summaryrefslogtreecommitdiff
path: root/docker/base
AgeCommit message (Collapse)AuthorFilesLines
2018-11-21base: tell gnupg to not use TTY when we import APT keysMarcin Juszkiewicz1-1/+1
Debian builds fail with gnupg error: INFO:kolla.common.utils.base:Executing: /tmp/apt-key-gpghome.utZMwIQ8EO/gpg.1.sh --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 418A7F2FB0E1E6E7EABF6FE8C2E73424D59097AB INFO:kolla.common.utils.base:gpg: cannot open '/dev/tty': No such device or address This change stops GnuPG from using tty. Change-Id: I4a9f2fb2c9fdd21430ce3a9bd02999ae21e1847a
2018-11-20Use dumb-init with --single-childRabi Mishra1-4/+5
We would probably like to forward signals only to the direct child which in turn takes care its children and not to all worker child processes. Change-Id: Id91ebb8b0ecc43946845de386350af0536dd661f Related-Bug: #1799642
2018-11-08base debian/ubuntu: drop not needed APT keysMarcin Juszkiewicz1-8/+1
Ubuntu: we dropped external MySQL repo months ago. Debian: we dropped most of external repos when we moved to 'stretch'. Also replaced Elasticsearch repo key with full id. Change-Id: I679bd814b143d128f334c76d5ec7cc2dbe06543d
2018-11-06Introduce Percona XtraBackup imageNick Jones6-3/+34
blueprint database-backup-recovery Implements an image suitable for taking MariaDB backups via Percona's XtraBackup tool. Install XtraBackup from Percona's repos, ensuring that packages from this source aren't used for any other purpose. Include a script which invokes XtraBackup with the appropriate options for either a full or incremental backup. Change-Id: Ifebe2045e5815c573c0a2ae05951c428c3f06a92
2018-10-28Disable init lastlog and faillog database for created userJeffrey Zhang1-1/+1
These two files are useless in container, and disable them will save about 18MB size for image. More info please check[1]. [1] https://github.com/sagemathinc/cocalc/issues/2287#issue-249824529 Change-Id: I1bba59260043782fd7c9306b194d144d027a29e0
2018-10-11Merge "Add crane docker image"Zuul2-0/+8
2018-10-04Merge "grafana: on aarch64 use 5.2.4 version from upstream"Zuul2-4/+0
2018-09-27grafana: on aarch64 use 5.2.4 version from upstreamMarcin Juszkiewicz2-4/+0
Upstream started building Grafana for arm64 a while ago. So let's use it instead of someone's build. Change-Id: Ia5359cd86022f2475301407d62a5ad4e1b275c13
2018-09-27base: remove pinning of dh-python for ubuntuMarcin Juszkiewicz1-5/+0
During Xenial cycle we had to pin dh-python. With Bionic we no longer have to. Change-Id: Icf80c902ebd962a3034a1948209a357f768f533f
2018-09-27ceph: stick to luminous on Ubuntu (in proper way)Marcin Juszkiewicz1-0/+5
Previous attempt broke Debian builds. Pinning Ceph packages instead of giving version during install. Change-Id: I791e479ba265ba61ffd882da18f85cdbece67e55
2018-09-21Merge "Move to the latest rabbitmq"Zuul3-3/+19
2018-09-21Add crane docker imageDan Prince2-0/+8
Crane is a lightweight 'pull only' container registry implementation. TripleO is aiming to replace our use of docker-distribution with crane for the Undercloud. Co-Authored-By: Martin André <m.andre@redhat.com> Change-Id: I59d9521f99243401d7703a3dedc26b5baed2d595
2018-09-13base: use bionic version of UCA on non-x86Marcin Juszkiewicz2-2/+2
Change-Id: Ia1ace8b5d981a28c6722fc4ddd074f1daa02ad9b
2018-09-11Move to the latest rabbitmqPaul Bourke3-3/+19
This allows us to use the new simpler style conf format, as well as drop the dependency on the deprecated clusterer plugin. Depends-On: I921459f3e40b9e0d4af9497384e49aabf0abe79b Change-Id: I75e00312b36e1678b90a42cf58d24652323eff27
2018-09-10Download binaries more securelyMartin André1-1/+2
Obtain binaries from encrypted source when we're unable to check for their signatures. This should provide better security than downloading the files over HTTP but does not replace signature verification or file integrity check. Related-Bug: #1791674 Change-Id: I7d6eed9ab14ceb130ea4f5f03d893ddaaa0a7acd
2018-08-21Merge "Use bionic repo rather than xenial for Sensu in Ubuntu distro"Zuul1-1/+1
2018-08-16Use bionic repo rather than xenial for Sensu in Ubuntu distroJeffrey Zhang1-1/+1
Change-Id: I78efa793ee72235a6cf16c5a65ef102db7e35c9a
2018-08-16Bump to UAC rocky release for ubuntu aarch64 and ppc64leJeffrey Zhang2-2/+2
Change-Id: If80ffba72f4b5e74f1fea52900098c687090d9db
2018-08-14Merge "base: do not set $contentdir for CentOS"Zuul1-11/+0
