summaryrefslogtreecommitdiff
path: root/docker/neutron/neutron-base
AgeCommit message (Collapse)AuthorFilesLines
2023-03-23neutron: Add iproute-tcMichal Nasiadka1-0/+1
Closes-Bug: #2000782 Change-Id: I5cf944c509f23d430665de458cbbdb2fd31db7bb (cherry picked from commit d7d43bed84dff0c394a28730fef593bdfbb064f2)
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek1-1/+0
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-09-30Add RockyLinux 9 supportMichal Nasiadka1-1/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz1-18/+20
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-04-21flatten images a bitMarcin Juszkiewicz1-6/+5
As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-11Adjust permissions on _extend_start files.Tim Shearer1-1/+1
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-09docker: drop binary partsMarcin Juszkiewicz1-77/+38
Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
2022-03-01Revert "neutron: fix build in stable branches"Michal Nasiadka1-1/+0
This reverts commit 360d335e94246d7095672c5aa92b59afa380a059. Reason for revert: I don't think that's still needed. Change-Id: I67adef1762d36f23b84ab8a2297e1f3385082b8a
2021-10-29neutron: Use update-alternatives --display instead of --queryMichal Nasiadka1-1/+2
--query is not supported before update-alternatives 1.15 and CentOS uses 1.13 Closes-Bug: #1936947 Change-Id: I78da7eb2b6b5eae2b04fd95b24615bd4a572a1d6
2021-10-04Remove neutron api-paste.ini from old locationPierre Riteau1-14/+2
We have been configuring neutron to use /etc/neutron/api-paste.ini for more than a month now. Remove this file from its old location before Xena is released. Stop creating /usr/share/neutron which is now unused. Change-Id: Ic90cd8e3065fa629d5ad67abaf7c193fd845259a
2021-08-12[release] Use RDO master Delorean packagesPierre Riteau1-0/+4
CentOS binary packages for Xena have moved Neutron's api-paste.ini file to /etc/neutron [1]. Make this file available at the old location [2] for compatiblity with kolla-ansible, until the configuration is modified to use the new location. [1] https://review.rdoproject.org/r/c/openstack/neutron-distgit/+/34845 [2] /usr/share/neutron/api-paste.ini Change-Id: I2295884ef3b4c3bf4b087599322b0c5761e7b775
2021-04-27neutron: Remove vmware-nsx and networking-mlx from binaryMichał Nasiadka1-3/+0
Those plugins have been already removed from source images, this change removes them from binary. Change-Id: If21a21296489c1f243bb46f2595ff94d999bd686
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-0/+1
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
2020-11-04neutron: Fix update-alternatives on CentOSMichal Nasiadka2-5/+14
Change-Id: I151420d3036410dd5ce6d90907d72dd3c20643b5 Closes-Bug: #1884778
2020-10-05Be strict about errors in startRadosław Piliszek1-0/+5
Make start.sh run with pipefail and nounset to avoid common errors in the start scripts and detect them early. Httpd code had to be patched to allow it to pass on Debuntu. Also fix the two missed applications of httpd to make sure all its path are covered. And also fix Horizon's ENABLE_ZAQAR - K-A does not use Zaqar. Yet another - Horizon's settings_bundle. :-) Finally, fix Neutron for Debuntu (KOLLA_LEGACY_IPTABLES). Change-Id: I39b8d78f6758df1f92b8b0d2c06ea99b038b843b Depends-On: https://review.opendev.org/711923
2020-08-25Clean up the stale FIXED messagezhoulinhui1-3/+0
python-vmware-nsx is not installed anywhere, we don't need the FIXED message thi PS to clean it up Change-Id: I1b05c03002e142c7b0f26808ad423b569140a7bc
2020-06-18Remove deployment of FWaaSAlfredo Moralejo1-2/+0
FWaaS is being retired upstream [1][2] in V cycle. [1] https://review.opendev.org/#/c/735838/ Change-Id: I45679c8596844780565644e52034bd3de0915ff4
2020-06-01Revert "[to-revert] Pin ovsdbapp in neutron to 1.1.0"Radosław Piliszek1-2/+0
This reverts commit 83ef520d640783b7745368ab1654aec59afa6461. As planned. Change-Id: I75a17bab92c9c43c4429fe4283cc63d530c99bef
2020-06-01[to-revert] Pin ovsdbapp in neutron to 1.1.0Radosław Piliszek1-0/+2
This fixes the related bug for us while we wait for common release. Change-Id: I93276b2dc53e729f918fb3e680dd78a6013c109e Related-Bug: #1881424
2020-04-15Remove support for CentOS 7Marcin Juszkiewicz1-23/+2
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images so there is no need for checking which Python version (2.x or 3.x) is used inside of containers. We also no longer have to support yum as a value for distro_package_manager. Partially-Implements: blueprint centos-rhel-8 Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
