aboutsummaryrefslogtreecommitdiff
path: root/docker/base/Dockerfile.j2
AgeCommit message (Collapse)AuthorFilesLines
2021-09-27Debian: use Xena binary packagesMarcin Juszkiewicz1-1/+1
Debian OpenStack team provides Xena packages now. Change-Id: I67cb6037ff13de23ad2eb55e6174e9a338525670
2021-09-16Add proxysql imageMichal Arbet1-0/+5
Replacement for MySQL balancing solution provided by haproxy. Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/770215 Change-Id: I85ebe3b20294cd9dc847a3582053d3e21f6a2216
2021-09-03ceph: Update CentOS packages to PacificMark Goddard1-2/+2
Updates the CentOS images to use centos-release-ceph-pacific. This is in line with Ubuntu which gets Pacific from UCA. Debian remains on Nautilus. Change-Id: Ie1e77f9c7d83538c051362a8972745f184c72019
2021-08-30Merge "Install UCA GPG key"Zuul1-0/+6
2021-08-30Install UCA GPG keyPierre Riteau1-0/+6
Change Ie19bf46236907d79cb42a5e94cd1067e952b8cbb dropped the Ubuntu Cloud Archive (UCA) GPG key. This results in failures to build Ubuntu container images in Kayobe CI. Change-Id: Ieadf049459b8f6bc4568e2af24d3456ca469501a
2021-08-27haproxy: Use haproxy 2.2.xMichał Nasiadka1-0/+3
For CentOS nfv-extras repository will be used, for Ubuntu - a PPA maintained by Vincent Bernat (Debian developer and package maintainer).. Debian Bullseye already uses 2.2. Change-Id: I7cd753cf66b492c75a185e365cf988cabb9c0142
2021-08-25Merge "Revert "Config: Set default home to /var/lib/{user}""Zuul1-1/+1
2021-08-25Revert "Config: Set default home to /var/lib/{user}"Radosław Piliszek1-1/+1
This reverts commit 33da736668108ded943691d490cb72812c8b150d. Reason for revert: That commit broke bifrost. It needs to be redone and tested with bifrost. Change-Id: I5cb327578f5caf73801d1eedf252bd7ee246dee4
2021-08-24Debian/Ubuntu: handle APT keys in proper wayMarcin Juszkiewicz1-46/+17
apt-key is deprecated and in Debian 'bullseye' it complain when we use it the way we did. The right way is to store key files in separate directory and then, for each repo source file, point to proper key. And this is what this patch does. Both distros use the same keys now. More info: https://michael-prokop.at/blog/2021/02/16/how-to-properly-use-3rd-party-debian-repository-signing-keys-with-apt/ Change-Id: Ie19bf46236907d79cb42a5e94cd1067e952b8cbb
2021-08-05Config: Set default home to /var/lib/{user}Michal Arbet1-1/+1
This patch is setting users home dirs to /var/lib/{user}. This is the usual default but it's good to be explicit. Change-Id: Idda2ff4a5fea56e4e17a9dbf05141572671b6afc
2021-08-05base/deb: bump 'system' groups limit beyond Kolla onesMichal Arbet1-3/+7
Pacemaker complains that group 'haclient' already exists during installation and is not 'system group'. So let bump range for 'system' groups to make it happier. Our images do not have normal groups so it should not affect. Partial-Bug: #1934753 Change-Id: I4a79815f4e19d82fa77341672cd26d2282800f6a
2021-08-05Config: allow to set group for userMarcin Juszkiewicz1-1/+1
According to recent IRC discussions is could be useful for haclient. Partial-Bug: #1934753 Change-Id: I670fa84476e35e55cbed2d22e48836ed5e28495f
2021-07-28drop leftovers of RHEL supportMarcin Juszkiewicz1-19/+1
As a project we never built RHEL based images so support for them was not tested. Change-Id: I27dfe34ade088228d71f6857ec4f3ab28ee63915
2021-06-17Improve offline build scenario.Gaël THEROND (Fl1nt)1-11/+4
* Use distribution based dumb-init package. Change-Id: I75927b6016bdb7577fbff354632bdab6407f359c Related-Bug: #19311980
2021-05-17centos: clean up repo enable/disable/keysMarcin Juszkiewicz1-8/+2
- install all 'centos-release-*' packages we need - disable all repos in one place - do not import CentOS keys - they are trusted by default Change-Id: I97308c74406d2af0e39b77eddef2693554381ab6
2021-05-11Drop ppc64le supportMarcin Juszkiewicz1-25/+0
We do not test support for ppc64le on CI or other systems. In previous cycles it was used by TripleO and now they have own way. Change-Id: Ibd955869a6f9485dfa4d08a8ad2f4b28b7d59c15
2021-05-08centos: do not install CentOS Rabbitmq repo twice on AArch64Marcin Juszkiewicz1-4/+0
Change-Id: I320d0795ce11ca00398cec6183ed140d31d3fd80
2021-05-06base: check for compatible distro using just shMarcin Juszkiewicz1-11/+6
We allow users to use own image as base one and then we check is it proper distribution version one. And this check is done in different way for CentOS and different for Debian/Ubuntu systems. This patchset uses PRETTY_NAME from /etc/os-release for check. And it is done before anything gets installed so if wrong distribution is used then build process breaks as soon as possible. Change-Id: I22db3cd4cb608332261824626e3b8768821b8dd0
