aboutsummaryrefslogtreecommitdiff
path: root/docker/base
AgeCommit message (Collapse)AuthorFilesLines
2025-08-18Influxdb: use stable RHEL repoBartosz Bezak1-3/+2
Switch the RHEL repo to the stable channel as per [1]. Use new GPG. Telegraf arm64 builds are enabled again, as binaries exists. [1] https://repos.influxdata.com/stable/x86_64/ Change-Id: Ie4f6f15404f6965df51f3214506ae9f8bb9b61e7 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-12Revert "mariadb: pin to 10.11.13"Michal Nasiadka1-1/+1
This reverts commit e478adcbe63d81faa44bc09f72461fd6a7fcdf94. Reason for revert: mariabackup fixed Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087 Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07mariadb: pin to 10.11.13Pierre Riteau1-1/+1
Closes-Bug: #2119954 Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-07-25change erlang arm64 repo to rhel basedBartosz Bezak1-2/+2
centos stream diverged too much nothing provides libcrypto.so.3(OPENSSL_3.4.0)(64bit) needed by erlang-26.2.5.14-1.el9.aarch64 Change-Id: I3a0aa82d0903b341156c2fce68393cc4031e7728 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-18[base/rhel] Disable docker-ce repository in base fileGrzegorz Koper1-1/+1
Enabling repo should be handled by enable_extra_repos macro Closes-bug: #2117249 Change-Id: I92af980a4fd63540297b6bde0d52b2dfd02f72ce Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul6-16/+27
2025-07-16Move to CentOS Stream 10Michal Nasiadka6-16/+27
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-19Fix kolla-set-configs --check to detect state mismatchMichal Arbet1-0/+54
If a configuration file is tracked in the state file but no longer appears in config.json, it should either be restored or removed. This patch introduces a new exception StateMismatch and updates execute_config_check() to detect such cases. If any destination path is present in the defaults state but missing from config.json, we now raise StateMismatch. A dedicated unit test has been added to verify this behavior. Closes-Bug: #2114173 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io> Change-Id: I6e0b4aaa5722990e3ac647578023f474db3d4381
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski2-11/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet2-3/+3
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30debian: Use Epoxy extrepoMichal Nasiadka1-1/+1
Change-Id: I1ba004df309667460aa152928f789aaf6be6051f
2025-05-30[base] Ensure full control over APT sources for UbuntuMichal Arbet2-4/+2
Ubuntu images were occasionally failing to build due to unavailability or slowness of the official Ubuntu security repositories. Although Kolla uses `mirror://` URLs to leverage Ubuntu mirror infrastructure, the original `/etc/apt/sources.list.d/ubuntu.sources` file was still present, causing the system to fallback to default sources. This commit aligns Ubuntu behavior with Debian by explicitly removing the distro `.sources` file and relying solely on the sources configured by Kolla. This ensures consistent and reproducible builds both in CI and on local environments. Closes-Bug: #2112140 Change-Id: I00bcb30662bb12ed8711b28a64ef1941dcce893a
2025-05-15Revert "mariadb: pin to 10.11.11"Michal Nasiadka1-1/+1
This reverts commit 535b2f270faf24cfa30b9aa1a896a62c5090f1aa. Reason for revert: 10.11.12 is revoked upstream Change-Id: I0a8cdc232e5b46cb47e4a3e1b0af7b2402103690
2025-05-07mariadb: pin to 10.11.11Michal Nasiadka1-1/+1
Temporarily disable upgrade jobs to get epoxy rc1 branched this week. Closes-Bug: #2110122 Change-Id: If301b9ebd7d0dc38bea4d60467e8e80a7a49825d
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul2-0/+8
2025-03-27Merge "Change Bifrost Python upper-constraints source"Zuul1-1/+0
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka2-0/+8
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-03-17debian: Use Dalmatian extrepo releaseMichal Nasiadka1-1/+1
Change-Id: I954106dc32b4c08604d5c40e00fe53e5bb18b266
2025-02-25[release] Use UCA EpoxyGrzegorz Koper2-2/+2
Change-Id: I6c15cf0fd7b8f1cc3339936c58ad8a8581cfc570
2025-02-05Change Bifrost Python upper-constraints sourceSeunghun Lee1-1/+0
