aboutsummaryrefslogtreecommitdiff
path: root/docker/neutron/neutron-base
AgeCommit message (Collapse)AuthorFilesLines
2026-07-06Migrate to pyproject.tomlMichal Nasiadka10-383/+0
[tool.setuptools.data-files] does not support recursive directory installation. The old setup.cfg [files] worked because PBR's FilesConfig.expand_globs() used os.walk() to expand docker/*, but this hook is not triggered by the pbr.build PEP-517 backend. Move docker/ into kolla/ and use [tool.setuptools.package-data] instead. Update kolla_worker._get_images_dir() to check the kolla package directory first so both editable and regular installs work. Change-Id: I4fc452c03740ef22ebbb4e8d0d86c4f4783e2d09 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-24kolla-build: fix build-date LABEL invalidating Docker layer cacheMichal Nasiadka1-1/+1
The build-date label was rendered into a LABEL instruction on line 3 of every Dockerfile template, immediately after FROM. Because Docker invalidates the cache for a changed instruction and all subsequent layers, a date change caused a full rebuild of every image on each new calendar day, even when nothing else had changed. Fix this by removing build-date from the Dockerfile templates and applying it as a --label argument at build time via image.labels. Labels passed on the build command line are not part of the Dockerfile cache key, so the date is still recorded in the image metadata without affecting layer caching. Change-Id: I8ef0d85bab1a999a4d09f7cbf0c088ca00fdcf77 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-05neutron: Remove networking-generic-switch from u-cMichal Nasiadka1-0/+1
networking-generic-switch was added to u-c [1] and it breaks our install scheme. Alternative is to remove networking-generic-switch from sources.py, but that would be a user facing change and if we would pursue that we would need to do the same for all neutron plugins. using u-c removal macro to preserve previous approach of installing n-g-s from a branch tarball compared to a pypi version [1]: https://review.opendev.org/c/openstack/requirements/+/964059 Change-Id: Ifcee01f9415e9b9de8138b55cd676873a99c86aa Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-09neutron: keepalived wrapper script does not rm containersMichal Nasiadka1-1/+1
keepalived wrapper script as the only one didn't have --rm in docker/podman invocation - so these didn't get deleted when stopped/crashed/etc. Closes-Bug: #2127170 Change-Id: I85ae37250ac4ef629b77ade04826a363e8047a91 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02Move repo enablement to respective rpm blocksMichal Nasiadka1-1/+3
Currently we are enabling repos irrespective of rpm/deb statement blocks and not failing in the method used if a repository is missing. Downside is - we might be producing one more layer, but it probably is a more logical approach. This is required for adding rpm support in repos.yaml that will also include failing on missing repositories. Change-Id: I5479c5c935760f00fe4cd307366f261deee3199f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-29Remove RDO/DeloreanMichal Nasiadka1-2/+2
RDO has staffing problems and has decided to only support SLURP releases - let's drop reliance on that repository. Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-05-05neutron: Add agents wrappers in the neutron-base imageMichal Nasiadka9-0/+239
These scripts have been based on TripleO version of the same feature. Unfortunately due to the fact that Neutron/python is stripping env vars when it's running dnsmasq/haproxy/etc processes - we need to do the ,,config'' handling in copy-wrappers script. Change-Id: I679ac66186d457ae53f89469fe22c5662089019a
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul1-1/+3
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka1-1/+3
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-02-06Install pycadf from pypi packageMichal Arbet1-1/+1
Previously, the `pycadf` package did not include configuration files, so they were manually installed from source. However, this was fixed in pycadf's upstream in [1], allowing us to rely on the package itself. Additionally, the `ceilometer_api_audit_map.conf` file has been removed, as it was dropped in pycadf's upstream commit here [2] [1] https://review.opendev.org/c/openstack/pycadf/+/936741 [2] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I022aa4c403f08385beb83b5d0c81f8abb42eb4a7
2024-11-15Add mechanism for patching files in containersMichal Arbet1-0/+2
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-01-17Fix openstack CADF audit maps and installationMichal Arbet1-0/+1
This patch fixes missing pycadf's audit maps for services and change the way how pycadf is installed. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/905858 Closes-Bug: #2047941 Change-Id: I9b43d1a9990ad8aa7381ea81b0f2d692967be949
2023-10-18Adds TAAS Neutron plugin to support OVS port mirrorsFelipeAFV1-1/+2
Related-Bug: #2022375 Depends-On: I7b48770709bd0fb9ea5072ce6c8673074c39ab2b Change-Id: I8afb1ccddaa527378b7fd833bd51fb9bb9c4c58c Signed-off-by: FelipeAFV <ffigueroa@whitestack.com>
2023-03-22neutron: Add iproute-tcMichal Nasiadka1-0/+1
Closes-Bug: #2000782 Change-Id: I5cf944c509f23d430665de458cbbdb2fd31db7bb
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek1-1/+0
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-09-30Add RockyLinux 9 supportMichal Nasiadka1-1/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz1-18/+20
