summaryrefslogtreecommitdiff
path: root/docker/base
AgeCommit message (Collapse)AuthorFilesLines
2021-08-19Merge "[release] Use UCA Xena"Zuul2-2/+2
2021-08-11[release] Use UCA XenaPierre Riteau2-2/+2
Change-Id: I06d4cb37735aa6eb71d5e836e0050490c401b3a0
2021-08-05Config: Set default home to /var/lib/{user}Michal Arbet1-1/+1
This patch is setting users home dirs to /var/lib/{user}. This is the usual default but it's good to be explicit. Change-Id: Idda2ff4a5fea56e4e17a9dbf05141572671b6afc
2021-08-05base/deb: bump 'system' groups limit beyond Kolla onesMichal Arbet1-3/+7
Pacemaker complains that group 'haclient' already exists during installation and is not 'system group'. So let bump range for 'system' groups to make it happier. Our images do not have normal groups so it should not affect. Partial-Bug: #1934753 Change-Id: I4a79815f4e19d82fa77341672cd26d2282800f6a
2021-08-05Config: allow to set group for userMarcin Juszkiewicz1-1/+1
According to recent IRC discussions is could be useful for haclient. Partial-Bug: #1934753 Change-Id: I670fa84476e35e55cbed2d22e48836ed5e28495f
2021-07-28drop leftovers of RHEL supportMarcin Juszkiewicz2-20/+2
As a project we never built RHEL based images so support for them was not tested. Change-Id: I27dfe34ade088228d71f6857ec4f3ab28ee63915
2021-07-02Merge "Improve offline build scenario."Zuul1-11/+4
2021-06-17Improve offline build scenario.Gaël THEROND (Fl1nt)1-11/+4
* Use distribution based dumb-init package. Change-Id: I75927b6016bdb7577fbff354632bdab6407f359c Related-Bug: #19311980
2021-06-15Merge "Pin td-agent to 4.0.* to fix missing logs"Zuul1-0/+5
2021-06-15Pin td-agent to 4.0.* to fix missing logsDoug Szumski1-0/+5
The recent inclusion of Fluentd 1.12.x in Centos/Ubuntu packages causes a significant number of logs to fail to appear in the Elasticsearch or Monasca output plugins. The logs appear to sit in a local buffer, and are only flushed when Fluentd is restarted. The same issue persists in the most recent release (1.13.0), so for now we pin the td-agent package to 4.0.* which should restrict Fluentd to the 1.11.x release where we don't see this issue. Backport to Victoria. Change-Id: Iefcdd3100b7e3c5320bc5f1286a18251bdeab885 Closes-Bug: #1930867
2021-06-10Enable Debian updates repoRadosław Piliszek1-0/+3
Backport below Wallaby switching bullseye to buster. Closes-Bug: #1931544 Change-Id: I8460a4159c8da8ae0b856867e068d30fbffb4d34
2021-05-27Merge "ubuntu: unpin OVS"Zuul1-4/+0
2021-05-24ubuntu: unpin OVSMichał Nasiadka1-4/+0
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/792352 Change-Id: I7ed0202dfa644f7e85161b2ebaa999069fc1dcc2
2021-05-17centos: clean up repo enable/disable/keysMarcin Juszkiewicz1-8/+2
- install all 'centos-release-*' packages we need - disable all repos in one place - do not import CentOS keys - they are trusted by default Change-Id: I97308c74406d2af0e39b77eddef2693554381ab6
2021-05-11Drop ppc64le supportMarcin Juszkiewicz2-48/+0
We do not test support for ppc64le on CI or other systems. In previous cycles it was used by TripleO and now they have own way. Change-Id: Ibd955869a6f9485dfa4d08a8ad2f4b28b7d59c15
2021-05-08centos: do not install CentOS Rabbitmq repo twice on AArch64Marcin Juszkiewicz1-4/+0
Change-Id: I320d0795ce11ca00398cec6183ed140d31d3fd80
2021-05-07Merge "[release] Use UCA Wallaby"Zuul4-3/+7
2021-05-07[release] Use UCA WallabyMarcin Juszkiewicz4-3/+7
openvswitch has been pinned to 2.13.1 due to upgrade issues with 2.15.0 Change-Id: I031128d38e32c23147ad70e429b9aff66df3b8da
2021-05-06base: check for compatible distro using just shMarcin Juszkiewicz1-11/+6
