| Age | Commit message (Collapse) | Author | Files | Lines |
|
When built with the binary install type (at least on CentOS), Ironic
inspector fails to start and the container remains in a restarting
state. The log file shows that it is failing to execute iptables, and
analysis found that this was due to an incorrect rootwrap
configuration. The RDO ironic inspector RPM expects Ironic inspector
to be run as the ironic-inspector user, however Kolla uses the ironic
user. This means that neither of the packaged ironic nor
ironic-inspector sudoers configuration files works for us.
Kolla currently installs a sudoers file pointing to the rootwrap
script in the virtualenv of the source install, but of course this
only makes sense for source installs, and should not be installed for
binary installs.
This change adds a second sudoers file that will work for the binary
install type, and installs the correct sudoers file for the install
type.
Change-Id: I8ecd0b658b8df8f38ddf717fa9443d4dc2896984
Closes-Bug: #1624457
|
|
|
|
These packages are needed by ironic console.
Change-Id: Ieff5142935fb55cc9860d6cd4f195da095a01449
Closes-Bug: #1666131
|
|
1. Enable customization of pip packages in source
branch of most images
2. All pip packages install uniformly through
install-pip macro, user can easily customize his
own pip command (For example using a mirror)
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Change-Id: If09582039f690fa4136e8f33200d5da15e092da7
|
|
include_header and include_footer parameter is already removed, remove
them in all Dockerfiles.
Add missing footer block.
Change-Id: I90da03eb9f95a3827361d5f5ede65fde7d6be2b3
|
|
Change-Id: I7e3f5f7932d18565e7bc938128297acb8fd6f4f5
Partially-implements: blueprint ironic-pxe-ipxe-support
|
|
Co-Authored-By: Jeffrey Zhang <zhang.lei.fly@gmail.com>
Closes-Bug: #1650345
Change-Id: Id03619b4e26a0a77c2a39e2de21efd13be0e9200
|
|
This centralizes all user and group creation into a single source. This
will fix any current and furture uid/gid mismatches (such as with
nova-libvirt).
In the process, we also unify users between the distros in a standard
way. The users in the following containers change from thier defaults:
Ubuntu: _chrony user is now chrony
Ubuntu: memcache user is now memcached
All: qemu user is used for ownership and socket permissions
All uid and gid numbers are customizable via kolla-build.conf
Co-Authored-By: Kris Lindgren <klindgren@godaddy.com>
Change-Id: I120f26ab0683dc87d69727c3df8d4707e52a4543
Partially-Implements: blueprint static-uid-gid
|
|
Some projects that use Kolla docker containers (TripleO) run Ironic pxe under
httpd. This patch adds the httpd package so that it exists in the container
and can optionally by used via Docker entrypoints.
As many of these projects do not require the use of Apache (it is opt-in) at
this point not all deployment frameworks support the use of it so
the existing configuration defaults have been left as-is for now.
Change-Id: I4c3e44db6a1ffa7238006c27038ac0a67c8aa725
Partial-Blueprint: apache-packages-for-apis
|
|
Change-Id: I969a769cf349b130035b9136e570849782e9247a
Closes-Bug: #1642578
|
|
Closes-bug: #1616387
Change-Id: Id97f88b9baa3d48d33ce120962450a374282d044
|
|
Change-Id: If3f30f58eae31753d34e94d030d1f37d9a1e6c47
Closes-Bug: #1635128
|
|
Change-Id: Ie42f75d0779b8e2bd835e9cdc165e73751ce5172
Closes-bug: #1632840
|
|
|
|
On RedHat family distro, util-linux provides the hexdump. On Debian
family distro, bsdmainutils provides the hexdump.
Change-Id: If762f570639782ca477ae4697f354d88c992613b
Closes-Bug: #1627755
|
|
pxelinux.0 and chain.c32 files are provided by two
separate packages on xenial compared to 1 on trusty.
This change adds the required package to be installed
and new paths the files reside on xenial.
Change-Id: I48a3622f7257f4cbf994258f82ba91947aae3be4
Closes-bug: #1629337
|
|
* Mount system folder in ironic-conductor
* Add package need in ironic-conductor
* Fix the log path issue
* Add ironic sudoer in ironic-base
* Fix credential issue
* Do not start nova-compute when enable ironic
Closes-Bug: #1629334
Change-Id: If9d478c6513de37465403d458a88cf0da7ebd8a6
|
|
Change-Id: I5c153b367ef21eb76bc3fbe8bd724c71aa251f3c
Closes-bug: #1626539
|
|
* add ironic-inspector(-archive) source to docker image
* pip install from above source code
* move in-container config files to /etc/ironic-inspector
* add sudoers file to allow ironic-rootwrap
* copy rootwrap conf and filters from source repo
Change-Id: Ie3cce19810b9940d06bb636b28015160fea6ddfb
Closes-bug: #1624457
Closes-bug: #1624833
Closes-bug: #1624845
|
|
1.Change "ironic_base" to "ironic_inspector" in ironic-inspector Dockerfile
2.add {% block footer %}{% endblock %}
TrivialFix
Closes-Bug: #1625131
Change-Id: Ibd02676e91a9b00cb1a46e7d00eaa3ab2c6c6412
|
|
Add installation of ironic-inspector package
on binary ubuntu or via pip on any source type of installations.
Change-Id: I5946369b6424c32e0cbf00a6590d41eb85b1de18
Closes-bug: #1565936
|
|
Change needed to add header blocks to all Dockerfiles, similar to the
base.
Use case is to easily run something before packages are installed, e.g.
to COPY a local rpm in that can be added to the package list.
