<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/tests/templates/template_overrides.j2, branch train-eol</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=train-eol</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=train-eol'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2022-03-03T14:17:13+00:00</updated>
<entry>
<title>CI: Fix epel url override</title>
<updated>2022-03-03T14:17:13+00:00</updated>
<author>
<name>Michał Nasiadka</name>
<email>mnasiadka@gmail.com</email>
</author>
<published>2021-07-01T07:19:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=d4e7ff9d2877bbd795c7b42bd3a6ca44ce88d1c3'/>
<id>urn:sha1:d4e7ff9d2877bbd795c7b42bd3a6ca44ce88d1c3</id>
<content type='text'>
epel-release now installs epel*.repos with following baseurl:
baseurl=https://download.example/pub/epel/$releasever/Everything/$basearch

This backport has been adapted to continue to work on CentOS 7.

Change-Id: I19f57d258021ff660df6b6b95e8205b69f3bea85
(cherry picked from commit acc8cb9903aa2a97342d1ca76bc9e274361194c1)
</content>
</entry>
<entry>
<title>CI: drop bashism from template overrides</title>
<updated>2021-05-11T05:39:20+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz@linaro.org</email>
</author>
<published>2021-05-04T09:30:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=326201932f93fc18371c2c5385fbf55ceb5d882d'/>
<id>urn:sha1:326201932f93fc18371c2c5385fbf55ceb5d882d</id>
<content type='text'>
[[ is bash only

In many distributions /bin/sh == bash but not in Debian and derived
where it is dash (very simple POSIX shell).

Change-Id: I2b084ea78b236623b174473f411bae04e624a3e9
(cherry picked from commit f0c3567740be342355b39a7c7d3ca341d5a4ec0f)
</content>
</entry>
<entry>
<title>[CI] Trust only infra mirrors and fix APT mirrors</title>
<updated>2021-05-10T12:21:59+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz@linaro.org</email>
</author>
<published>2020-01-10T15:40:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=3b378b0a10570b91549a23055863d14e869768b5'/>
<id>urn:sha1:3b378b0a10570b91549a23055863d14e869768b5</id>
<content type='text'>
Infra mirrors get their indices rebuilt to avoid broken
indices (due to partial update).
Unfortunately, this wipes out the cryptographic signatures.
Our approach so far was disabling apt security features globally.
However, this is not a valid choice for external repos.
It hid an issue we introduced with new RabbitMQ repos missing
proper keys installed in the image.
This caused permanent failures outside of our CI.

Our process should be as close as possible to users' experience.
This patch makes CI trust only the mirrors that have their indices
rebuilt (so infra mirrors).

For Train, fixed missing override parts as well.
And it includes also:
  - I8209770ca1353fd89aacef0859ca3a373645c6b2
  - Icb745f628c1c50d9f20df022b08ddc46fccc270c
  - Id3b55ac470a977be7ee7decdef3b49e8d89a130f

Change-Id: Ic5abc4b87fd76f87aba383abf43e95ba70629fcb
Co-Authored-By: Marcin Juszkiewicz &lt;marcin.juszkiewicz@linaro.org&gt;
(cherry picked from commit c364c8be85f4653bf7af1c7ac0378823553e7441)
(cherry picked from commit 4a482380408d107c59119b379add34f4b8e87ad7)
</content>
</entry>
<entry>
<title>CI: revert to public package mirrors after build</title>
<updated>2021-01-26T10:44:22+00:00</updated>
<author>
<name>Mark Goddard</name>
<email>mark@stackhpc.com</email>
</author>
<published>2020-11-09T14:07:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=c207f92c90108a1375b9a23e6b7a53bc959ffe34'/>
<id>urn:sha1:c207f92c90108a1375b9a23e6b7a53bc959ffe34</id>
<content type='text'>
When building images in CI, we use local package mirrors to reduce
external network traffic. These mirrors are not necessarily reliable nor
are they guaranteed to be accessible outside of the CI environment
(although many are).

While it is an antipattern to install packages in containers at runtime,
the Bifrost container does just that. If the mirrors configured in the
image are unavailable, Bifrost deployment can fail.

This change fixes the issue by reverting to public package mirrors as a
final step of the image build process.

Closes-Bug: #1902101

Change-Id: I2592a736206eaec811290e9fbdbf2540c0518ffe
(cherry picked from commit 0fc464332c789ce05e9d6442726ada84ce7fc65a)
</content>
</entry>
<entry>
<title>CI: use wheels from infra mirror</title>
<updated>2020-06-19T10:51:11+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz@linaro.org</email>
</author>
<published>2020-05-22T13:54:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=c63cd16867c6bbfb86cc3902e0c601ad1842f3d7'/>
<id>urn:sha1:c63cd16867c6bbfb86cc3902e0c601ad1842f3d7</id>
<content type='text'>
If they are available then we do not need to build them. Especially
AArch64 jobs will speedup (once wheels are built).