We allow users to use own image as base one and then we check is it proper distribution version one. And this check is done in different way for CentOS and different for Debian/Ubuntu systems. This patchset uses PRETTY_NAME from /etc/os-release for check. And it is done before anything gets installed so if wrong distribution is used then build process breaks as soon as possible. Change-Id: I22db3cd4cb608332261824626e3b8768821b8dd0
2021-04-30Install RabbitMQ repo key on Ubuntu and DebianRadosław Piliszek1-1/+4
It was missed previously. CI did not detect it because it ignores apt security issues. That gets fixed in Ic5abc4b87fd76f87aba383abf43e95ba70629fcb Change-Id: I11256c674c42e35496146ff64fee1e8e04c30d2c
2021-04-28Merge "Pin erlang"Zuul1-0/+4
2021-04-26move to Debian 'bullseye'Marcin Juszkiewicz3-76/+16
Bullseye is now in hard freeze cycle and goes for release. https://release.debian.org/bullseye/freeze_policy.html Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: I543965a2741cebfa759576a4c75669a7bacd4208
2021-04-26Pin erlangRadosław Piliszek1-0/+4
Now that we run without erlang pinned by the repository itself, let's pin it on our side. Change-Id: Ifa491b102ad0db7f6dc645ca552d83b53bcf3b46
2021-04-22[TrivialFix] Remove unused aarch64 repo mentionsRadosław Piliszek2-6/+0
Change-Id: Ic9ae2202492de7c99b812f10669f07000609c551
2021-04-21rabbitmq: Move to packagecloudMichal Nasiadka4-10/+9
bintray is being shut down 1st of May 2021, rabbitmq docs direct users to packagecloud - so let's move. Change-Id: I499251d13ca77aea2215f8a879b7bb8dd51f1c9f
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-1/+11
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
2021-04-08Merge "base: configure curl before first use"Zuul1-1/+3
2021-04-07base: configure curl before first useMarcin Juszkiewicz1-1/+3
We want to have all uses of curl behave the same so we ship config file for it in all images. So do it at start of image so 'base' makes use of config too. Change-Id: I95aa64f0b292cd020574dbedd320ef90529cc7a4
2021-04-06base: we already install sudo for Debian/UbuntuMarcin Juszkiewicz1-3/+0
Change-Id: I50e5355bd7dd96a5eeaa004c5fc230d1cb8e8fd2
2021-03-26Merge "base: Add lsof for healthcheck_socket"Zuul1-0/+2
2021-03-25Merge "base: print release version in case of running unsupported one"Zuul1-2/+2
2021-03-25Merge "rabbitmq: bump Erlang requirements to v23 in Debian"Zuul1-2/+2
2021-03-24base: Add lsof for healthcheck_socketMichał Nasiadka1-0/+2
healthcheck_socket script requires lsof to check pids of processes using that socket - that's needed for octavia-driver-agent healthchecks in Kolla-Ansible. Change-Id: I0f14c0f67fd81f13c58f231f800829ad759cc54c
2021-03-24rabbitmq: bump Erlang requirements to v23 in DebianMarcin Juszkiewicz1-2/+2
Current rabbitmq requires erlang v22.3+ while we had v22.1 on aarch64. On x86-64 we use upstream repo so have both v22 and v23. On AArch64 we use Linaro backports repo so have v23.2 Change-Id: I21c3a0e423235301269d0a5b212d0ce6970ab88f
2021-03-23Debian: install newer firmware for qemu/aarch64Marcin Juszkiewicz1-0/+5
Nova looks into /usr/share/qemu/firmware/ directory. We need 2020.05 version of firmware package for it. ERROR: nova.exception.InternalError: Failed to locate firmware descriptor files Change-Id: I546bcf910e886eb75ece62f6be382fe1187efb32
2021-03-10switch to CentOS 8 StreamMarcin Juszkiewicz1-1/+5
