aboutsummaryrefslogtreecommitdiff
path: root/docker/base
AgeCommit message (Collapse)AuthorFilesLines
2026-01-10Update repo GPG key for influxdata.Michael Still1-1/+1
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit b852b8ce32a53cd747d8385e6185d2ad521dee5d)
2025-11-27rocky: Remove EPEL hack - 10.1 is outMichal Nasiadka1-5/+0
Change-Id: I60de8ef452adad4a9b0d974a2678264b91eb6e3b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit cbbc1b0bca94e0f768be8433ba4bd38cb6f0c583)
2025-11-19Transition to the new rabbitmq Debian package archives.Michael Still1-1/+1
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 0fc73a644bdb7e4f583ba5ebf7ee3fcd60fb8ffc)
2025-10-09Update Fluentd from v5 LTS to v6 LTSPiotr Milewski1-1/+1
Fluent Package v5 LTS will reach end of support at the end of 2025. Fluent Package v6 LTS will be supported until at least the end of 2027. This change updates the apt repository configuration and package version to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL. No changes to existing Fluentd configuration files are required. Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-06Merge "debian: Use {{ openstack_release_codename }} for extrepo"Zuul1-1/+1
2025-10-02Add support for rpm to repos.yamlMichal Nasiadka12-150/+1
Add the ability to configure repositories in the same way as we do Debuntu ones - via repos.yaml. Removes .repo files from base - since these are not needed there anymore. gpgcheck = 1 is default in docker/base/dnf.conf Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01Move to Rocky Linux 10Michal Nasiadka2-35/+6
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-23debian: Use {{ openstack_release_codename }} for extrepoMichal Nasiadka1-1/+1
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-02Use versioned Erlang 27 repo on aarch64Bartosz Bezak1-2/+2
Fedora COPR build system cannot handle storing multiple package versions in one repo. Change-Id: I3ff95aa75f1f1cccfa40f3ab7f216cb221a6af29 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-29Remove RDO/DeloreanMichal Nasiadka1-14/+5
RDO has staffing problems and has decided to only support SLURP releases - let's drop reliance on that repository. Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-25Merge "[release] Use Flamingo Ubuntu Cloud Archive"Zuul2-2/+2
2025-08-25[release] Use Flamingo Ubuntu Cloud ArchiveBartosz Bezak2-2/+2
Change-Id: I92f3095b2d51bd6ac7ff48b0c7d79852eccc9803 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18Influxdb: use stable RHEL repoBartosz Bezak1-3/+2
Switch the RHEL repo to the stable channel as per [1]. Use new GPG. Telegraf arm64 builds are enabled again, as binaries exists. [1] https://repos.influxdata.com/stable/x86_64/ Change-Id: Ie4f6f15404f6965df51f3214506ae9f8bb9b61e7 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-12Revert "mariadb: pin to 10.11.13"Michal Nasiadka1-1/+1
This reverts commit e478adcbe63d81faa44bc09f72461fd6a7fcdf94. Reason for revert: mariabackup fixed Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087 Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07mariadb: pin to 10.11.13Pierre Riteau1-1/+1
Closes-Bug: #2119954 Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-07-25change erlang arm64 repo to rhel basedBartosz Bezak1-2/+2
centos stream diverged too much nothing provides libcrypto.so.3(OPENSSL_3.4.0)(64bit) needed by erlang-26.2.5.14-1.el9.aarch64 Change-Id: I3a0aa82d0903b341156c2fce68393cc4031e7728 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-18[base/rhel] Disable docker-ce repository in base fileGrzegorz Koper1-1/+1
Enabling repo should be handled by enable_extra_repos macro Closes-bug: #2117249 Change-Id: I92af980a4fd63540297b6bde0d52b2dfd02f72ce Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul6-16/+27
2025-07-16Move to CentOS Stream 10Michal Nasiadka6-16/+27
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-19Fix kolla-set-configs --check to detect state mismatchMichal Arbet1-0/+54