Change-Id: I79af6c37950e156018a9204fbcc7417cd7d41012
</content>
</entry>
<entry>
<title>CI: Add https match for mirror.centos.org to template-overrides</title>
<updated>2020-04-03T11:11:48+00:00</updated>
<author>
<name>Michal Nasiadka</name>
<email>mnasiadka@gmail.com</email>
</author>
<published>2020-04-01T10:51:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=169b3aa7c3569194b33747403fee4535044885ff'/>
<id>urn:sha1:169b3aa7c3569194b33747403fee4535044885ff</id>
<content type='text'>
Some CentOS repos (currently one - Ceph NFS Ganesha) use
https://mirror.centos.org instead of http:// and we break
their definition by removing mirrorlist= entry and not inserting baseurl
entry due to a missing match.

Change-Id: I7b29f8c6be80820042023d2b85162d5cc9a65f08
(cherry picked from commit 1a28aefec8d3f9c2d6a5bf77a040a81edc94b3ac)
</content>
</entry>
<entry>
<title>CentOS 8: Update packages in images</title>
<updated>2020-02-26T09:16:48+00:00</updated>
<author>
<name>Mark Goddard</name>
<email>mark@stackhpc.com</email>
</author>
<published>2019-12-17T13:01:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=63d566feaafd0cab6eeac9f88acd6ec7fc66b645'/>
<id>urn:sha1:63d566feaafd0cab6eeac9f88acd6ec7fc66b645</id>
<content type='text'>
* Some further changes for python2 vs python3 packages
* Allow rabbitmq 3.7.*, since a newer erlang is available
* Switch from qemu-img-ev to qemu-img on CentOS 8
* bridge-utils no longer available on CentOS 8
* libvirt-daemon-driver-lxc no longer available on CentOS 8
* Mark some more images buildable for CentOS 8

Depends-On: https://review.opendev.org/709553

Change-Id: Iaf5b68ff6d944ae730ca0b1d5832172c106a6c08
Partially-Implements: blueprint centos-rhel-8
Partially-Implements: blueprint centos-rhel-python-3
(cherry picked from commit 4b4e26262b9e03190c639481fb60a8f4f92c532a)
</content>
</entry>
<entry>
<title>CentOS 8: base and openstack-base images</title>
<updated>2020-02-26T09:14:46+00:00</updated>
<author>
<name>Mark Goddard</name>
<email>mark@stackhpc.com</email>
</author>
<published>2019-12-16T17:54:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=4b35eb5e241147fb38cf81a11ba63b6ac7c77f90'/>
<id>urn:sha1:4b35eb5e241147fb38cf81a11ba63b6ac7c77f90</id>
<content type='text'>
Adds support to the base and openstack-base images for CentOS 8.
These images have been removed from the list of unbuildable images, and
replaced with all dependent images.

This change also includes backports of a number of other changes related
to the base image:

* CentOS 8: disable repo_gpgcheck for grafana image
  (Ice120e8001fd9e8bb37ca4f2df26259cf798ee0e)
* CentOS 8: base image fixes for RabbitMQ, fluentd &amp; InfluxDB
  (Ibbb720390ff17e11249a5aa77163c15c0971209a)

Change-Id: I18fba8a5c2f99b700990cbf41c76077a1ec2408a
Partially-Implements: blueprint centos-rhel-8
(cherry picked from commit 3c618a1f6f0beca723e031fbe323b159400ad08f)
</content>
</entry>
<entry>
<title>Merge "Remove /var/yum/cache from CentOS base image"</title>
<updated>2019-10-29T10:37:54+00:00</updated>
<author>
<name>Zuul</name>
<email>zuul@review.opendev.org</email>
</author>
<published>2019-10-29T10:37:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=912ccf0658e88f5f8cea69c93a4ff1a830149e44'/>
<id>urn:sha1:912ccf0658e88f5f8cea69c93a4ff1a830149e44</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Remove /var/yum/cache from CentOS base image</title>
<updated>2019-10-28T11:53:20+00:00</updated>
<author>
<name>Mark Goddard</name>
<email>mark@stackhpc.com</email>
</author>
<published>2019-10-27T11:43:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=fe00a87ec8e6257ad1724b342b70811c03117b58'/>
<id>urn:sha1:fe00a87ec8e6257ad1724b342b70811c03117b58</id>
<content type='text'>
Since https://review.opendev.org/#/c/682600/, the following lines result
in /var/yum/cache being present in one of the layers of the base image:

RUN {{ macros.install_packages(base_centos_yum_repo_packages |
        customizable("centos_yum_repo_packages"), chain=True,
        clean=False) }} \
{% for repo in base_centos_yum_repos_to_disable |
    customizable('centos_yum_repos_to_disable') -%}
        &amp;&amp; yum-config-manager --disable {{ repo }} \
{% endfor -%}
{% for key in base_centos_yum_repo_keys |
    customizable('centos_yum_repo_keys') -%}
        &amp;&amp; rpm --import {{ key }} \
{% endfor -%}
    &amp;&amp; /bin/true

{% block base_centos_repo_overrides_post_yum %}{% endblock %}

RUN {{ macros.rpm_security_update(clean_package_cache) }}

This is because it is not cleaned in the first RUN statement. This adds
76MB to the image. Also, using two separate RUNs which results in an
extra 23MB due to updates to /var/lib/rpm/Packages.

Found via https://github.com/wagoodman/dive.

Change-Id: I0302ee1dfc10a2b7df127ac6a7764a84b1d74a33
Closes-Bug: #1850036
</content>
</entry>
</feed>
