| Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
The install type is converted in kolla-build, so it will never
fail in dockerfile, move the check to kolla-build just above
the install type converting.
TrivialFix
Co-Authored-By: Jeffrey Zhang <jeffrey.zhang@99cloud.net>
Change-Id: I1500d3b47e909f94ea9f68c5245297733f63a70b
|
|
Trivial Fix
Change-Id: Ic14778bb4e894490a3b6af9471ba01ab4da94601
|
|
TrivialFix
Change-Id: Ie723fb35f15be0a500b428b2b58e6b4c5321df0c
|
|
Using curl with https requires ca-certificates.
TrivialFix
Change-Id: Idcb78233fcc07fd3d5491e230ed78efc4f9b949f
|
|
Our other keyservers for ubuntu use port 80 for firewall reasons.
Update the base to do the same.
TrivialFix
Change-Id: I4f6e59b3925e49a389e0415c943862cc13422f95
|
|
yum.mariadb.org intermittent ssl certificate ca bundle has problem
for now.
https://mariadb.atlassian.net/browse/MDEV-9435
Change-Id: Ic0dd72c4586958224c03572ca9de0ea15a7a38fd
Closes-Bug: #1536066
|
|
TrivialFix
Change-Id: I94dd94b1e64a6a844497e551a66e7279de636f90
|
|
|
|
Ceph has move it repo to download.ceph.org[0].
Actually, http://ceph.com/rpm-hammer return a http 301 code now.
[0] http://docs.ceph.com/docs/master/install/get-packages/#add-ceph
TrivalFix
Change-Id: I304f9e231c32f63e13d4a5b889412799c39f4d7e
|
|
The base image is missing python-jinja2 for source builds which causes
the kolla_mesos_start script to fail on import.
Change-Id: I8550115dd42f4401a3351cd7c466fbeb1e02a665
Closes-Bug: #1532275
|
|
|
|
|
|
TrivialFix
Change-Id: I72c541c1846e503486b402e88d5b29364920fc83
|
|
Change-Id: I93d7f4227f6b4ac04e1af5afd5e46bdbaba84b4f
Partially-Implements: blueprint binary-ubuntu
|
|
Python 3 deprecated the logger.warn method, see:
https://docs.python.org/3/library/logging.html#logging.warning, so we
prefer to use warning to avoid DeprecationWarning.
Change-Id: Ic4e07276def17ef39764601c8a7e0991f9a4efbc
Closes-Bug: 1508442
|
|
|
|
include:
* CentOS 7 RPM GPG key
* Percona repo GPG key
* OpenStack Magnum repo GPG key
Closes-Bug: #1528988
Change-Id: I2419d1d130c2cc4466e884e4022b64d81109943b
|
|
- Removed hardcoded yum repository configuration in favor of
commands dynamically generated based on repo-url and repo-file
arguments. We maintain a sane default set of repositories.
- Added generic rpm_setup_config parameter to add support for
installing .rpm or .repo files before building containers.
Co-Authored-By: Ryan Hallisey <rhallise@redhat.com>
Implements: blueprint custom-repos
Change-Id: I1b3a7647a9e7239de3cd162cb6f464f05632bde1
|
|
|
|
|
|
TrivialFix
Change-Id: I7ddebc7b6f71e50254801324fa2bf093fdaa8ce0
|
|
|
|
|
|
TrivialFix
Change-Id: Ic1c9fc76f4a5725ee76460c727197a96fe5d5359
|
|
it is more safe and pythonic.
Change-Id: I728649af37cee8d1e255bb0a389cbc532e551c74
|
|
Base on the code logic, all the source, dest, owner and perm field
is required.
Change-Id: Iba5b4b2c2bd3ca0b97a3c29655e87c9701a84350
|
|
We want to record kolla version of running containers to be able to
detect whether or not we need to perform certain downtime-causing
actions during upgrade.
Change-Id: Ie113029da98303e6809d56edbf6d8de37be128d7
Implements: blueprint record-version
|
|
this will purge the package pgp key warning
Closes-Bug: #1525276
Change-Id: I956c8b0b6f1e1bfbceaa6abc06da16a980f023c1
|
|
Systemd-container no longer exist in centos latest docker image.
Change-Id: Icbfc7fce99885551f7f4caa707a600b20db849ae
Closes-Bug: #1526606
|
|
|
|
It will be helpful for speed up the package installation.
