aboutsummaryrefslogtreecommitdiff
path: root/docker/base
AgeCommit message (Collapse)AuthorFilesLines
2021-03-26Merge "base: Add lsof for healthcheck_socket"Zuul1-0/+2
2021-03-25Merge "base: print release version in case of running unsupported one"Zuul1-2/+2
2021-03-25Merge "rabbitmq: bump Erlang requirements to v23 in Debian"Zuul1-2/+2
2021-03-24base: Add lsof for healthcheck_socketMichał Nasiadka1-0/+2
healthcheck_socket script requires lsof to check pids of processes using that socket - that's needed for octavia-driver-agent healthchecks in Kolla-Ansible. Change-Id: I0f14c0f67fd81f13c58f231f800829ad759cc54c
2021-03-24rabbitmq: bump Erlang requirements to v23 in DebianMarcin Juszkiewicz1-2/+2
Current rabbitmq requires erlang v22.3+ while we had v22.1 on aarch64. On x86-64 we use upstream repo so have both v22 and v23. On AArch64 we use Linaro backports repo so have v23.2 Change-Id: I21c3a0e423235301269d0a5b212d0ce6970ab88f
2021-03-23Debian: install newer firmware for qemu/aarch64Marcin Juszkiewicz1-0/+5
Nova looks into /usr/share/qemu/firmware/ directory. We need 2020.05 version of firmware package for it. ERROR: nova.exception.InternalError: Failed to locate firmware descriptor files Change-Id: I546bcf910e886eb75ece62f6be382fe1187efb32
2021-03-10switch to CentOS 8 StreamMarcin Juszkiewicz1-1/+5
We use official CentOS 8 Stream image as a base. So far Stream does not have own SIG repos RDO Wallaby packages will be built against Stream Kolla CI jobs are renamed to centos8s. Kolla-Ansible ones will follow in later patch. Change-Id: Ibb23c9d0caf115fcbba7bd322ecebe8d80b6821a
2021-03-05Upgrade from ELK6 to ELK7 FOSS releaseDoug Szumski1-3/+3
Upgrade to the latest ELK OSS release. Due to the licensing change, this effectively pins us to 7.10.x which is supported until 2022-05-11 [1]. This patch also takes advantage of the ARM artifacts which have been kindly provided since the 7.8.0 release [2]. [1] https://www.elastic.co/support/eol [2] https://www.elastic.co/blog/elasticsearch-on-arm Change-Id: Icfa3db5788b25f70ee75411dbaf20d8d4a6a734b
2021-02-15base: print release version in case of running unsupported oneMarcin Juszkiewicz1-2/+2
User may provide own base image but it needs to be supported one. If it is not then we print info and error out. So provide user with info which release is present in their image. Change-Id: I0d8417fdeb2f02138d03cc57bd3b7b95bc43fc8f
2021-02-15Merge "Make kolla_set_configs open files in binary mode"Zuul1-1/+1
2021-02-10Make kolla_set_configs open files in binary modeRadosław Piliszek1-1/+1
This fixes comparisons when files are not Unicode-encoded. A relevant unit test is included. It can be used as a base for other _cmp_file method unit tests if the need arises. Change-Id: Ic638516eb92d24ad247a7866fd1b5e2ac0400388 Closes-Bug: #1913952
2021-02-06Debian: use libvirt 7.0.0 from Linaro OBS repositoryMarcin Juszkiewicz1-7/+2
Nova requires libvirt 6.0.0 or newer in Wallaby. So I backported 7.0.0 from Debian 'testing'. AArch64 and x86-64 are covered. Change-Id: Ia678cd43b5ce53aee528674280f674c596a278ff
2021-01-25base: drop Linaro OBS key for CentOS and UbuntuMarcin Juszkiewicz1-11/+0
Debian still needs it but it is enabled for all architectures. Change-Id: I6a3ba599af3deedd450b4ffff6b86a0c04628340
2021-01-21base: Debian has QEMU 5.2 now so update pinningMarcin Juszkiewicz1-2/+2
Change-Id: I4371daf7b28c8a057364d17e2e47f6e22665447c
2020-12-17Merge "centos: do not enable PowerTools repo in base"Zuul1-1/+0
2020-12-16Merge "Add daxio for nvdimm scenario"Zuul1-1/+1
2020-12-15Add daxio for nvdimm scenarioMartin Schuppert1-1/+1
nova-compute uses daxio to cleanup vpmem backend device on instance delete. If the daxio binary is missing in the nova-compute container instance delete fails. daxio is provided in centos via daxio, in ubuntu via the pmdk-tools package. Change-Id: Ifb5948653565e2ae902783762e20e33527020efe Closes-Bug: 1907124
2020-12-11centos: do not enable PowerTools repo in baseMarcin Juszkiewicz1-1/+0
This repo is only needed for source openstack-base. Change-Id: I835c18424153f8529a37fc78e16d2becacb71263
2020-12-09Support CentOS 8.3abraden1-1/+1
Backport this until Train. CentOS 8.3 renamed system repos. [1] This caused failures when disabling and enabling. More details in the referenced bug report. Notice CentOS 8.2 and below will no longer work. [1] https://wiki.centos.org/Manuals/ReleaseNotes/CentOS8.2011#Yum_repo_file_and_repoid_changes Change-Id: I2d67b3ed7b7c521bc755ec9a87365c9962a9eeff Closes-Bug: #1907213 Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com> Depends-On: https://review.opendev.org/766211
