summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2022-02-05erlang: use packages from Erlang Solutions on AArch64Marcin Juszkiewicz5-30/+25
RabbitMQ requires Erlang 23+ and soon will bump to 24+. On AArch64 we used version 22 as there was no other option. Now it is. Change-Id: I667ccda5bb4edbfbfb97dfb0cea264837ed05cae
2022-02-05nova-compute: 'ndctl' is available on all archsMarcin Juszkiewicz1-8/+1
In past 'ndctl' was x86-64 only in Ubuntu. This changed in 19.04 so time to adapt. Change-Id: I3e599f780e8f84ea131988f4a9a45f17055c8ab2
2022-02-05pin out some package from Debian OpenStack Team reposMarcin Juszkiewicz1-0/+5
Debian OpenStack Team backports many packages to get their stuff done. Sometimes something goes wrong: INFO:kolla.common.utils.kolla-toolbox:The following packages have unmet dependencies: INFO:kolla.common.utils.kolla-toolbox: git : Depends: git-man (< 1:2.30.2-.) but 1:2.34.1-1~bpo11+1 is to be installed INFO:kolla.common.utils.kolla-toolbox:E: Unable to correct problems, you have held broken packages. So let pin out problematic packages as we are fine with bullseye version of git. Change-Id: I8c740655c7f7803d9ab36dac79d30e35e65dd586
2022-02-04Add LetsEncrypt images for cert request/renewalJason Anderson4-0/+48
Adds container images for LetsEncrypt. Implements: blueprint letsencrypt-https Change-Id: I36d1a367fd8f40bb93ebc49122c8ee4fdcc151b2 Co-Authored-By: Jason Anderson <jasonanderson@uchicago.edu>
2022-02-04collectd: pcie-errors is x86-64 only nowMarcin Juszkiewicz1-6/+1
Change-Id: Iad7e7ebb1fbf4d14f20960d6257345db71d0e214
2022-02-04stringify docker-squash versionMarcin Juszkiewicz1-1/+1
Before: (kolla) 11:46 (s) marcin@puchatek:kolla$ ./tools/build.py --squash INFO:kolla.common.utils:Image squash is enabled and "docker-squash" version is b'1.0.8' After: (kolla) 11:46 (s) marcin@puchatek:kolla$ ./tools/build.py --squash INFO:kolla.common.utils:Image squash is enabled and "docker-squash" version is 1.0.8 Change-Id: If1844434ff0b7c3b35d0a8e742c7e2fad0dc8758
2022-02-04Switch to use Yoga binary packagesMarcin Juszkiewicz3-4/+4
At R-8 week we are moving to current release binary packages for CentOS and Ubuntu (Debian OpenStack team do not publish before RC). Change-Id: I5e620cd07326b3d69b07f7c4667176918d7c1b24
2022-02-03Remove missing collectd packagesMichal Nasiadka2-5/+0
Since CentOS Linux 8 repository retirement from CentOS mirrors - we need to use CentOS Stream 8 version of Opstools repo. Listed below packages are missing from the repo, and according to the maintainer dpdk_telemetry is not going to show up at all (it's basically dead). The rest of the packages might show up at a later stage - but it's not a priority for the maintainer. - collectd-dpdk_telemetry - collectd-libpod-stats - collectd-sensubility - python3-sqlalchemy-collectd Change-Id: I5f446fc276e245c1e6974ceeb6ff3dccd84ee502
2022-01-31Merge "Ensure set_configs sets execute bit on directories"Zuul2-0/+15
2022-01-28Ensure set_configs sets execute bit on directoriesJakub Darmach2-0/+15
While handling permissions for directories, set_configs.py configures them same as for files - i.e. 0640 set in config.json which works fine for file will cause any potential subdirectories to lack traverse permission. Check and permission change was added to handle_permissions function to add +x if +r is present for user, group, others. Change-Id: Ic6e3ae4ff40c6ce5a5c0646ed309a2938903f6c0
2022-01-27Merge "Unpin td-agent and cap elasticsearch gem"Zuul4-13/+15
2022-01-27Merge "[CI] Test Ironic on Debian"Zuul1-0/+2
2022-01-27Futureproof the uninstallation of offending es gemsRadosław Piliszek1-3/+3
Uninstall based on version range. Change-Id: I353ef9b6b8da0e726c17ad2e06995d3690731e1d
2022-01-27Unpin td-agent and cap elasticsearch gemDr. Jens Harbott4-13/+15