If a configuration file is tracked in the state file but no longer appears in config.json, it should either be restored or removed. This patch introduces a new exception StateMismatch and updates execute_config_check() to detect such cases. If any destination path is present in the defaults state but missing from config.json, we now raise StateMismatch. A dedicated unit test has been added to verify this behavior. Closes-Bug: #2114173 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io> Change-Id: I6e0b4aaa5722990e3ac647578023f474db3d4381
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski2-11/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet2-3/+3
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30debian: Use Epoxy extrepoMichal Nasiadka1-1/+1
Change-Id: I1ba004df309667460aa152928f789aaf6be6051f
2025-05-30[base] Ensure full control over APT sources for UbuntuMichal Arbet2-4/+2
Ubuntu images were occasionally failing to build due to unavailability or slowness of the official Ubuntu security repositories. Although Kolla uses `mirror://` URLs to leverage Ubuntu mirror infrastructure, the original `/etc/apt/sources.list.d/ubuntu.sources` file was still present, causing the system to fallback to default sources. This commit aligns Ubuntu behavior with Debian by explicitly removing the distro `.sources` file and relying solely on the sources configured by Kolla. This ensures consistent and reproducible builds both in CI and on local environments. Closes-Bug: #2112140 Change-Id: I00bcb30662bb12ed8711b28a64ef1941dcce893a
2025-05-15Revert "mariadb: pin to 10.11.11"Michal Nasiadka1-1/+1
This reverts commit 535b2f270faf24cfa30b9aa1a896a62c5090f1aa. Reason for revert: 10.11.12 is revoked upstream Change-Id: I0a8cdc232e5b46cb47e4a3e1b0af7b2402103690
2025-05-07mariadb: pin to 10.11.11Michal Nasiadka1-1/+1
Temporarily disable upgrade jobs to get epoxy rc1 branched this week. Closes-Bug: #2110122 Change-Id: If301b9ebd7d0dc38bea4d60467e8e80a7a49825d
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul2-0/+8
2025-03-27Merge "Change Bifrost Python upper-constraints source"Zuul1-1/+0
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka2-0/+8
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-03-17debian: Use Dalmatian extrepo releaseMichal Nasiadka1-1/+1
Change-Id: I954106dc32b4c08604d5c40e00fe53e5bb18b266
2025-02-25[release] Use UCA EpoxyGrzegorz Koper2-2/+2
Change-Id: I6c15cf0fd7b8f1cc3339936c58ad8a8581cfc570
2025-02-05Change Bifrost Python upper-constraints sourceSeunghun Lee1-1/+0
Users can override the upper-constraints.txt by setting the source of openstack-base in kolla-build.conf. However, bifrost-base Dockerfile so far doesn't pass overridden upper-constraints file to Bifrost install playbook resulting the playbook not acknowledging it and just use upstream one. This change sets the source of Bifrost upper-constraints to use upper-constraints of openstack-base for consistency among all Kolla images With this, change the environment variable UPPER_CONSTRAINTS_FILE is only affecting kolla-toolbox image. Therefore, moved UPPER_CONSTRATINS_FILE variable example to the ``kolla_toolbox_pip_conf`` block of kolla-toolbox Dockerfile. Additionally, updated 'Python packages build options' section of documentation to represent latest method of changing Python package related options (including this change). Change-Id: I0a9c782ca1177ef84e4323cb1e5bfac0fb3f383c
2025-01-02Merge "Time mismatch in /etc/localtime and /etc/timezone"Zuul1-1/+3
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul3-18/+14
(Dalmatian)""
2024-12-09Time mismatch in /etc/localtime and /etc/timezonePiotr Milewski1-1/+3
Python3-pip installs the dependent package tzdata and blocks the mount of the /etc/localtime file in docker. After deleting the symbolic link docker correctly mounts the external localtime file. Applies only to ubuntu 24.04, in previous versions of ubuntu there was no such problem Closes-Bug: #2091161 Change-Id: I733a50b5ca455cfa4b248dc324500d78c17c817b
2024-12-02Change copy-cacerts behaviourRoman Krček1-19/+40