2020-12-02Unify curl optionsMichał Nasiadka2-2/+4
Currently we use couple of curl options throughout Dockerfiles, this change adds all common options to curlrc (-sSLf) and removes usage of those in Dockerfiles. Change-Id: I46b77978926fc2b578a68d1aaa944b2198af0685
2020-11-23base: fix QEMU dependencies for Debian/aarch64Marcin Juszkiewicz1-0/+5
Change-Id: I2c82c6269b2c357b0815ea29bc6a7c322f84dac9
2020-10-23base: use Victoria repos for Debian/x86-64Marcin Juszkiewicz1-3/+3
Change-Id: Ie5ae119dcf31e05112405c8a307bcd2613d45de8
2020-10-05Be strict about errors in startRadosław Piliszek2-0/+6
Make start.sh run with pipefail and nounset to avoid common errors in the start scripts and detect them early. Httpd code had to be patched to allow it to pass on Debuntu. Also fix the two missed applications of httpd to make sure all its path are covered. And also fix Horizon's ENABLE_ZAQAR - K-A does not use Zaqar. Yet another - Horizon's settings_bundle. :-) Finally, fix Neutron for Debuntu (KOLLA_LEGACY_IPTABLES). Change-Id: I39b8d78f6758df1f92b8b0d2c06ea99b038b843b Depends-On: https://review.opendev.org/711923
2020-10-01Merge "Debian: use QEMU 5.0 from buster-backports"Zuul1-0/+5
2020-09-21create 'add_binary_source_envs' macro and use itMarcin Juszkiewicz1-2/+0
There is small subset of images where we need to know which install_type or install_metatype is used. So add them only there (and their children). Change-Id: Ib7d5e36b958d6c8daf2989df32e29fa24b46c62a Implements: blueprint infra-images
2020-09-17Improve pip install process for offline deployment.Gaël THEROND (Fl1nt)1-0/+2
* "Use distribution-provided pip" * "Use python's pip module invocation method" * "Install pip earlier in order to avoid multiple installation" * "Remove pip_version variable requirement and call" Change-Id: Id0e738044a1931f9d611a7281a48ea4a593f1cf1 Closes-bug: #1893204
2020-08-28Fix kolla_set_configs --check with a directoryMark Goddard1-5/+6
There are several issues with kolla_set_configs --check: 1. We calculate the destination path incorrectly when comparing a file in a directory, due to passing arguments to os.path.relpath in the wrong order 2. For directories that have not changed, we also attempt to compare them as files, which fails when they are open()ed. 3. If the config JSON does not have a config_files key, it fails with a KeyError. The first two issues affect the fluentd container, which specifies directories as the source, without using a glob. The third affects OVN containers. This patch fixes these issues. Closes-Bug: #1890567 Change-Id: I8921befe51da4282121443849177a7ca5ebe8822
2020-08-24Debian: use QEMU 5.0 from buster-backportsMarcin Juszkiewicz1-0/+5
This will allow us to make sure of all updates. 'qemu-kvm' got dropped in Debian Change-Id: If09a8188030baa284dd353b1c3f830d78c5091b7
2020-08-07ubuntu: move to 20.04 FocalMarcin Juszkiewicz3-26/+26
There is a time once every 2 years when ubuntu team releases new LTS release. And then UCA joins with binary packages for current OpenStack development cycle. It is this time for Ubuntu 20.04 'focal'. Depends-On: https://review.opendev.org/745156 Change-Id: I045aa6b4b4fd83fbe7d1fda89549f0ef1e88ec12
2020-07-22Merge "fluentd: migrate to td-agent 4 where possible"Zuul2-1/+2
2020-07-20fluentd: migrate to td-agent 4 where possibleMarcin Juszkiewicz2-1/+2
td-agent 4 got released for all distributions we support. For both x86-64 and aarch64 architectures. Change-Id: I86ecdc1ac45dfd76b94a34d1b837f7c0bc975dcd
2020-07-10Merge "Upgrade to Logstash 6"Zuul1-4/+1
2020-07-07Upgrade to Logstash 6Doug Szumski1-4/+1
Elasticsearch and Kibana 6 are used on all distros, but Logstash is still pinned at 2 which is not compatible. See the product compatibility matrix [1]. [1] https://www.elastic.co/support/matrix#matrix_compatibility Partial-Bug: #1884090 Change-Id: I1579e762bcfb07f0baa73507eb9955ae2f83c4ec
2020-07-07Remove opendaylight imageMichal Nasiadka3-10/+0
It has been deprecated in Ussuri cycle. Change-Id: I6d3174e8b52cb4d1f2eca4d85d506665dafe2406
2020-07-07Merge "Remove sensu images"Zuul1-3/+0
2020-07-06Drop systemd support from nsswitch.conf on RHEL-based distrosMichele Baldessari1-1/+2