2018-08-10base/centos: stop treating AArch64 in special wayMarcin Juszkiewicz2-29/+5
All repositories we depend on got synced to mirrors. So we no longer need to fetch ceph-luminous or opstools from buildlogs.centos.org server. Change-Id: Ie7b54d20f98d26d3e086bbbfcda289c2677a008a
2018-08-10base: do not set $contentdir for CentOSMarcin Juszkiewicz1-11/+0
We no longer have to set $contentdir for CentOS as it is set in centos:7 images now. This code was required when Docker hub had 7.4 images while 7.5 packages were already in repositories. Change-Id: I69d1b87ffb3af1dea2f8cf93a2264df93356e9ed
2018-08-07Merge "centos: clean altarch repositories situation a bit"Zuul1-4/+4
2018-07-26add additional Remove yum cacheJon Schlueter1-3/+6
as a followup to https://review.openstack.org/#/c/505143/ "Remove yum cache" Change-Id: Ifaaead6f6efe35808ebf79ea0d4474fbb60c8994
2018-07-13Merge "Upgrade UAC to Rocky for ubuntu"Zuul1-1/+1
2018-07-12Upgrade UAC to Rocky for ubuntuJeffrey Zhang1-1/+1
Change-Id: I9aa30b055f03f1187b58faa32c0e1704756490a3
2018-07-11Add support for building LogstashDoug Szumski1-1/+1
Add support for building Logstash 5.x for both Centos and Debian based x86 distros. Partially-Implements: blueprint monasca-containers Change-Id: I4e2422d1cd2ae4c1f4aa63e8e543e725a1dc840c
2018-07-10centos: clean altarch repositories situation a bitMarcin Juszkiewicz1-4/+4
CentOS team synced virt/kvm-common repository for alternate archs. We can just install 'centos-release-qemu-ev' package like it is done on x86-64. Change-Id: Ie45a0b83fc4460d5dfce82efca061272db974ead
2018-07-09Update elasticsearch and kibana version to 5.xKevin Tibi4-17/+9
Change-Id: I8ed60eab2c15ae966960bcbeadb7aa25fece83a5 Implements: bp-elasticsearch-upgrade
2018-06-28Fix debian-security mirror acccess errorXinliang Liu1-1/+1
Security.debian.org accessing will actually access CDN mirror. Some mirror should use "security.debian.org/debian-security" like "mirror.xtom.com.hk", or it will cause apt-get update error[1]. [1] E: Failed to fetch http://security.debian.org/dists/stretch/updates/main/binary-arm64/Packages 404 Not Found E: Some index files failed to download. They have been ignored, or old ones used instead. Change-Id: Idd8b80c5f3c1e4aebd752e1ca6fb643e25eb1837
2018-06-15dind: get image buildable for DebianMarcin Juszkiewicz2-0/+4
With use of Docker-CE from upstream. Change-Id: If1a6fe3f1654a2c06c3c3882dc56cdfc6945a17e
2018-06-06Merge "Install sensu from centos-opstools"Zuul2-7/+0
2018-06-05centos: use DELOREAN repo directly on all architecturesMarcin Juszkiewicz1-15/+0
CentOS 7.5 added 'contentdir' variable to yum package manager. We handle it already in Kolla. RDO team started using it in DELOREAN repo file so we can use it directly on all architectures. Change-Id: I59fa4d3fdbd0d0e2ed52c2725684c0033451e232
2018-06-04Merge "do not set contentdir to 'centos' on 'rhel'"Zuul1-4/+7
2018-06-04Merge "Bump Ubuntu base image to 18.04"Zuul3-28/+13
2018-06-04do not set contentdir to 'centos' on 'rhel'Thierry Vignaud1-4/+7
commit ec5daaaa634351d24706e605c2c6726be402d35b wrongly did this for rhel too Change-Id: I202ea5341f8db315b90367cbdef5c7b26567738b
2018-05-31Install sensu from centos-opstoolsMartin André2-7/+0
This should help improve stability overall, in exchange for slightly older package version. Cap all the sensu plugins to their known major version that works with the ruby interpreter shipped with the current version of rhel/centos/oraclelinux -- currently ruby 2.0. All sensu plugins use semantic versioning so we're assured they don't introduce breaking changes in the capped major version. Change-Id: Ic5ca679c40da3e466433b0e04f762d2bbffbf156 Closes-Bug: #1774123
2018-05-26Bump Ubuntu base image to 18.04Jeffrey Zhang3-28/+13
Ubuntu 18.04 has been released. We need upgrade to it this cycle. Changes made in this patch - Bump ubuntu repo from xenial to bionic. Some repos do not have bionic packages, so still using xenial repos. - Drop mariadb, percona and nfs-ganesha repo, because these packages are already provided by Ubuntu official repo. - Since qdrouterd does not have bionic repo and xenial packages does not work on Ubuntu bionic, just add it into ignore image list. - Use python-rtslib-fb and targetcli-fb rather than python-rtslib and targetcli - use xen-utils package name rather than with package version one. - Seems unsigned repo won't work on Ubuntu bionic, stop using infra mirrored unsigned repo in gate building job. Needed-By: https://review.openstack.org/568728 Implement blueprint: ubuntu-bionic Change-Id: I4e3b0ca669cfbf6316bf591f2d8428fa1a0d6182