Change-Id: I1bbfdf0b762da0a392aa8bf47781315b45377bee
Closes-Bug: 1618969
|
|
This patchset contains customization of Dockerfile of Ironic
containers.
Change-Id: If6ffb741111127886f754ddebd17059174387fc8
Partially-implements: blueprint third-party-plugin-support
|
|
Change-Id: If4be00b937e14ec93443dcb7249cf17099d57cbe
Closes-Bug: #1569417
|
|
TrivialFix
Change-Id: I1f03d428c380dfdbde5ef33e7ea43cbf5e9154ce
|
|
Change-Id: I73fd2030f353f7daa35e71b62491cdf0b3fcf5cf
Partial-Bug:#1569417
|
|
Added missing package for qemu-img in centos container
Added pxelinux.0 in ironic-pxe in centos container
TrivialFix
Change-Id: I706284824f915caf974b1247520c3e4025c47f57
|
|
Closes-Bug: #1551052
Change-Id: Ic226287bbf1f1e8d5cc2e1d80ce2975448b1f95c
|
|
Because we use rootwrap in a venv we need to update the exec_dirs.
Without doing this *some* commands will break for various reasons that
I won't get into in this review in detail. But this is required for
neutron-l3-agent in a container + drop-root.
Change-Id: I1a09f7188fdd501b7ce251d9f2fb0e5b10222142
Partially-Implements: blueprint drop-root
|
|
PXE files should be copied after volume mount to avoid overwrite.
Change-Id: I023cc316e6873abd658478dfa05be839e44a80c7
Closes-bug: #1538164
|
|
map-file should not be overwriten by volume
TrivialFix
Change-Id: I57bf963fd4af8c010fda0c4504e83dc33f6e9162
|
|
Change-Id: I94ef03c11657d36261f3ddc63056422f84ec2c6a
Partially-Implements: blueprint binary-ubuntu
|
|
Change-Id: Ib6b095341c8d63b365d3575478b4dafa69720b63
Closes-Bug: #1534900
|
|
TrivialFix
Change-Id: Ib1923d8782699904cbc6a71d2f326d9c207d0005
|
|
Rely on packagers for managing dependencies.
openstack-ironic-common now pulls the required packages:
https://github.com/openstack-packages/ironic/blob/rpm-master/openstack-ironic.spec
TrivialFix
Change-Id: Ib1d18c4e50a8786c29bf88d9b661905eb8b657c5
|
|
|
|
/tftpboot directory should be writeable by ironic-conductor.
TrivialFix
Change-Id: I870a786d41a6feb8e0786b6e86a5caf1f9ceb079
|
|
There were some inconsistencies with pip install instructions
thoughout Kolla. We fix those here.
Additionally, we fix the virtualenv to properly use the site-packages
on the host if a library is not available in the venv.
Change-Id: Ib84d48e8826bb96060338b3fa0782620c98794a8
Related-Bug: #1524684
Closes-Bug: #1529434
|
|
TFTP server should runs as root user
Change-Id: I80064edf991d5f466a5711f1ab80ec8df43b785b
Closes-bug: 1528341
|
|
Use virtualenv for installation of OpenStack projects and
dependencies to avoid conflicts with Python libraries installed
by non-OpenStack binary packages.
Change-Id: I21ecd673b2e93335b1d3dd4e279e940c9d694c3c
Implements: blueprint virtualenv
|
|
ironic-conductor service requires qemu-img and ipmitool utils.
TrivialFix
Change-Id: I5489087031c9b209ead862a531ce4544e20265ee
|
|
Updates to ensure commands run in the ironic containers
are done as the 'ironic' user rather than root.
Change-Id: I491041ce02fb5dd3eb60c6ae9169f26d8a8919dd
Partially-Implements: blueprint drop-root
|
|
Change-Id: I5e167fc2e1363eb407016a059acc868e7cf73563
Closes-Bug:#1519409
|
|
Added new option in kolla-build.conf
Change-Id: I45fe51966bcb59ea19d112281ba3d5a1ba091a56
Closes-Bug:#1514304
|
|
Ironic config files should be palced to /etc/ironic/*
Closes-Bug: #1518433
Change-Id: Ic82dbb9a28ed3adb6bfca2d0f715da3a7bbc4698
|
|
We target 14.04 which has the package name 'syslinux'
>14.04 has the package name 'pxelinux'
TrivialFix
Backport: Liberty
Change-Id: Id0f4f503257d62d9ce45be5eb8f4faa766244d0a
|
|
TrivialFix
Related-Id: I9fbfa7ca442063db52c8b14586176ab994d2cf46
Change-Id: Ic1a7f311a323a3fed296ef2b76cd2dbde96053e2
|
|
See Iccb4e99f8e4b6659a19c1817d0f4c697824af25c for context.
Change-Id: I9fbfa7ca442063db52c8b14586176ab994d2cf46
Partial-Bug: #150530
|
|
Long story short, some kernels before 3.15 had an issue with using su
in a container when the network namespace was --net=host. The gate
has a 3.10 and a 3.13 kernel and has a problem with this. This changes
everything to use sudo
backport: liberty
Partially-Implements: blueprint functional-testing-gate
Change-Id: I4d79ccaa1cddffcc8393f64e7e1be2538efe33e5
|
|
The dockerfiles for each of these containers were hacked to force
install the most recent version of the package, even though the newer
version had a lower version number. Delorean has fixed the issue by
bumping the epoch, so the hack is no longer required.
backport: liberty
Change-Id: I8d9c071d84e53280d3cadfceb9034bb96f64f3a3
Closes-bug: #1503785
|