A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we should remove the nss-systemd lookup from containers. The reasons for this are as follows: 1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 when this nss module is triggered it tries to talk to dbus. It triggers a bunch of selinux denials and it makes little sense to open all containers to talk to dbus. In particular, if a container is run as non-privileged and bind-mounts /run from the host, we will hit selinux denials like the following: type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus" 2) It just makes little sense in a kolla-world to have containers talk to dbus/systemd and it saves us some time when a lookup triggers the systemd module for whatever reason. Especially because the nss-systemd module does a few things which are not useful in a container (ensures that the root and nobody users and groups remain resolvable, SystemD's DynamicUser= feature, provide Lookup API via Varlink) The sed regex gives us the wanted results: $ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf --- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000 +++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000 @@ -53,9 +53,9 @@ # group: db files # In order of likelihood of use to accelerate lookup. -passwd: sss files systemd +passwd: sss files shadow: files sss -group: sss files systemd +group: sss files hosts: files dns myhostname services: files sss netgroup: sss Related-Bug: #1883849 Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673
2020-07-06Remove sensu imagesMarcin Juszkiewicz1-3/+0
They have been deprecated in Ussuri [1]. [1]: https://review.opendev.org/#/c/711636/ Change-Id: I0cfde46c29eedce77c70c1c677220814a801ff3a
2020-07-01Merge "CentOS/AArch64: RabbitMQ is back!"Zuul2-7/+4
2020-06-26Merge "Change lang package block order"Zuul1-13/+13
2020-06-23CentOS/AArch64: RabbitMQ is back!Marcin Juszkiewicz2-7/+4
CentOS 8.2 has Erlang and RabbitMQ available in 'messaging/rabbitmq-38' repository. We use it to grab Erlang while RabbitMQ comes from upstream (like on x86-64). Change-Id: I2559267d120081f2e5eabc9d966b019517a5ad5d
2020-06-17Merge "base/centos: take care of whitespaces"Zuul1-12/+9
2020-06-12Change lang package block orderGaël THEROND1-13/+13
Fix offline installation of language pack packages. Change-Id: I9f4a21bbf1c8383e21e59350206aba3424602270 Closes-bug: #1883233
2020-06-02Use CentOS official mirrors for Ceph packagesAlfredo Moralejo2-21/+2
It's still using temporary mirror in RDO infra, but now that packages are properly synced to CentOS mirrors, let's switch to use it. Change-Id: I913efffe6a1d8a0210b1158261c77d0d45ac3147
2020-05-17base/centos: take care of whitespacesMarcin Juszkiewicz1-12/+9
Let's get rid of this warning: Change-Id: I121e2ecb30ec6e8d1b6d88d9b921894438c3e094 INFO:kolla.common.utils.base:ESC[91m[WARNING]: Empty continuation line found in: INFO:kolla.common.utils.base: RUN dnf -y install centos-release-opstools epel-release dnf-plugins-core && dnf config-manager --enable PowerTools && dnf config-manager --disable centos-ceph-nautilus && dnf config-manager --disable centos-nfs-ganesha28 && dnf config-manager --disable influxdb && rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-OpsTools && dnf -y distro-sync --security --sec-severity=Important --sec-severity=Critical INFO:kolla.common.utils.base:[WARNING]: Empty continuation lines will become errors in a future release. INFO:kolla.common.utils.base:ESC[0m INFO:kolla.common.utils.base:Step 1/39 : FROM centos:8
2020-05-17CentOS: disable more reposMarcin Juszkiewicz2-1/+3
'messaging-rabbitmq' and 'opstools' are enabled by RDO delorean-deps.repo file 'influxdb' was also enabled Depends-On: https://review.opendev.org/728687 Change-Id: Ibb0a7edc9e5632c1b89a7d52601f55a223b49dfb
2020-04-29Debian: use Ussuri binary packagesMarcin Juszkiewicz3-4/+9
There is a repo with binary packages for Ussuri. Let us use them instead of Train ones. amd64 only Change-Id: I071eebc4f60094d881a68e201e8c3bb6e6742ff5
2020-04-17kibana/debian: use upstream package on all architecturesMarcin Juszkiewicz1-10/+0
Upstream kibana package ships x86_64 binaries of NodeJS. I usually repacked package without them to have something for other architectures. Instead let us install upstream. Then on non-x86 archs we add nodejs from distribution and remove x86-64 binaries. Change-Id: Ia9feac726a60250215b1bc78bf90dc68ac6f956a
2020-04-16Merge "CentOS 8: Switch last mentions of yum to dnf"Zuul1-0/+2
2020-04-16Merge "CentOS 8: enable elasticsearch and kibana images"Zuul1-5/+2
2020-04-15Merge "Remove support for CentOS 7"Zuul3-145/+45
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 07:59:05 +0000