Users can override the upper-constraints.txt by setting the source of openstack-base in kolla-build.conf. However, bifrost-base Dockerfile so far doesn't pass overridden upper-constraints file to Bifrost install playbook resulting the playbook not acknowledging it and just use upstream one. This change sets the source of Bifrost upper-constraints to use upper-constraints of openstack-base for consistency among all Kolla images With this, change the environment variable UPPER_CONSTRAINTS_FILE is only affecting kolla-toolbox image. Therefore, moved UPPER_CONSTRATINS_FILE variable example to the ``kolla_toolbox_pip_conf`` block of kolla-toolbox Dockerfile. Additionally, updated 'Python packages build options' section of documentation to represent latest method of changing Python package related options (including this change). Change-Id: I0a9c782ca1177ef84e4323cb1e5bfac0fb3f383c
2025-01-02Merge "Time mismatch in /etc/localtime and /etc/timezone"Zuul1-1/+3
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul3-18/+14
(Dalmatian)""
2024-12-09Time mismatch in /etc/localtime and /etc/timezonePiotr Milewski1-1/+3
Python3-pip installs the dependent package tzdata and blocks the mount of the /etc/localtime file in docker. After deleting the symbolic link docker correctly mounts the external localtime file. Applies only to ubuntu 24.04, in previous versions of ubuntu there was no such problem Closes-Bug: #2091161 Change-Id: I733a50b5ca455cfa4b248dc324500d78c17c817b
2024-12-02Change copy-cacerts behaviourRoman Krček1-19/+40
So far, the certificates were not part of config.json files for containers. With future patches that will remove container restarts based on triggers from config and service-copy-cert, it is important that all files that change during config are specified in config.json so that kolla-set-configs --check can detect those changes and based on that restart the container. This patch provides prerequisite for future patch in kolla-ansible. Comments from kevko: The script also takes into account whether review [1] is merged or not, ensuring that it will function correctly in both cases thanks to review [2], because using the state file, we can effectively verify whether the config.json that copies CA certs to /var/lib/kolla/share is being used or not. If we didn’t handle it this way, we would have to rely on checking whether the directory /var/lib/kolla/share exists or some another magic, which is insufficient because various states and combinations of Kolla image and Kolla-Ansible versions could result in certificates always being copied. This method provides a clear and definitive distinction. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/924651 [2] https://review.opendev.org/c/openstack/kolla/+/915440 Change-Id: I5120f1874f25a9ca8326e6db8b12dee4c81feb56 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/924651
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka3-18/+14
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-11-15Add mechanism for patching files in containersMichal Arbet2-3/+63
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-11-06Fix handling configs in base imageMichal Arbet1-0/+151
This commit restructures the handling of configuration files in set_configs.py, introducing functions for managing default configuration files first. Closes-Bug: #2060855 Change-Id: If91e0330dc149143c82d2183b8ddf6fa9f68d80e
2024-11-05Enhance logging format for better readabilityMichal Arbet1-1/+5
Added timestamp with milliseconds, log level, and custom date format to improve clarity and make logs more useful for debugging. Change-Id: Ice2d601eddb54bbb0e7e3be6f03ba6db58256c1f
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka3-14/+18
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul2-3/+3
2024-10-03aarch64: fix name of rabbitmq copr repoBartosz Bezak1-1/+1
it should be the same as in repos.yaml Change-Id: Ieb413f7a4bd1989d7f29309368b6b218d1395e0b
2024-10-02Merge "erlang/aarch64: Move to openstack-kolla owned COPR"Zuul3-12/+12
2024-10-02erlang/aarch64: Move to openstack-kolla owned COPRMichal Nasiadka3-12/+12
Change-Id: I219418411470bdeae9af84277f5150a623c05e69
2024-10-01Bump proxysql to 2.7.xMichal Arbet2-3/+3
This patch bump proxysql 2.6.x to 2.7.x Change-Id: I6e726d8ebf9dbc6d019dd72d6d0be9d9957a3f22
2024-09-30Switch to Ubuntu 24.04 LTSMichal Nasiadka2-10/+10
Add setuptools because Python3.12 dropped distutils Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/925581 Change-Id: Ie12c43dc1de122c203edc28181366457ccd67834
2024-09-30Added systemd-standalone-sysusers package for DebuntuMichal Arbet1-0/+1
This package provides a standalone sysusers binary with minimal dependencies, designed for use in non-systemd environments. This package simply ensures that all packages that want to install systemd as dependency will have to settle for this one because the systemd package breaks systemd-standalone-sysusers, as it is an alternative. [1] https://packages.debian.org/bookworm/systemd-standalone-sysusers [2] https://packages.ubuntu.com/noble/systemd-standalone-sysusers Change-Id: I3ba85069c265844bd2f8b5e6d2b14f32e4898cfd
