysis (Agent Data Plane)

Baseline: dff1654 · Comparison: bc500ec · diff
Analysis Configuration: stripped binaries · Pass/Fail Threshold: +5%
Sizes: 41.59 MiB (baseline) vs 41.59 MiB (comparison)
Size Change: -8 B (-0.00%)

✅ Binary size difference within threshold

Changes by Module

Module	File Size	Symbols
anon.104b1f618a14d6d60f2ebe1b651d81f5.1.llvm.10234976937094269617	-130 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.1.llvm.1510176363995787189	+129 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.4.llvm.10234976937094269617	-115 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.4.llvm.1510176363995787189	+114 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.3.llvm.10234976937094269617	-109 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.3.llvm.1510176363995787189	+108 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.0.llvm.10234976937094269617	-97 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.0.llvm.1510176363995787189	+96 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.2.llvm.10234976937094269617	-95 B	1
anon.104b1f618a14d6d60f2ebe1b651d81f5.2.llvm.1510176363995787189	+94 B	1
[Unmapped]	-3 B	1

Detailed Symbol Changes

    FILE SIZE        VM SIZE    
 --------------  -------------- 
  [NEW]    +129  [NEW]     +40    anon.104b1f618a14d6d60f2ebe1b651d81f5.1.llvm.1510176363995787189
  [NEW]    +114  [NEW]     +25    anon.104b1f618a14d6d60f2ebe1b651d81f5.4.llvm.1510176363995787189
  [NEW]    +108  [NEW]     +19    anon.104b1f618a14d6d60f2ebe1b651d81f5.3.llvm.1510176363995787189
  [NEW]     +96  [NEW]      +7    anon.104b1f618a14d6d60f2ebe1b651d81f5.0.llvm.1510176363995787189
  [NEW]     +94  [NEW]      +5    anon.104b1f618a14d6d60f2ebe1b651d81f5.2.llvm.1510176363995787189
  -0.0%      -3  [ = ]       0    [Unmapped]
  [DEL]     -95  [DEL]      -5    anon.104b1f618a14d6d60f2ebe1b651d81f5.2.llvm.10234976937094269617
  [DEL]     -97  [DEL]      -7    anon.104b1f618a14d6d60f2ebe1b651d81f5.0.llvm.10234976937094269617
  [DEL]    -109  [DEL]     -19    anon.104b1f618a14d6d60f2ebe1b651d81f5.3.llvm.10234976937094269617
  [DEL]    -115  [DEL]     -25    anon.104b1f618a14d6d60f2ebe1b651d81f5.4.llvm.10234976937094269617
  [DEL]    -130  [DEL]     -40    anon.104b1f618a14d6d60f2ebe1b651d81f5.1.llvm.10234976937094269617
  -0.0%      -8  [ = ]       0    TOTAL