Closes-Bug: #1525514
Change-Id: Id40a0afa30dd0a142bee3b13f7622cb0d42d9298
|
|
The ceph master repository is slow and the centos build often fails due
to timeouts fetching the ceph repo GPG key.
Switching to a more reliable mirror should improve things.
Change-Id: I7eef31fa9d83413a7c12134d285b3d20d95805e8
Closes-Bug: 1525505
|
|
Closes-Bug: #1525055
Change-Id: Id800da1a0cce4db20c32e8daf09c5f0f2c9f8929
|
|
Change-Id: I348c69e5411135da8434e9278a48a5777ff2a72d
Partially-Implements: blueprint python3
|
|
|
|
Use jinja2 comment syntax instead.
Closes-Bug: #1521932
Change-Id: Ida5a9204e7affe880ac6156d3fed3206b1eae7b9
|
|
Co-Authored-By: Michal Rostecki <mrostecki@mirantis.com>
Implements: blueprint zookeeper
Change-Id: I176f063d3802716846b921e210c1569d28bd90d8
|
|
Use jinja2 comment syntax instead.
Closes-Bug: #1521078
Change-Id: I261f7bdd9e1286b4ad71fc4529228449ffe21af2
|
|
RDO provides all of the OpenStack services, clients, libs and their
dependencies self-contained in it's repositories.
We have had users that were impacted by sudden updates from EPEL
when it was enabled because EPEL provided a more up-to-date version.
Packages may also be found in both the delorean and delorean-deps
repositories. yum-plugin-priorities will ensure the right package
candidates are chosen for installation.
Change-Id: I043ec1f60381dc7f5baab5f320ed5f1edde8ae82
Related-bug: https://bugzilla.redhat.com/show_bug.cgi?id=1284978
Closes-bug: #1520620
|
|
Change-Id: Ie358064b507729b9606683ce1a0e8feac7646030
Implements: blueprint pin-ceph
|
|
Added new option in kolla-build.conf
Change-Id: I45fe51966bcb59ea19d112281ba3d5a1ba091a56
Closes-Bug:#1514304
|
|
Implements: blueprint zookeeper
Change-Id: Ibabcb5d6d304be9290633338c513f16651d4479a
|
|
Drop root privileges for mariadb. This isn't perfect. If somemone
breaks out of the container and can run sudo within the contianer,
it would be possible to replace the root credentials of the database.
Any container that uses sudo suffers from some extra attack vector
related to the sudo command. That said, the sudo commands are
locked down to minimize harm.
Change-Id: I4b3573725d940bb8aa90d43a6235d8cf7d30fc64
Partially-Implements: blueprint drop-root
|
|
The reason we are doing drop root is so that a network exposed
software component (i.e. glance) cannot be used to affect the
immutability of the container which it runs in. I have tried
several different approaches and this is the only approach which
puts glance in PID=1 while ensuring no files may be written by
the glance process in the container image except for the log files.
Change-Id: Ifd3c8c361b78d0e4791dade3afa6435290407c41
Partially-Implements: blueprint drop-root
|
|
RDO does not yet provide a CI tested Mitaka repository.
As such, the current-passed-ci repository is the last tested
repository before the stable/liberty branch was cut.
To be able to test against the latest packages, we need to
use the untested repositories until the CI tested repository
is in place.
TrivialFix
Change-Id: I4a125eb3c84fa790746a9a8eca19e4fb2d9ecf38
|
|
Register with RHEL on the host machine and use yum to setup
the repos in the container.
Change-Id: I38aaf43fffaf7a235e69b330d5d9f0f1be31fe83
Backport: Liberty
Closes-Bug: #1513088
|
|
Change-Id: I84d7587fca64dc8a9f05e326a27511ded79e902d
Partially-Implements: blueprint rabbitmq-clusterer
|
|
This patch uses the EL7 binary bits for percona's software instead
of EL6. To match binary ABIs, it is recommended to use the same
major version of EL for CentOS.
backport: liberty
Change-Id: I1d2b146a036806c7fd2baef97a6ed861a570d26e
Partial-Fix: #1509281
|
|
The delorean repositories no longer have a separate location for
openvswitch. Now openvswitch is located in delorean-deps.repo
and the rest of delorean master is located in the delorean.repo
file. These files can be installed for both RDO and SOURCE, but
not for RHOS. This patch uses the install_metatype to make a
determination as to when to install these two repos. In the
process, we can remove the source RPM installation.
Change-Id: Ieedddd9d7ee234b6acdb03f7043d57c18e024951
Closes-Bug: #1508326
|