2024-09-26dev-mode: Run kolla_install_projects using sudoMichal Nasiadka2-1/+4
Since packages are installed using root during image build - we need to use sudo when updating those packages when using dev-mode. Change-Id: Idf14e334d50abeb1719563b1733af0b8425b3b55
2024-09-23Merge "Switch to Dynamic Python Version Detection"Zuul1-1/+0
2024-09-19Switch to Dynamic Python Version DetectionMichal Arbet1-1/+0
This commit removes the hardcoded KOLLA_DISTRO_PYTHON_VERSION and replaces it with dynamic Python version detection during container images build. Dockerfiles and scripts now use general python3 references, simplifying maintenance and ensuring compatibility with future Python versions. Test cases relying on distro_python_version were also cleaned up. Change-Id: I891749598247a5e951ed4a873b16acfd0566f59c
2024-09-16Fix state checking via kolla_set_configsMichal Arbet1-0/+14
Kolla checks the status of its configurations using kolla_set_configs --check. However, this doesn't work for the command block in the config.json file. This means that if only the command value changes, but not the config_files block, which is common practice in Kolla-Ansible btw, the container will not report the changes. This is undesirable and important to fix, especially considering the planned rework of notifiers in Kolla-Ansible [1]. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/773243/14 Closes-Bug: #2080861 Change-Id: I2a290da38ea34b05ce3da8fb8b39b6252bf2da47
2024-09-12rabbitmq: Switch to Cloudsmith mirrorsMatt Crees2-4/+10
PackageCloud is discontinued as of August 18th [1]. Also corrects the versions docs for RabbitMQ and Erlang. Use new RMQ Cloudsmith repo URLs, these now use *.rabbitmq.com domains [2]. 1. https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates#packagecloud-will-be-discontinued-on-aug-18th-2024 2. https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates#mirrors-now-use-rabbitmqcom-domains Change-Id: I2cce3dd2540c878878ff0aae80ee5a7e0f455da7
2024-09-04Refactor dev modeRoman Krček3-1/+20
Provides mechanism for future work to fix bug where when package file manifest changes, the changes were not reflected in to devmode-enabled container. It changes the strategy of installing projects in dev mode in containers. Instead of bind mounting the project's git repository to the venv of the container, the repository is bind mounted to /dev-mode/<project_name> from which the it is installed using pip on every startup of the container using kolla_install_projects script. Related-bug: #1814515 Change-Id: Ia1bdff87cba73587a03124ab78a56b21c6176373 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com>
2024-08-21Merge "Add exclude for permissions in kolla config.json file"Zuul1-2/+14
2024-08-21Add exclude for permissions in kolla config.json fileMinSun1-2/+14
When using recursive mode to set permissions for a directory as defined in kolla config.json, all the subdirectories and files will receive the same permissions. This change adds the option to exclude specific files or directories - either a name or a regular expression can be used. Closes-Bug: #1931294 Closes-Bug: #1972168 Co-Authored-By: Jakub Darmach <jakub@stackhpc.com> Change-Id: If2f39736e2af34cd91d0976051ff66f06e96ab42
2024-08-12Configure Apache services to use correct localeMaksim Malchuk1-0/+10
Closes-Bug: #2076453 Change-Id: I6af9baf09a19a7dbcaf98585870aa44ff79398d3 Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2024-05-06Debian: use caracal reposBartosz Bezak1-1/+1
Change-Id: Id1c028e0650c1fd3aa4c0a7b311a61b26057179c
2024-04-16Move apt_prefs pins to respective imagesMichal Nasiadka2-16/+0
Change-Id: I9eb51e079fee1322bcaaf9d481cd7890aeb77696
2024-04-16Revert "CI/Master only: pin opensearch{-dashboards}"Michal Nasiadka2-14/+0
This reverts commit 19a004e0a500ea4839fa1e089e1c50c953cec3b3. Reason for revert: Fixed Change-Id: I5491adef46fe0cec013a597cb05018d8d7e862f0
2024-04-12CI/Master only: pin opensearch{-dashboards}Sven Kieske2-0/+14
pin opensearch and opensearch-dashboards to 2.12. for now Closes-Bug: #2060668 Related-Bug: #2060306 Change-Id: I3df4823d78474d94e138ff73f0f577bd247bdad0 Signed-off-by: Sven Kieske <kieske@osism.tech>
2024-03-26Merge "Bump proxysql to 2.6.x"Zuul2-3/+3
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 18:15:58 +0000