aboutsummaryrefslogtreecommitdiff
path: root/docker/base
AgeCommit message (Collapse)AuthorFilesLines
2026-07-06Migrate to pyproject.tomlMichal Nasiadka24-1507/+0
[tool.setuptools.data-files] does not support recursive directory installation. The old setup.cfg [files] worked because PBR's FilesConfig.expand_globs() used os.walk() to expand docker/*, but this hook is not triggered by the pbr.build PEP-517 backend. Move docker/ into kolla/ and use [tool.setuptools.package-data] instead. Update kolla_worker._get_images_dir() to check the kolla package directory first so both editable and regular installs work. Change-Id: I4fc452c03740ef22ebbb4e8d0d86c4f4783e2d09 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-02set_configs: Add support for creating files and setting permsMichal Arbet1-6/+43
Change-Id: I74a6d05007488b69fa040c40d01a07afae369794 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/989850 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io>
2026-07-02Merge "Fix parsing of permissions with special bits"Zuul1-5/+14
2026-07-01Fix parsing of permissions with special bitsMichal Arbet1-5/+14
kolla_set_configs currently fails to parse permissions such as 2775 because only legacy values like 0755 are converted to Python octal notation. Accept standard UNIX permission notation for permissions with special mode bits such as SGID, SUID, and sticky bit. Change-Id: I5937a17b0d70f9c1db4b2617854d0180c37fe2c0 Closes-Bug: #2154269 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/989850 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io>
2026-06-29Merge "kolla-build: fix build-date LABEL invalidating Docker layer cache"Zuul1-1/+1
2026-06-24kolla-build: fix build-date LABEL invalidating Docker layer cacheMichal Nasiadka1-1/+1
The build-date label was rendered into a LABEL instruction on line 3 of every Dockerfile template, immediately after FROM. Because Docker invalidates the cache for a changed instruction and all subsequent layers, a date change caused a full rebuild of every image on each new calendar day, even when nothing else had changed. Fix this by removing build-date from the Dockerfile templates and applying it as a --label argument at build time via image.labels. Labels passed on the build command line are not part of the Dockerfile cache key, so the date is still recorded in the image metadata without affecting layer caching. Change-Id: I8ef0d85bab1a999a4d09f7cbf0c088ca00fdcf77 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-17Add YAML support to kolla_set_configs enginePiotr Milewski2-8/+31
Following the PTG agreement, this commit extends the container configuration engine (set_configs.py) to support YAML format while maintaining backward compatibility with JSON. - Integrated 'yaml' library as a universal parser for both JSON and YAML formats (YAML is a superset of JSON) - Updated 'load_config' to search for 'config.json', 'config.yaml' - Added 'python3-yaml' (Debian) and 'python3-pyyaml' (RHEL) as required base packages in Dockerfile.j2 This change improves configuration readability and allows for easier maintenance while ensuring no breakage for existing JSON-based deployments. Change-Id: Icfb52b8f94e1036d5952b160c5921348d1427fda Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2026-05-08Remove influxdb from repos.yamlMichal Nasiadka1-1/+0
It was ommitted in the original influxdb removal patch [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/973051 Change-Id: Ie28d1cc615cc09f013438285b4dcbc2dbab0f4b5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-06Drop apache installation outside of httpd container22.0.0.0rc1Michal Nasiadka2-53/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986483 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/986352 Change-Id: Ia66dde09bbbad2a5a9e67a8c642f3223ca38be43 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-05set_configs: Add support for creating directories and setting permsMichal Nasiadka1-0/+22
Change-Id: Id63c035fafaa68a9004c65161c5a3a3ad5544f02 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-04-28Bump OVN to 26.03 in Rocky Linux 10 imagesBartosz Bezak1-1/+1
Change-Id: I3f0dab4b7d612d3e3f3057c1db8c36e3905cec75 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-04-03Merge "add venv path check when set dev mode"Zuul1-1/+3