With [0] the version of td-agent being installed was pinned, which isn't sustainable in the long run, so we drop the pin. Latest version of the elasticsearch gem no longer works with older (OSS) versions of Elasticsearch. This is fixed by downgrading the version of the elasticsearch gems. [0] Iefcdd3100b7e3c5320bc5f1286a18251bdeab885 Related-Bug: 1930867 Closes-Bug: 1954759 Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823155 Change-Id: I3045786e863b098d7339d1066aef6c857aa5f97f
2022-01-26Use distro provided GRUB efiXinliang Liu3-18/+36
Use distro provided GRUB efi instead of creating it like ironic GRUB setup doc[1]. This avoids below ubuntu ironic-python-agent images PXE booting failure. ---------- error: invalid magic number. error: you need to load the kernel first. Press any key to continue... ---------- This also fixes x86_64 uefi pxe booting issue by setting up GRUB efi for x86_64. Besides, GRUB setup only needs to do once at bootstrap stage. [1]: https://docs.openstack.org/ironic/train/install/configure-pxe.html#uefi-pxe-GRUB-setup Closes-Bug: #1879265 Change-Id: I8be5bdf5f1a62751aefe6bd0959e8f558fcfe591
2022-01-25Merge "Clean up fluentd image recipe"Zuul2-72/+17
2022-01-25Upgrade pip and friends in source images (part 2)Marcin Juszkiewicz2-2/+4
New pip has nice features for detection of conflicting requirements. When installing from PyPI, as we do in source images, running the latest pip+setuptools+wheel is recommended. This change covers entries missed in I4ae3a82cc796a60450c2a35beba32972964bc5d0 Change-Id: I0d69009b8b736b59b122ad29a9a5f6a22b041513
2022-01-21Merge "Mitigate two Log4j vulnerabilities in Apache Storm"Zuul2-0/+10
2022-01-20Merge "Clean MariaDB/MySQL"Zuul5-16/+1
2022-01-20Merge "base: do not duplicate repo data on CentOS"Zuul1-29/+16
2022-01-13Mitigate two Log4j vulnerabilities in Apache StormPierre Riteau2-0/+10
The Log4j version was bumped on GitHub [1] but it is still pending inclusion in a release of Apache Storm. Apply the alternative mitigation recommended by Log4j [2] of removing the JndiLookup class from the classpath. [1] https://github.com/apache/storm/pull/3427 [2] https://logging.apache.org/log4j/2.x/security.html Change-Id: Ib3ecd73f9e39e320acb2c5f0962b8af9b1a817e9
2022-01-12magnum: fix issue with keystone auth default policyMichal Nasiadka2-0/+6
Closes-Bug: #1957159 Change-Id: I042da2234d0a06f1b7ddcac9eb6db8b86f13d205
2022-01-11Merge "[CI] Make changes to fluentd trigger the EFK job"Zuul2-2/+2
2022-01-11Merge "Add fluentd grok-parser plugin on CentOS on aarch64"Zuul2-1/+6
2022-01-04base: do not duplicate repo data on CentOSMarcin Juszkiewicz1-29/+16
Instead of listing all repositories twice, do it just once and then add architecture specific ones. Change-Id: Icf0675c17a5227643148e9956496b8eacec67bee
2021-12-30Merge "bindep: drop dbus"Zuul1-1/+0
2021-12-29Clean up fluentd image recipeRadosław Piliszek2-72/+17
Since Xena, there is no arch supported other than x86_64 and aarch64. Additionally, the conditional for x86_64 Debian does not seem to be needed now with current td-agent. Moreover, drop two plugins that are relevant only to fluentd 0.12, one of which (parser) causes fluentd 0.12 (!) to be installed. Modern fluentd has both built-in. Finally, drop the labels as they are no longer useful. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823093 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823094 Change-Id: I7326cd8fcfa459dedcb6404e5287f0f5aeeed6cb
2021-12-28[CI] Make changes to fluentd trigger the EFK jobRadosław Piliszek2-2/+2
As F in EFK stands for fluentd. The job is in the experimental pipeline so it still requires "check experimental" incantation to run at all. Change-Id: I51ee4c8f7532144433602dd190c8a85040466631
2021-12-28Add fluentd grok-parser plugin on CentOS on aarch64Radosław Piliszek2-1/+6
