summaryrefslogtreecommitdiff
path: root/docker/base/Dockerfile.j2
AgeCommit message (Collapse)AuthorFilesLines
2023-06-21rabbitmq: use erlang-25 ppa on Debian/UbuntuMichal Nasiadka1-1/+1
RMQ team is now maintaining erlang-24, erlang-25 ppas, see [1]. [1]: https://github.com/rabbitmq/erlang-debian-package/discussions/33 Change-Id: I7e289bd5ce52319604717e0b319d0642a8e598db (cherry picked from commit 0e881148d0036f27b95c5a27459e527fb3b0476d)
2023-06-19Fix rabbitmq image buildMichal Arbet1-1/+1
This patch is replacing ppa.launchpadcontent.net by ppa1.novemberain.com. Reason for replacement is that only latest erlang version is available on the current ppa source. Setting Debian ARM jobs non voting for now, since the new ppa does not contain arm64 packages. This repo is based on the official Erlang/OTP package for Debian. The RabbitMQ team adapted the upstream package to produce packages for more/different combinations of Erlang/OTP, Debian and Ubuntu releases. Change-Id: Iddec6ec555f98e13c2f199e5ca7dad7f4819b1a8 (cherry picked from commit 4950c03e59b8d1af46018b81a49fa028e1b8296d) Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2023-05-18opensearch: move to yum/apt reposMichal Nasiadka1-0/+4
systemd-tmpfiles is needed otherwise opensearch postinst on Debian/Ubuntu fails Change-Id: I5aeb5796f8de7697a1c4a7404fe292ef9eb522ee (cherry picked from commit 6bd7898a1d95157c713bdff0fe5bdf5a59b65550)
2023-03-28Replace invisible unicode charsPiotr Parczewski1-2/+2
They're believed to have no special meaning and were put by accident. TrivialFix Change-Id: I66ea5711810ed0060cf89192a780bfcc92e79770 (cherry picked from commit 2ddf0aeb204d754636ded6ff2be4e2dcfc3ee421)
2023-01-31influxdb: Update gpg keyMichal Nasiadka1-1/+1
Influx repo gpg key has been rotated as of of 2023-01-26 [1]. [1]: https://www.influxdata.com/blog/linux-package-signing-key-rotation/ Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/872257 Change-Id: I76b35bb20ddc0130ca15ff03942e1a97f5d36ff0 (cherry picked from commit ab70c7618b3b7e025759fe38c8692f66ef420b15)
2023-01-26Add util-linux to centos base packagesMichal Nasiadka1-9/+10
Currently /usr/sbin/nologin is missing, because util-linux is not installed in the image. Change-Id: I717b4f2215054ef9135a1ac252ed26820bdcb1aa (cherry picked from commit 1371e4fc5b9d3d55f5bb48540753f740f1d1af02)
2023-01-18grafana: remove SHA1 workaroundMichal Nasiadka1-4/+0
Change-Id: I08fe2827bc58baa95d396daf28de1079e3df4f77 (cherry picked from commit 47a9a818596b27f658fb7b40aac2130fd04b66b6)
2023-01-13CentOS/Rocky: use CentOS Cloud SIG repo instead of DeloreanMarcin Juszkiewicz1-14/+2
Zed was released, landed in CentOS repo, time to use it. Change-Id: I829a0fc4439281b074c40e200d96a27584da3765
2022-12-06Drop elasticsearch, kibana and logstashMichal Nasiadka1-6/+0
Support has been dropped in kolla-ansible, the upgrade path is opensearch. Change-Id: I6f32aacb4e0b7dd1eb7206e02425b16f5beae4f0
2022-10-18Merge "rabbitmq/aarch64: use COPR for Erlang"Zuul1-6/+1
2022-10-18rabbitmq/aarch64: use COPR for ErlangMarcin Juszkiewicz1-6/+1
RabbitMQ team maintains RPM package in Github repo [1]. Hrw then use it to build package using COPR service [2]. This way we have latest Erlang on both distributions and both architectures. 1. https://github.com/rabbitmq/erlang-rpm/ 2. https://copr.fedorainfracloud.org/coprs/hrw/erlang-for-rabbitmq/ Change-Id: I425ae2fab78e80ff56f21fd1b24708906ec32342
2022-10-14rabbitmq: use Erlang from PPA on Debian/UbuntuMarcin Juszkiewicz1-3/+3
PPA from Team RabbitMQ [1] provides newer Erlang for Debian/Ubuntu. This way we have latest Erlang on both distributions and both architectures. 1. https://launchpad.net/~rabbitmq/+archive/ubuntu/rabbitmq-erlang Change-Id: Iec7e8461f9eb757e1576cf3898068306c5436239
2022-10-03proxysql: Use almalinux for centos/rocky9Michal Nasiadka1-1/+1
As per https://github.com/sysown/proxysql/issues/3989 Change-Id: If077d60e9efd29fab80f4f5188a4f54015734a92
2022-09-30Add RockyLinux 9 supportMichal Nasiadka1-14/+5
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-28centos: use Erlang 24 on AArch64Marcin Juszkiewicz1-1/+3