We use official CentOS 8 Stream image as a base. So far Stream does not have own SIG repos RDO Wallaby packages will be built against Stream Kolla CI jobs are renamed to centos8s. Kolla-Ansible ones will follow in later patch. Change-Id: Ibb23c9d0caf115fcbba7bd322ecebe8d80b6821a
2021-03-05Upgrade from ELK6 to ELK7 FOSS releaseDoug Szumski1-3/+3
Upgrade to the latest ELK OSS release. Due to the licensing change, this effectively pins us to 7.10.x which is supported until 2022-05-11 [1]. This patch also takes advantage of the ARM artifacts which have been kindly provided since the 7.8.0 release [2]. [1] https://www.elastic.co/support/eol [2] https://www.elastic.co/blog/elasticsearch-on-arm Change-Id: Icfa3db5788b25f70ee75411dbaf20d8d4a6a734b
2021-02-15base: print release version in case of running unsupported oneMarcin Juszkiewicz1-2/+2
User may provide own base image but it needs to be supported one. If it is not then we print info and error out. So provide user with info which release is present in their image. Change-Id: I0d8417fdeb2f02138d03cc57bd3b7b95bc43fc8f
2021-02-15Merge "Make kolla_set_configs open files in binary mode"Zuul1-1/+1
2021-02-10Make kolla_set_configs open files in binary modeRadosław Piliszek1-1/+1
This fixes comparisons when files are not Unicode-encoded. A relevant unit test is included. It can be used as a base for other _cmp_file method unit tests if the need arises. Change-Id: Ic638516eb92d24ad247a7866fd1b5e2ac0400388 Closes-Bug: #1913952
2021-02-06Debian: use libvirt 7.0.0 from Linaro OBS repositoryMarcin Juszkiewicz1-7/+2
Nova requires libvirt 6.0.0 or newer in Wallaby. So I backported 7.0.0 from Debian 'testing'. AArch64 and x86-64 are covered. Change-Id: Ia678cd43b5ce53aee528674280f674c596a278ff
2021-01-25base: drop Linaro OBS key for CentOS and UbuntuMarcin Juszkiewicz1-11/+0
Debian still needs it but it is enabled for all architectures. Change-Id: I6a3ba599af3deedd450b4ffff6b86a0c04628340
2021-01-21base: Debian has QEMU 5.2 now so update pinningMarcin Juszkiewicz1-2/+2
Change-Id: I4371daf7b28c8a057364d17e2e47f6e22665447c
2020-12-17Merge "centos: do not enable PowerTools repo in base"Zuul1-1/+0
2020-12-16Merge "Add daxio for nvdimm scenario"Zuul1-1/+1
2020-12-15Add daxio for nvdimm scenarioMartin Schuppert1-1/+1
nova-compute uses daxio to cleanup vpmem backend device on instance delete. If the daxio binary is missing in the nova-compute container instance delete fails. daxio is provided in centos via daxio, in ubuntu via the pmdk-tools package. Change-Id: Ifb5948653565e2ae902783762e20e33527020efe Closes-Bug: 1907124
2020-12-11centos: do not enable PowerTools repo in baseMarcin Juszkiewicz1-1/+0
This repo is only needed for source openstack-base. Change-Id: I835c18424153f8529a37fc78e16d2becacb71263
2020-12-09Support CentOS 8.3abraden1-1/+1
Backport this until Train. CentOS 8.3 renamed system repos. [1] This caused failures when disabling and enabling. More details in the referenced bug report. Notice CentOS 8.2 and below will no longer work. [1] https://wiki.centos.org/Manuals/ReleaseNotes/CentOS8.2011#Yum_repo_file_and_repoid_changes Change-Id: I2d67b3ed7b7c521bc755ec9a87365c9962a9eeff Closes-Bug: #1907213 Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com> Depends-On: https://review.opendev.org/766211
2020-12-02Unify curl optionsMichał Nasiadka2-2/+4
Currently we use couple of curl options throughout Dockerfiles, this change adds all common options to curlrc (-sSLf) and removes usage of those in Dockerfiles. Change-Id: I46b77978926fc2b578a68d1aaa944b2198af0685
2020-11-23base: fix QEMU dependencies for Debian/aarch64Marcin Juszkiewicz1-0/+5
Change-Id: I2c82c6269b2c357b0815ea29bc6a7c322f84dac9