2021-04-30Install RabbitMQ repo key on Ubuntu and DebianRadosław Piliszek1-1/+4
It was missed previously. CI did not detect it because it ignores apt security issues. That gets fixed in Ic5abc4b87fd76f87aba383abf43e95ba70629fcb Change-Id: I11256c674c42e35496146ff64fee1e8e04c30d2c
2021-04-26move to Debian 'bullseye'Marcin Juszkiewicz1-2/+12
Bullseye is now in hard freeze cycle and goes for release. https://release.debian.org/bullseye/freeze_policy.html Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: I543965a2741cebfa759576a4c75669a7bacd4208
2021-04-21rabbitmq: Move to packagecloudMichal Nasiadka1-4/+5
bintray is being shut down 1st of May 2021, rabbitmq docs direct users to packagecloud - so let's move. Change-Id: I499251d13ca77aea2215f8a879b7bb8dd51f1c9f
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-1/+11
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
2021-04-08Merge "base: configure curl before first use"Zuul1-1/+3
2021-04-07base: configure curl before first useMarcin Juszkiewicz1-1/+3
We want to have all uses of curl behave the same so we ship config file for it in all images. So do it at start of image so 'base' makes use of config too. Change-Id: I95aa64f0b292cd020574dbedd320ef90529cc7a4
2021-04-06base: we already install sudo for Debian/UbuntuMarcin Juszkiewicz1-3/+0
Change-Id: I50e5355bd7dd96a5eeaa004c5fc230d1cb8e8fd2
2021-03-26Merge "base: Add lsof for healthcheck_socket"Zuul1-0/+2
2021-03-25Merge "base: print release version in case of running unsupported one"Zuul1-2/+2
2021-03-24base: Add lsof for healthcheck_socketMichał Nasiadka1-0/+2
healthcheck_socket script requires lsof to check pids of processes using that socket - that's needed for octavia-driver-agent healthchecks in Kolla-Ansible. Change-Id: I0f14c0f67fd81f13c58f231f800829ad759cc54c
2021-03-10switch to CentOS 8 StreamMarcin Juszkiewicz1-1/+5
We use official CentOS 8 Stream image as a base. So far Stream does not have own SIG repos RDO Wallaby packages will be built against Stream Kolla CI jobs are renamed to centos8s. Kolla-Ansible ones will follow in later patch. Change-Id: Ibb23c9d0caf115fcbba7bd322ecebe8d80b6821a
2021-03-04Revert "Fix error when github return 302"Michal Nasiadka1-1/+1
This reverts commit 61def281d077f88051d1b1a14dfdbfabac036c8c. Reason for revert: --location was already in curlrc and it was unified in change I46b77978926fc2b578a68d1aaa944b2198af0685 Change-Id: I066d747400ede30037ff324ad55430af7c35dc18
2021-03-02Fix error when github return 302Sergei Chekanov1-1/+1
-L for curl: If the server reports that the requested page has moved to a different location (indicated with a Location: header and a 3XX response code), this option will make curl redo the request on the new place It fixes build error for me: INFO:kolla.common.utils.prometheus-v2-server: ---> Running in 693fd4095c77 INFO:kolla.common.utils.prometheus-v2-server:curl (https://github.com/prometheus/prometheus/releases/download/v2.23.0/prometheus-2.23.0.linux-amd64.tar.gz): response: 302, time: 0.166583, size: 640 INFO:kolla.common.utils.prometheus-v2-server: INFO:kolla.common.utils.prometheus-v2-server:gzip: stdin: not in gzip format INFO:kolla.common.utils.prometheus-v2-server: INFO:kolla.common.utils.prometheus-v2-server:tar: Child returned status 1 INFO:kolla.common.utils.prometheus-v2-server:tar: Error is not recoverable: exiting now Change-Id: I095ca6f34cc7c7bca485e9ec019cc52aeb8e3ff4
2021-02-15base: print release version in case of running unsupported oneMarcin Juszkiewicz1-2/+2
User may provide own base image but it needs to be supported one. If it is not then we print info and error out. So provide user with info which release is present in their image. Change-Id: I0d8417fdeb2f02138d03cc57bd3b7b95bc43fc8f
2021-01-25base: drop Linaro OBS key for CentOS and UbuntuMarcin Juszkiewicz1-11/+0
Debian still needs it but it is enabled for all architectures. Change-Id: I6a3ba599af3deedd450b4ffff6b86a0c04628340
2020-12-11centos: do not enable PowerTools repo in baseMarcin Juszkiewicz1-1/+0
This repo is only needed for source openstack-base. Change-Id: I835c18424153f8529a37fc78e16d2becacb71263
2020-12-09Support CentOS 8.3abraden1-1/+1
Backport this until Train. CentOS 8.3 renamed system repos. [1] This caused failures when disabling and enabling. More details in the referenced bug report. Notice CentOS 8.2 and below will no longer work. [1] https://wiki.centos.org/Manuals/ReleaseNotes/CentOS8.2011#Yum_repo_file_and_repoid_changes Change-Id: I2d67b3ed7b7c521bc755ec9a87365c9962a9eeff Closes-Bug: #1907213 Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com> Depends-On: https://review.opendev.org/766211