So far, the certificates were not part of config.json files for containers. With future patches that will remove container restarts based on triggers from config and service-copy-cert, it is important that all files that change during config are specified in config.json so that kolla-set-configs --check can detect those changes and based on that restart the container. This patch provides prerequisite for future patch in kolla-ansible. Comments from kevko: The script also takes into account whether review [1] is merged or not, ensuring that it will function correctly in both cases thanks to review [2], because using the state file, we can effectively verify whether the config.json that copies CA certs to /var/lib/kolla/share is being used or not. If we didn’t handle it this way, we would have to rely on checking whether the directory /var/lib/kolla/share exists or some another magic, which is insufficient because various states and combinations of Kolla image and Kolla-Ansible versions could result in certificates always being copied. This method provides a clear and definitive distinction. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/924651 [2] https://review.opendev.org/c/openstack/kolla/+/915440 Change-Id: I5120f1874f25a9ca8326e6db8b12dee4c81feb56 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/924651
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka3-18/+14
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-11-15Add mechanism for patching files in containersMichal Arbet2-3/+63
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-11-06Fix handling configs in base imageMichal Arbet1-0/+151
This commit restructures the handling of configuration files in set_configs.py, introducing functions for managing default configuration files first. Closes-Bug: #2060855 Change-Id: If91e0330dc149143c82d2183b8ddf6fa9f68d80e
2024-11-05Enhance logging format for better readabilityMichal Arbet1-1/+5
Added timestamp with milliseconds, log level, and custom date format to improve clarity and make logs more useful for debugging. Change-Id: Ice2d601eddb54bbb0e7e3be6f03ba6db58256c1f
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka3-14/+18
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul2-3/+3
2024-10-03aarch64: fix name of rabbitmq copr repoBartosz Bezak1-1/+1
it should be the same as in repos.yaml Change-Id: Ieb413f7a4bd1989d7f29309368b6b218d1395e0b
2024-10-02Merge "erlang/aarch64: Move to openstack-kolla owned COPR"Zuul3-12/+12
2024-10-02erlang/aarch64: Move to openstack-kolla owned COPRMichal Nasiadka3-12/+12
Change-Id: I219418411470bdeae9af84277f5150a623c05e69
2024-10-01Bump proxysql to 2.7.xMichal Arbet2-3/+3
This patch bump proxysql 2.6.x to 2.7.x Change-Id: I6e726d8ebf9dbc6d019dd72d6d0be9d9957a3f22
2024-09-30Switch to Ubuntu 24.04 LTSMichal Nasiadka2-10/+10
Add setuptools because Python3.12 dropped distutils Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/925581 Change-Id: Ie12c43dc1de122c203edc28181366457ccd67834
2024-09-30Added systemd-standalone-sysusers package for DebuntuMichal Arbet1-0/+1
This package provides a standalone sysusers binary with minimal dependencies, designed for use in non-systemd environments. This package simply ensures that all packages that want to install systemd as dependency will have to settle for this one because the systemd package breaks systemd-standalone-sysusers, as it is an alternative. [1] https://packages.debian.org/bookworm/systemd-standalone-sysusers [2] https://packages.ubuntu.com/noble/systemd-standalone-sysusers Change-Id: I3ba85069c265844bd2f8b5e6d2b14f32e4898cfd
2024-09-26dev-mode: Run kolla_install_projects using sudoMichal Nasiadka2-1/+4
Since packages are installed using root during image build - we need to use sudo when updating those packages when using dev-mode. Change-Id: Idf14e334d50abeb1719563b1733af0b8425b3b55
2024-09-23Merge "Switch to Dynamic Python Version Detection"Zuul1-1/+0
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 22:13:53 +0000