We do not have Erlang 25 for CentOS Stream 9 on AArch64 so we revert to use Erlang 24 from CentOS repository. Also synced Erlang and RabbitMQ versions between images. Change-Id: I1480de095eaea66c3a83a61ca3ff269953181e39
2022-09-27Merge "Don't ignore the remaining apt-get update errors"Zuul1-1/+1
2022-09-27Don't ignore the remaining apt-get update errorsRadosław Piliszek1-1/+1
Follow-up to I5ce2eb66a647e1805f086aa37942bf5d13eb4106 So far, I have only observed these causing weird errors later but, in theory, ignoring these could allow the rest of the code to use archival (so wrong) entries. Change-Id: I9cef5ceeb78d431ca232c7b196c48eef5d2ccbca
2022-09-27grafana: ignore SHA1 gpg key on CentOS Stream 9 (and family)Marcin Juszkiewicz1-1/+1
RHEL 9 refuses to use SHA1 gpg keys. Grafana team still did not handled key upgrade: https://github.com/grafana/grafana/issues/41036 Change-Id: Id963271103ce1397b7a5498d032e8f797edfcc70
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz1-18/+33
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-09-01Debian: use OpenStack Zed reposMarcin Juszkiewicz1-1/+1
With source base images we use small amount of packages from there. Some Python/JS updates and novnc/spice stuff. Change-Id: I41d8d3ae0e43ba7b54b126e076134f13dcab7859
2022-08-31Merge "Revert "Workaround setuptools==60.0.0 breakages""Zuul1-3/+0
2022-07-21Update ProxySQL to version 2.4Michal Arbet1-2/+2
This patch is updating ProxySQL from version 2.3 to version 2.4, which has several new features and bugfixes. Change-Id: I625f72aac591aee8b1efe51f0b4a9e7660e6dbdc
2022-05-29Use the new image naming scheme by defaultRadosław Piliszek1-2/+2
Adds a relevant reno to inform users about the change and the possibility to customise the prefix. Additionally, this patch includes the fix to Ubuntu image builds regarding rabbitmq and erlang. Both the changes are required to fix master CI. Change-Id: I6bc8b489a810849744c8bead6b9e350c5d3e36b7 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/843752
2022-04-11Adjust permissions on _extend_start files.Tim Shearer1-1/+2
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-03-11Unify curl use (customisation options)Maksim Malchuk1-0/+7
This change adds and unifies an ability to override hardcoded URLs for air-gapped environments via the usual blocks mechanism. Also, this change replaces ENV with ARG instruction for the variables used only in building images, and uses bash variable expansion where it possible. This change is a continuation of the I46b77978926fc2b578a68d1aaa944b2198af0685 Change-Id: I1fbad333b1bc95484e6f4c5145d5936a0e2db84f Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-03-07Debian: use Yoga OpenStack reposMarcin Juszkiewicz1-1/+1
Change-Id: I27910e25183a373d0d89ea6f9f4e30e118f21422
2022-02-05erlang: use packages from Erlang Solutions on AArch64Marcin Juszkiewicz1-2/+2
RabbitMQ requires Erlang 23+ and soon will bump to 24+. On AArch64 we used version 22 as there was no other option. Now it is. Change-Id: I667ccda5bb4edbfbfb97dfb0cea264837ed05cae
2022-01-04base: do not duplicate repo data on CentOSMarcin Juszkiewicz1-29/+16
Instead of listing all repositories twice, do it just once and then add architecture specific ones. Change-Id: Icf0675c17a5227643148e9956496b8eacec67bee
2021-12-28Fix variable nameMaksim Malchuk1-2/+2
TrivialFix The customization format of the variable name should contain the <image_name> [1]. This change fixes the name of the 'remote_apt_keys' variable in base Dockerfile. 1. https://docs.openstack.org/kolla/latest/admin/image-building.html#dockerfile-customisation Change-Id: I423db39e77f337a73d3d88e3dbd56469be45110b Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2021-12-21Merge "Add HTTP proxy support for fetching APT keys"Zuul1-2/+7
2021-12-21Revert "Workaround setuptools==60.0.0 breakages"Dr. Jens Harbott1-3/+0
This reverts commit b69c58971895a6ab8a23bcdc4b7b56d01f26e2f5. Reason for revert: The original commit was a hotfix to work around build failures, we should try to move back to a normal state again. Change-Id: Iff79de9dabcd4bba795f3c44d3017baa5a860306
2021-12-20Workaround setuptools==60.0.0 breakagesDr. Jens Harbott1-0/+3