2026-03-24Bump OVN to 25.09 in Rocky Linux 10 imagesPierre Riteau1-1/+1
This matches the version used by Ubuntu images since Flamingo [1][2]. Debian Trixie still uses 25.03 [3]. Support for 25.03 has ended on 7 March, 2026 [4] while 25.09 is supported until 5 September, 2026 [5]. [1] https://openstack-ci-reports.ubuntu.com/reports/cloud-archive/flamingo_versions.html [2] https://openstack-ci-reports.ubuntu.com/reports/cloud-archive/gazpacho_versions.html [3] https://packages.debian.org/source/trixie/ovn [4] https://www.ovn.org/en/releases/25.03/ [5] https://www.ovn.org/en/releases/25.09/ Change-Id: I323ea4e7dabecfcf20fa890e028eeb1c3766be0b Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2026-02-06[release] Use UCA GazpachoBartosz Bezak2-2/+2
Change-Id: Iee851c09e63817cd03b780163392517bf35cdfef Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2026-01-09Update repo GPG key for influxdata.Michael Still1-1/+1
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com>
2025-12-16Switch to Debian TrixieMichal Nasiadka2-3/+3
Change-Id: Ib7f551d4a7c6ffe95786853d6899e704de4747b8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-16debian: Switch to deb822Michal Nasiadka7-45/+65
Change-Id: I8156e2c2a57d820afdee0b76cd5a050ad682fb38 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-26rocky: Remove EPEL hack - 10.1 is outMichal Nasiadka1-5/+0
Change-Id: I60de8ef452adad4a9b0d974a2678264b91eb6e3b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-18Transition to the new rabbitmq Debian package archives.Michael Still1-1/+1
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com>
2025-10-09Update Fluentd from v5 LTS to v6 LTSPiotr Milewski1-1/+1
Fluent Package v5 LTS will reach end of support at the end of 2025. Fluent Package v6 LTS will be supported until at least the end of 2027. This change updates the apt repository configuration and package version to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL. No changes to existing Fluentd configuration files are required. Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-06Merge "debian: Use {{ openstack_release_codename }} for extrepo"Zuul1-1/+1
2025-10-02Add support for rpm to repos.yamlMichal Nasiadka12-150/+1
Add the ability to configure repositories in the same way as we do Debuntu ones - via repos.yaml. Removes .repo files from base - since these are not needed there anymore. gpgcheck = 1 is default in docker/base/dnf.conf Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01Move to Rocky Linux 10Michal Nasiadka2-35/+6
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-23debian: Use {{ openstack_release_codename }} for extrepoMichal Nasiadka1-1/+1
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-02Use versioned Erlang 27 repo on aarch64Bartosz Bezak1-2/+2
Fedora COPR build system cannot handle storing multiple package versions in one repo. Change-Id: I3ff95aa75f1f1cccfa40f3ab7f216cb221a6af29 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-29Remove RDO/DeloreanMichal Nasiadka1-14/+5
RDO has staffing problems and has decided to only support SLURP releases - let's drop reliance on that repository. Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-25Merge "[release] Use Flamingo Ubuntu Cloud Archive"Zuul2-2/+2
2025-08-25[release] Use Flamingo Ubuntu Cloud ArchiveBartosz Bezak2-2/+2
Change-Id: I92f3095b2d51bd6ac7ff48b0c7d79852eccc9803 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-18Influxdb: use stable RHEL repoBartosz Bezak1-3/+2
Switch the RHEL repo to the stable channel as per [1]. Use new GPG. Telegraf arm64 builds are enabled again, as binaries exists. [1] https://repos.influxdata.com/stable/x86_64/ Change-Id: Ie4f6f15404f6965df51f3214506ae9f8bb9b61e7 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-08-12Revert "mariadb: pin to 10.11.13"Michal Nasiadka1-1/+1
This reverts commit e478adcbe63d81faa44bc09f72461fd6a7fcdf94. Reason for revert: mariabackup fixed Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087 Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07mariadb: pin to 10.11.13Pierre Riteau1-1/+1
Closes-Bug: #2119954 Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-07-25change erlang arm64 repo to rhel basedBartosz Bezak1-2/+2