2020-03-13neutron-base: drop python3-networking-ovnMarcin Juszkiewicz1-3/+0
This code is now part of neutron, as part of ML2/OVS convergence with OVN work [1]. [1]: https://blueprints.launchpad.net/neutron/+spec/neutron-ovn-merge Change-Id: I704d231ead35cf94a712a5bccdd7a427c46077c7
2020-03-01Add block labels to all DockerfilesChristian Berendt1-0/+2
Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
2020-01-30Merge "CentOS 8: Update packages in images"Zuul1-1/+10
2020-01-29CentOS 8: Update packages in imagesMark Goddard1-1/+10
* Some further changes for python2 vs python3 packages * Allow rabbitmq 3.7.*, since a newer erlang is available * Switch from qemu-img-ev to qemu-img on CentOS 8 * bridge-utils no longer available on CentOS 8 * libvirt-daemon-driver-lxc no longer available on CentOS 8 * Mark some more images buildable for CentOS 8 Change-Id: Iaf5b68ff6d944ae730ca0b1d5832172c106a6c08 Partially-Implements: blueprint centos-rhel-8 Partially-Implements: blueprint centos-rhel-python-3
2020-01-10neutron: fix build in stable branchesMarcin Juszkiewicz1-0/+1
When [1] was committed, neutron stopped building for Train. Analogous patch is proposed to other stable branches. This patch removes neutron from upper-constraints. Kolla master is affected directly because we build Train for CentOS 7 atm. 1. https://review.opendev.org/#/c/697370/ Change-Id: I944e8e42fef1d359d767cbc6e1c13371ed753f31
2020-01-08Add OVN bits to neutron-baseMichal Nasiadka1-3/+6
Currently neutron-server-ovn container does not run db setup for networking-ovn subproject when bootstrapping - since it uses extend_start from neutron-server (where networking-ovn is not installed). Since OVN is being added as in-tree driver to Neutron and there is no rationale behind supporting separate container images for neutron-server-ovn and neutron-metadata-agent-ovn, hile networking-ovn driver uses around 1-2MB of space - this change adds networking-ovn installation to neutron-base image and deprecates neutron-server-ovn and neutron-metadata-agent-ovn images. Change-Id: Ib2dbdd7e7d34f56985b7a5b2494c3b89034688cb
2019-12-12Add Networking-MLNX to Neutron-Base packagesHamdy Khader1-0/+3
The package is required for infiniband deployment to be installed on containers: neutron-server, neutron-dhcp-agent and neutron-l3-agent. Change-Id: I017b65c2032648fa0ac7126d4a06cd98cb7c33a0
2019-11-29drop *_existing_user_fix macrosMarcin Juszkiewicz1-6/+0
Commit 109706aa8b26f6f915e1cadae89de8135c3b68bf bumped 'system' users beyond range used by Kolla. So Debian/Ubuntu does not complain that system users created by packages exist already on package install. Change-Id: I9bf4b240839d46088ac668f26cf065dd5e3775c2
2019-10-12Neutron: add support to use legacy iptablesJan Vondra2-0/+15
Setting legacy iptables for host system kernels not supporting iptables-nft. Change-Id: I3b17bfdbc68a9a227bb22dc05a02ed6da607a114
2019-09-29Neutron: fwaas should be installed also in DebianViktor Michalek1-10/+4
Change-Id: I3cbb64bc13bca6508dbc334fcec9214ca4c32185
2019-06-15Merge "Remove Neutron LBaaS support"Zuul1-2/+0
2019-06-07Remove Neutron LBaaS supportCarlos Goncalves1-2/+0
The project has been retired and there will be no Train release [1]. This patch removes Neutron LBaaS support in Kolla. [1] https://review.opendev.org/#/c/658494/ Depends-On: https://review.opendev.org/#/c/663875/ Change-Id: I99484c48ed09f7e015e134bdff1f298c359c6905
2019-06-07Merge "Debian/Ubuntu: more python3 packages for binary"Zuul1-2/+2
2019-06-06Debian/Ubuntu: more python3 packages for binaryMark Goddard1-2/+2
backport: Stein During the switch to Stein UCA, we did not switch all packages to python 3 for Debian/Ubuntu binary images. This change switches some more of those packages. Change-Id: I0bff21384d88ea678608392de2db1ba418c96665 Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
2019-06-06Debian/Ubuntu: move to Python 3 for source imagesMarcin Juszkiewicz1-1/+1
Commit 43b74ccc157c0b50138c3785ed91dab504895571 enabled use of Python 3 based packages but not switched to use Python 3. Some of images still contain Python 2. There are two reasons: - Ceph (ceph-common depends on Py2) - python3-ldappool on Ubuntu 18.04 In Ceph situation Py3 packages were added. For second one we can not do anything - Py2 dependency got dropped in Ubuntu 18.10 version. Removed neutron-server-plugin-networking-infoblox due to being not maintained. Once https://review.opendev.org/#/c/657578/ get merged someone may revert that part. Implements: blueprint debian-ubuntu-python3 Depends-on: Ie2a1077f7def0743f1403341985e2109aa490026 Change-Id: Ibfe0c2b8be98db56c61f74fb0247488ab3749ef4