Setuptools 60.0.0 is trying to use it's own distutils[0]. Once again. Use the workaround they propose until all pkgs we need have fixed their build processes. [0] https://github.com/pypa/setuptools/blob/main/CHANGES.rst#v6000 Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: I112c0ea510aad80f28fc3f8a9f04cdf09c924b18
2021-12-08Add HTTP proxy support for fetching APT keysYang Youseok1-2/+7
In network isolated environments the only way to go outside is through HTTP proxy. Make use of it if set. Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org> Closes-Bug: #1850575 Change-Id: I2718884c4742cb81a3900e38fee62fbd27b472d7
2021-11-16CentOS: do not use advanced-virtualization repoMarcin Juszkiewicz1-4/+2
virt:rhel module provides libvirt 7.9.0 and we have it enabled Change-Id: Id585c7744ba130ad1dfc28138fb0f9e6eeae771d
2021-10-04Merge "Move all distros to upstream MariaDB 10.5"Zuul1-0/+4
2021-09-30Merge "Avoid the use of --force in groupadd"Zuul1-1/+1
2021-09-28Move all distros to upstream MariaDB 10.5Radosław Piliszek1-0/+4
Per meeting's agreement [1]. [1] https://meetings.opendev.org/meetings/kolla/2021/kolla.2021-09-22-15.01.log.html#l-71 Change-Id: If24c53b3b89eddfaf2cad39fb9e70cea0f770c96
2021-09-27Merge "Debian: use Xena binary packages"Zuul1-1/+1
2021-09-27Avoid the use of --force in groupaddRadosław Piliszek1-1/+1
According to the man page, --force may ignore --gid and this is not what we want. With our ID system it is almost impossible that we hit this issue but better be safe than sorry. ;-) Change-Id: I359982ddd144e07f8296b384638cf0b5331e495c
2021-09-27Debian: use Xena binary packagesMarcin Juszkiewicz1-1/+1
Debian OpenStack team provides Xena packages now. Change-Id: I67cb6037ff13de23ad2eb55e6174e9a338525670
2021-09-16Add proxysql imageMichal Arbet1-0/+5
Replacement for MySQL balancing solution provided by haproxy. Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/770215 Change-Id: I85ebe3b20294cd9dc847a3582053d3e21f6a2216
2021-09-03ceph: Update CentOS packages to PacificMark Goddard1-2/+2
Updates the CentOS images to use centos-release-ceph-pacific. This is in line with Ubuntu which gets Pacific from UCA. Debian remains on Nautilus. Change-Id: Ie1e77f9c7d83538c051362a8972745f184c72019
2021-08-30Merge "Install UCA GPG key"Zuul1-0/+6
2021-08-30Install UCA GPG keyPierre Riteau1-0/+6
Change Ie19bf46236907d79cb42a5e94cd1067e952b8cbb dropped the Ubuntu Cloud Archive (UCA) GPG key. This results in failures to build Ubuntu container images in Kayobe CI. Change-Id: Ieadf049459b8f6bc4568e2af24d3456ca469501a
2021-08-27haproxy: Use haproxy 2.2.xMichał Nasiadka1-0/+3
For CentOS nfv-extras repository will be used, for Ubuntu - a PPA maintained by Vincent Bernat (Debian developer and package maintainer).. Debian Bullseye already uses 2.2. Change-Id: I7cd753cf66b492c75a185e365cf988cabb9c0142
2021-08-25Merge "Revert "Config: Set default home to /var/lib/{user}""Zuul1-1/+1
2021-08-25Revert "Config: Set default home to /var/lib/{user}"Radosław Piliszek1-1/+1
This reverts commit 33da736668108ded943691d490cb72812c8b150d. Reason for revert: That commit broke bifrost. It needs to be redone and tested with bifrost. Change-Id: I5cb327578f5caf73801d1eedf252bd7ee246dee4
2021-08-24Debian/Ubuntu: handle APT keys in proper wayMarcin Juszkiewicz1-46/+17
apt-key is deprecated and in Debian 'bullseye' it complain when we use it the way we did. The right way is to store key files in separate directory and then, for each repo source file, point to proper key. And this is what this patch does. Both distros use the same keys now. More info: https://michael-prokop.at/blog/2021/02/16/how-to-properly-use-3rd-party-debian-repository-signing-keys-with-apt/ Change-Id: Ie19bf46236907d79cb42a5e94cd1067e952b8cbb
2021-08-05Config: Set default home to /var/lib/{user}Michal Arbet1-1/+1
This patch is setting users home dirs to /var/lib/{user}. This is the usual default but it's good to be explicit. Change-Id: Idda2ff4a5fea56e4e17a9dbf05141572671b6afc
2021-08-05base/deb: bump 'system' groups limit beyond Kolla onesMichal Arbet1-3/+7
Pacemaker complains that group 'haclient' already exists during installation and is not 'system group'. So let bump range for 'system' groups to make it happier. Our images do not have normal groups so it should not affect. Partial-Bug: #1934753 Change-Id: I4a79815f4e19d82fa77341672cd26d2282800f6a