This conditional was missed in the original patch moving aarch64 to td-agent. [1] After this change, other plugins will have newer versions installed as well, as it happens in other image flavours. [1] I86ecdc1ac45dfd76b94a34d1b837f7c0bc975dcd Closes-Bug: #1955889 Change-Id: I10ff098b3356eb02ad4a1006b988812356768fec
2021-12-28Fix variable nameMaksim Malchuk1-2/+2
TrivialFix The customization format of the variable name should contain the <image_name> [1]. This change fixes the name of the 'remote_apt_keys' variable in base Dockerfile. 1. https://docs.openstack.org/kolla/latest/admin/image-building.html#dockerfile-customisation Change-Id: I423db39e77f337a73d3d88e3dbd56469be45110b Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2021-12-23bindep: drop dbusRadosław Piliszek1-1/+0
It's an artifact from "times long gone". (TM) Change-Id: If70e2a3949699caa9191dcc646856889e6315c3a
2021-12-23nova: remove EPEL repository from nova-spicehtml5proxy imageMark Goddard1-3/+0
The EPEL8 repository doesn't provide the necessary spice-html5 package, and the image is marked unbuildable for CentOS. Let's not make EPEL look more useful than it is. TrivialFix Change-Id: Ia37792ca6e5b40156ebd57b6c290d1ee9d4ff87a
2021-12-21Merge "Make cron's logrotate schedule configurable"Zuul2-0/+20
2021-12-21[CI] Test Ironic on DebianRadosław Piliszek1-0/+2
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/797190 Change-Id: I8ada844a2b034547c045248b324c1955ad4cf6ae
2021-12-21Merge "Add HTTP proxy support for fetching APT keys"Zuul1-2/+7
2021-12-21Merge "Drop vmtp"Zuul10-51/+8
2021-12-21Merge "Bump up Alertmanager version"Zuul2-4/+11
2021-12-21Revert "Workaround setuptools==60.0.0 breakages"Dr. Jens Harbott1-3/+0
This reverts commit b69c58971895a6ab8a23bcdc4b7b56d01f26e2f5. Reason for revert: The original commit was a hotfix to work around build failures, we should try to move back to a normal state again. Change-Id: Iff79de9dabcd4bba795f3c44d3017baa5a860306
2021-12-20Drop vmtpRadosław Piliszek10-51/+8
Details in the attached reno. Change-Id: I1a8363da02d98255fce31749f4c9838088443a67
2021-12-20Workaround setuptools==60.0.0 breakagesDr. Jens Harbott1-0/+3
Setuptools 60.0.0 is trying to use it's own distutils[0]. Once again. Use the workaround they propose until all pkgs we need have fixed their build processes. [0] https://github.com/pypa/setuptools/blob/main/CHANGES.rst#v6000 Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: I112c0ea510aad80f28fc3f8a9f04cdf09c924b18
2021-12-16Bump up Alertmanager versionPiotr Parczewski2-4/+11
Yoga deserves a newer version than one from 2019. Change-Id: Ib7b45ea6ca0a465ce075ac2f2a0e7b8006ee6190
2021-12-09Merge "horizon: add various dashboard plugins for ubuntu/binary"Zuul1-9/+10
2021-12-09Merge "CentOS: do not use advanced-virtualization repo"Zuul2-6/+2
2021-12-08Merge "Debian: enable building Bifrost images on x86-64"Zuul3-4/+2
2021-12-08Merge "Ensure nvme-cli is present in nova-compute images"Zuul3-4/+10
2021-12-08Merge "switch source images to follow master branches"Zuul2-1/+6
2021-12-08Add HTTP proxy support for fetching APT keysYang Youseok1-2/+7
In network isolated environments the only way to go outside is through HTTP proxy. Make use of it if set. Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org> Closes-Bug: #1850575 Change-Id: I2718884c4742cb81a3900e38fee62fbd27b472d7
2021-12-08Merge "qdrouterd: add release note with deprecation notice"Zuul1-0/+5
2021-12-07Ensure nvme-cli is present in nova-compute imagesPierre Riteau3-4/+10
The nvme-cli package is required to get the nvme command executed by os-brick, which is used by nova-compute. We don't need to explicitely install it for centos binary images, as it is required by os-brick which is required by openstack-nova-common, but all other types of images were missing it. Change-Id: I754939da7636c57d2a8d5b83debb5d8a58e38432 Closes-Bug: #1953509
2021-12-07Merge "Upgrade pip and friends in source images"Zuul3-2/+10
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 08:35:50 +0000