centos stream diverged too much nothing provides libcrypto.so.3(OPENSSL_3.4.0)(64bit) needed by erlang-26.2.5.14-1.el9.aarch64 Change-Id: I3a0aa82d0903b341156c2fce68393cc4031e7728 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-18[base/rhel] Disable docker-ce repository in base fileGrzegorz Koper1-1/+1
Enabling repo should be handled by enable_extra_repos macro Closes-bug: #2117249 Change-Id: I92af980a4fd63540297b6bde0d52b2dfd02f72ce Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul6-16/+27
2025-07-16Move to CentOS Stream 10Michal Nasiadka6-16/+27
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-19Fix kolla-set-configs --check to detect state mismatchMichal Arbet1-0/+54
If a configuration file is tracked in the state file but no longer appears in config.json, it should either be restored or removed. This patch introduces a new exception StateMismatch and updates execute_config_check() to detect such cases. If any destination path is present in the defaults state but missing from config.json, we now raise StateMismatch. A dedicated unit test has been added to verify this behavior. Closes-Bug: #2114173 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io> Change-Id: I6e0b4aaa5722990e3ac647578023f474db3d4381
2025-06-12add venv path check when set dev modezhengzongwei1-1/+3
Closes-Bug: #2113874 Change-Id: I71003e0d454deaf75f8e2ad2080077a1118af12c
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski2-11/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet2-3/+3
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30debian: Use Epoxy extrepoMichal Nasiadka1-1/+1
Change-Id: I1ba004df309667460aa152928f789aaf6be6051f
2025-05-30[base] Ensure full control over APT sources for UbuntuMichal Arbet2-4/+2
Ubuntu images were occasionally failing to build due to unavailability or slowness of the official Ubuntu security repositories. Although Kolla uses `mirror://` URLs to leverage Ubuntu mirror infrastructure, the original `/etc/apt/sources.list.d/ubuntu.sources` file was still present, causing the system to fallback to default sources. This commit aligns Ubuntu behavior with Debian by explicitly removing the distro `.sources` file and relying solely on the sources configured by Kolla. This ensures consistent and reproducible builds both in CI and on local environments. Closes-Bug: #2112140 Change-Id: I00bcb30662bb12ed8711b28a64ef1941dcce893a
2025-05-15Revert "mariadb: pin to 10.11.11"Michal Nasiadka1-1/+1
This reverts commit 535b2f270faf24cfa30b9aa1a896a62c5090f1aa. Reason for revert: 10.11.12 is revoked upstream Change-Id: I0a8cdc232e5b46cb47e4a3e1b0af7b2402103690
2025-05-07mariadb: pin to 10.11.11Michal Nasiadka1-1/+1
Temporarily disable upgrade jobs to get epoxy rc1 branched this week. Closes-Bug: #2110122 Change-Id: If301b9ebd7d0dc38bea4d60467e8e80a7a49825d
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul2-0/+8
2025-03-27Merge "Change Bifrost Python upper-constraints source"Zuul1-1/+0
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka2-0/+8
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-03-17debian: Use Dalmatian extrepo releaseMichal Nasiadka1-1/+1
Change-Id: I954106dc32b4c08604d5c40e00fe53e5bb18b266
2025-02-25[release] Use UCA EpoxyGrzegorz Koper2-2/+2
Change-Id: I6c15cf0fd7b8f1cc3339936c58ad8a8581cfc570
2025-02-05Change Bifrost Python upper-constraints sourceSeunghun Lee1-1/+0
Users can override the upper-constraints.txt by setting the source of openstack-base in kolla-build.conf. However, bifrost-base Dockerfile so far doesn't pass overridden upper-constraints file to Bifrost install playbook resulting the playbook not acknowledging it and just use upstream one. This change sets the source of Bifrost upper-constraints to use upper-constraints of openstack-base for consistency among all Kolla images With this, change the environment variable UPPER_CONSTRAINTS_FILE is only affecting kolla-toolbox image. Therefore, moved UPPER_CONSTRATINS_FILE variable example to the ``kolla_toolbox_pip_conf`` block of kolla-toolbox Dockerfile. Additionally, updated 'Python packages build options' section of documentation to represent latest method of changing Python package related options (including this change). Change-Id: I0a9c782ca1177ef84e4323cb1e5bfac0fb3f383c
2025-01-02Merge "Time mismatch in /etc/localtime and /etc/timezone"Zuul1-1/+3
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 20:19:09 +0000