2020-12-02Unify curl optionsMichał Nasiadka1-2/+2
Currently we use couple of curl options throughout Dockerfiles, this change adds all common options to curlrc (-sSLf) and removes usage of those in Dockerfiles. Change-Id: I46b77978926fc2b578a68d1aaa944b2198af0685
2020-09-21create 'add_binary_source_envs' macro and use itMarcin Juszkiewicz1-2/+0
There is small subset of images where we need to know which install_type or install_metatype is used. So add them only there (and their children). Change-Id: Ib7d5e36b958d6c8daf2989df32e29fa24b46c62a Implements: blueprint infra-images
2020-09-17Improve pip install process for offline deployment.Gaël THEROND (Fl1nt)1-0/+2
* "Use distribution-provided pip" * "Use python's pip module invocation method" * "Install pip earlier in order to avoid multiple installation" * "Remove pip_version variable requirement and call" Change-Id: Id0e738044a1931f9d611a7281a48ea4a593f1cf1 Closes-bug: #1893204
2020-07-22Merge "fluentd: migrate to td-agent 4 where possible"Zuul1-0/+1
2020-07-20fluentd: migrate to td-agent 4 where possibleMarcin Juszkiewicz1-0/+1
td-agent 4 got released for all distributions we support. For both x86-64 and aarch64 architectures. Change-Id: I86ecdc1ac45dfd76b94a34d1b837f7c0bc975dcd
2020-07-10Merge "Upgrade to Logstash 6"Zuul1-4/+1
2020-07-07Upgrade to Logstash 6Doug Szumski1-4/+1
Elasticsearch and Kibana 6 are used on all distros, but Logstash is still pinned at 2 which is not compatible. See the product compatibility matrix [1]. [1] https://www.elastic.co/support/matrix#matrix_compatibility Partial-Bug: #1884090 Change-Id: I1579e762bcfb07f0baa73507eb9955ae2f83c4ec
2020-07-07Remove opendaylight imageMichal Nasiadka1-2/+0
It has been deprecated in Ussuri cycle. Change-Id: I6d3174e8b52cb4d1f2eca4d85d506665dafe2406
2020-07-06Drop systemd support from nsswitch.conf on RHEL-based distrosMichele Baldessari1-1/+2
A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we should remove the nss-systemd lookup from containers. The reasons for this are as follows: 1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 when this nss module is triggered it tries to talk to dbus. It triggers a bunch of selinux denials and it makes little sense to open all containers to talk to dbus. In particular, if a container is run as non-privileged and bind-mounts /run from the host, we will hit selinux denials like the following: type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus" 2) It just makes little sense in a kolla-world to have containers talk to dbus/systemd and it saves us some time when a lookup triggers the systemd module for whatever reason. Especially because the nss-systemd module does a few things which are not useful in a container (ensures that the root and nobody users and groups remain resolvable, SystemD's DynamicUser= feature, provide Lookup API via Varlink) The sed regex gives us the wanted results: $ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf --- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000 +++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000 @@ -53,9 +53,9 @@ # group: db files # In order of likelihood of use to accelerate lookup. -passwd: sss files systemd +passwd: sss files shadow: files sss -group: sss files systemd +group: sss files hosts: files dns myhostname services: files sss netgroup: sss Related-Bug: #1883849 Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673
2020-07-01Merge "CentOS/AArch64: RabbitMQ is back!"Zuul1-1/+4
2020-06-26Merge "Change lang package block order"Zuul1-13/+13
2020-06-23CentOS/AArch64: RabbitMQ is back!Marcin Juszkiewicz1-1/+4
CentOS 8.2 has Erlang and RabbitMQ available in 'messaging/rabbitmq-38' repository. We use it to grab Erlang while RabbitMQ comes from upstream (like on x86-64). Change-Id: I2559267d120081f2e5eabc9d966b019517a5ad5d
2020-06-17Merge "base/centos: take care of whitespaces"Zuul1-12/+9
2020-06-12Change lang package block orderGaël THEROND1-13/+13
Fix offline installation of language pack packages. Change-Id: I9f4a21bbf1c8383e21e59350206aba3424602270 Closes-bug: #1883233
2020-06-02Use CentOS official mirrors for Ceph packagesAlfredo Moralejo1-8/+2
It's still using temporary mirror in RDO infra, but now that packages are properly synced to CentOS mirrors, let's switch to use it. Change-Id: I913efffe6a1d8a0210b1158261c77d0d45ac3147
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 14:05:35 +0000