2019-05-24Install iputils package in neutron containersSlawek Kaplonski1-0/+2
This package provides e.g. arping tool which is used by Neutron services. On e.g. RHEL7 it was probably installed as some dependency to other package but on RHEL8 it's missing which cause some errors e.g. in neutron_l3_agent container. Change-Id: I9c087164f32cb8a69d2155bc68b6f62233ad58c6 Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1713321
2019-03-12Add python3 packages for RHEL systemsAlex Schultz1-1/+13
RDO is currently working on python3 support for the next version of CentOS/RHEL based systems. This package uses the distro_python3 flag that was added as part of I4028991bad92c0e8e21066cc4173c06ce5eba393 to use the python3 specific package names. This change only adds python3 package names for RHEL systems. Conflicts-With: https://review.openstack.org/#/c/636457/ Change-Id: Iad6b70b433a0dd1b0f8ae6790fd280594517661a Related-Blueprint: python3-support
2019-02-28debian/ubuntu: make use of Python3 based packagesMarcin Juszkiewicz1-10/+4
Both Ubuntu Stein UCA and Debian 'buster' migrated their OpenStack packages to Python 3. Note that Debian 'buster' is not released yet and contains Rocky packages. Stein ones will be available later. Co-Authored-By: Lee Yarwood <lyarwood@redhat.com> Co-Authored-By: Eduardo Gonzalez <dabarren@gmail.com> Change-Id: I160f79cc57f54ec3eac857c5babd1a6e2656d228
2019-01-17Use base_package_typeAlex Schultz1-6/+6
This change updates the docker files to use base_package_type instead of doing specific distro checks for the rhel/deb generic cases. The base_distro is still available and is used when a specific distro needs a customization but if the differences are purely rpm vs deb, then the base_package_type can be used. Change-Id: I8d720bb185df65a0178061ccf20b1ab2265da2c5
2018-12-13Add neutron-rootwrap-daemon to neutron_sudoersGaëtan Trellu1-0/+1
There is no way to use neutron-rootwrap-daemon to improve Neutron rootwrap performance at scale with the current Neutron images. Using neutron-rootwrap on huge environment could have a performance impact on many actions and be the root cause of failure during instance creation. Operators should have the choice: - neutron-rootwrap - neutron-rootwrap-daemon Change-Id: I6c65cf6498364e670cc61419dc3a2c19f6fb412d Closes-Bug: #1808457
2018-11-06Merge "neutron-base: unify Debian/Ubuntu part"Zuul1-21/+17
2018-10-12neutron-base: remove bashismsChristian Berendt1-1/+1
Use [ instead of [[. This will solve the following issue: Change-Id: I1153a5146ca8b08dd1ad732b60d8d4bce8e060ab INFO:kolla.common.utils.neutron-base:/bin/sh: 1: [[: not found INFO:kolla.common.utils.neutron-base:/bin/sh: 1: [[: not found INFO:kolla.common.utils.neutron-base:/bin/sh: 1: [[: not found INFO:kolla.common.utils.neutron-base:/bin/sh: 1: [[: not found INFO:kolla.common.utils.neutron-base:/bin/sh: 1: [[: not found INFO:kolla.common.utils.neutron-base:/bin/sh: 1: [[: not found INFO:kolla.common.utils.neutron-base:
2018-10-10neutron-base: unify Debian/Ubuntu partMarcin Juszkiewicz1-21/+17
Change-Id: I13d75c3fafd2f1e26da6e85cacb7b84601096d8d
2018-08-21Fix the ubuntu binary gateJeffrey Zhang1-2/+4
1. openstack-dashboard package already configured the folders as expected. 2. UCA is not include python-vmware-nsx 13.0.0 package now. Change-Id: I7cb0c4d3d872333dadd2eecd7071e8f08c21a44d
2018-07-20Add networking-baremetal package to neutron-baseWill Miller1-0/+1
Change-Id: I032bfdbbb4890594a9ef43f9a5807a76ecd5d3ab
2018-07-10Stop using deprecated rpm package namesMartin André1-2/+2
These packages produce a warning during the installation, we should switch to their new names, usually to be specific about their use of python2. Change-Id: I0a80e822f64222d9a32aabd1fd834bcf794d6320
2018-05-04Merge "Create radvd container"Zuul1-0/+5
2018-04-20Create radvd containerBrian Haley1-0/+5
Also added radvd to neutron-base container since it's needed for IPv6. Change-Id: I27e2316b419f48dfb90b536a0835f00b39b28444
2018-03-08Migrate neutron-vpnaas-agent to neutron-l3-agentchenxing1-1/+6
Depends-On: I880ef5dad6723de06da5dd8a424f7158d65b5a35 Depends-On: I52efd29791a230df1ce7e3acde4b7184aec34150 Change-Id: I47cd8ba5a14da3c76d5b1eb0b4c0cf0c729eb2ff Partially-Implements: blueprint restructure-neutron-vpnaas
2017-11-09Add missing vmware libsPierre Hanselmann1-1/+4
Neutron and Cinder base images doesn't include the necessary vmware libs. If we enable vmware nsx (nsxv or dvs) we need those libraries to be available. Closes-Bug: #1730662 Change-Id: I94005728fbce8320d7cf9d3b746978d8c7634ed5
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 19:38:45 +0000