2018-05-25base: import Linaro ERP 18.06 repo keyMarcin Juszkiewicz1-0/+1
Change-Id: I7d85c3bfd21f6f2bed631a7817507595d4bbe521
2018-05-17base: drop not needed APT keyMarcin Juszkiewicz1-1/+0
Change-Id: I94dba206614ee353cdbb6cf1d44716d4c94e55ab
2018-05-15Merge "elasticsearch: enable for Debian"Zuul1-0/+3
2018-05-15elasticsearch: enable for DebianMarcin Juszkiewicz1-0/+3
Change-Id: Ife92f910ccf76fdef48f81e09e0abde0d09b9a1a
2018-05-14base/debian: use Linaro ERP 18.06 repositoryMarcin Juszkiewicz1-6/+3
At Linaro we are working on new release (based on Debian/stretch). All packages used by Kolla got moved to release repo. Change-Id: Id9aab125b2e5c7e66b4befadb435c697d8b2e553
2018-05-13base: set $contentdir for CentOSMarcin Juszkiewicz1-0/+9
CentOS recently started syncing alternate arch repos to mirrors. And to make it easier to play with centos-* packages idea of 'contentdir' appeared. https://lists.centos.org/pipermail/centos-devel/2018-March/016542.html Change-Id: Ieb26c0aa65ba3ec1a45a33f87f670e5ecb782f82
2018-05-10Merge "base/nova-compute: install udev/systemd to satisfy dependencies"Zuul1-0/+5
2018-05-10base: bump centos-release-qemu-ev for oraclelinuxMarcin Juszkiewicz1-1/+1
Change-Id: I0456040255bb9aa9091f1fb35e7d6960b8a36f9a
2018-05-08base/nova-compute: install udev/systemd to satisfy dependenciesMarcin Juszkiewicz1-0/+5
For Debian we use 'stretch-backports' image due to requirements of some images. That means that we also have systemd from backports. This breaks 'open-iscsi' (base) and 'python-guestfs' (nova-compute) installation. Solution is to install 'udev' and 'systemd' in proper versions. INFO:kolla.common.utils.base:Some packages could not be installed. This may mean that you have INFO:kolla.common.utils.base:requested an impossible situation or if you are using the unstable INFO:kolla.common.utils.base:distribution that some required packages have not yet been created INFO:kolla.common.utils.base:or been moved out of Incoming. INFO:kolla.common.utils.base:The following information may help to resolve the situation: INFO:kolla.common.utils.base:The following packages have unmet dependencies: INFO:kolla.common.utils.base: open-iscsi : Depends: udev but it is not going to be installed INFO:kolla.common.utils.base:E: Unable to correct problems, you have held broken packages. INFO:kolla.common.utils.nova-compute: python-guestfs : Depends: libguestfs0 (= 1:1.34.6-2) but it is not going to be installed INFO:kolla.common.utils.nova-compute:E: Unable to correct problems, you have held broken packages. Closes-bug: #1769850 Change-Id: I4865c279d665cf34fc150794c01368a1602319f0
2018-05-03Add Grafana repository for arm64Jorge Niedbalski2-0/+4
Official ARM support as part of the release process of grafana is on development [0]. For now, the closest official repositories are the ones from fg2it repository, which is also part of the developers working on the support, so we are adding it to the sources for now until the official support is done. [0] https://github.com/grafana/grafana-docker/issues/117 Bug: #1768585 Signed-off-by: Jorge Niedbalski <jorge.niedbalski@linaro.org> Change-Id: Iba004f99c0ac92cb660e405c5ac9c61dc7fa81e2
2018-04-25Remove EPEL for RDO of RHELMinho Ban1-4/+6
Since Ocata, it has been recommended to disable EPEL when using RDO because of breaking backward compatibility. https://docs.openstack.org/ocata/install-guide-rdo/environment-packages.html There seems to be no special reason to use EPEL in case of RHEL. Change-Id: Iadc351dac518c03163811aab4dfeee7ad0457687 Signed-off-by: Minho Ban <mhban@samsung.com>
2018-04-03Update base image with latest security fixesMartin André1-3/+6
This ensures freshly built kolla images include the latest security fixes for severity Important and above. This was suggested by Jon Schlueter and based on the code available at https://github.com/brianwcook/happywebserver/blob/master/Dockerfile#L27 Change-Id: Ib14f326a335d9519fb888f5486950275985a788c
2018-03-29Pin dh-python to earlier version to fix ubuntu gateMartin André1-0/+4
Let's pin the package until the dh-python from ubuntu-cloud-archive is fixed. Change-Id: I59f827bc7eb27a30f5d5f06628b3be535fcfabcc Related-Bug: #1759796
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 20:44:45 +0000