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-04-21flatten images a bitMarcin Juszkiewicz1-6/+5
As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-11Adjust permissions on _extend_start files.Tim Shearer1-1/+1
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-09docker: drop binary partsMarcin Juszkiewicz1-77/+38
Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
2022-03-01Revert "neutron: fix build in stable branches"Michal Nasiadka1-1/+0
This reverts commit 360d335e94246d7095672c5aa92b59afa380a059. Reason for revert: I don't think that's still needed. Change-Id: I67adef1762d36f23b84ab8a2297e1f3385082b8a
2021-10-29neutron: Use update-alternatives --display instead of --queryMichal Nasiadka1-1/+2
--query is not supported before update-alternatives 1.15 and CentOS uses 1.13 Closes-Bug: #1936947 Change-Id: I78da7eb2b6b5eae2b04fd95b24615bd4a572a1d6
2021-10-04Remove neutron api-paste.ini from old locationPierre Riteau1-14/+2
We have been configuring neutron to use /etc/neutron/api-paste.ini for more than a month now. Remove this file from its old location before Xena is released. Stop creating /usr/share/neutron which is now unused. Change-Id: Ic90cd8e3065fa629d5ad67abaf7c193fd845259a
2021-08-12[release] Use RDO master Delorean packagesPierre Riteau1-0/+4
CentOS binary packages for Xena have moved Neutron's api-paste.ini file to /etc/neutron [1]. Make this file available at the old location [2] for compatiblity with kolla-ansible, until the configuration is modified to use the new location. [1] https://review.rdoproject.org/r/c/openstack/neutron-distgit/+/34845 [2] /usr/share/neutron/api-paste.ini Change-Id: I2295884ef3b4c3bf4b087599322b0c5761e7b775
2021-04-27neutron: Remove vmware-nsx and networking-mlx from binaryMichał Nasiadka1-3/+0
Those plugins have been already removed from source images, this change removes them from binary. Change-Id: If21a21296489c1f243bb46f2595ff94d999bd686
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-0/+1
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
2020-11-04neutron: Fix update-alternatives on CentOSMichal Nasiadka2-5/+14
Change-Id: I151420d3036410dd5ce6d90907d72dd3c20643b5 Closes-Bug: #1884778
2020-10-05Be strict about errors in startRadosław Piliszek1-0/+5
Make start.sh run with pipefail and nounset to avoid common errors in the start scripts and detect them early. Httpd code had to be patched to allow it to pass on Debuntu. Also fix the two missed applications of httpd to make sure all its path are covered. And also fix Horizon's ENABLE_ZAQAR - K-A does not use Zaqar. Yet another - Horizon's settings_bundle. :-) Finally, fix Neutron for Debuntu (KOLLA_LEGACY_IPTABLES). Change-Id: I39b8d78f6758df1f92b8b0d2c06ea99b038b843b Depends-On: https://review.opendev.org/711923
2020-08-25Clean up the stale FIXED messagezhoulinhui1-3/+0
python-vmware-nsx is not installed anywhere, we don't need the FIXED message thi PS to clean it up Change-Id: I1b05c03002e142c7b0f26808ad423b569140a7bc
2020-06-18Remove deployment of FWaaSAlfredo Moralejo1-2/+0
FWaaS is being retired upstream [1][2] in V cycle. [1] https://review.opendev.org/#/c/735838/ Change-Id: I45679c8596844780565644e52034bd3de0915ff4
2020-06-01Revert "[to-revert] Pin ovsdbapp in neutron to 1.1.0"Radosław Piliszek1-2/+0
This reverts commit 83ef520d640783b7745368ab1654aec59afa6461. As planned. Change-Id: I75a17bab92c9c43c4429fe4283cc63d530c99bef
2020-06-01[to-revert] Pin ovsdbapp in neutron to 1.1.0Radosław Piliszek1-0/+2
This fixes the related bug for us while we wait for common release. Change-Id: I93276b2dc53e729f918fb3e680dd78a6013c109e Related-Bug: #1881424
2020-04-15Remove support for CentOS 7Marcin Juszkiewicz1-23/+2
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images so there is no need for checking which Python version (2.x or 3.x) is used inside of containers. We also no longer have to support yum as a value for distro_package_manager. Partially-Implements: blueprint centos-rhel-8 Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
2020-03-13neutron-base: drop python3-networking-ovnMarcin Juszkiewicz1-3/+0
This code is now part of neutron, as part of ML2/OVS convergence with OVN work [1]. [1]: https://blueprints.launchpad.net/neutron/+spec/neutron-ovn-merge Change-Id: I704d231ead35cf94a712a5bccdd7a427c46077c7
2020-03-01Add block labels to all DockerfilesChristian Berendt1-0/+2
Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
2020-01-30Merge "CentOS 8: Update packages in images"Zuul1-1/+10
2020-01-29CentOS 8: Update packages in imagesMark Goddard1-1/+10
* Some further changes for python2 vs python3 packages * Allow rabbitmq 3.7.*, since a newer erlang is available * Switch from qemu-img-ev to qemu-img on CentOS 8 * bridge-utils no longer available on CentOS 8 * libvirt-daemon-driver-lxc no longer available on CentOS 8 * Mark some more images buildable for CentOS 8 Change-Id: Iaf5b68ff6d944ae730ca0b1d5832172c106a6c08 Partially-Implements: blueprint centos-rhel-8 Partially-Implements: blueprint centos-rhel-python-3
2020-01-10neutron: fix build in stable branchesMarcin Juszkiewicz1-0/+1
When [1] was committed, neutron stopped building for Train. Analogous patch is proposed to other stable branches. This patch removes neutron from upper-constraints. Kolla master is affected directly because we build Train for CentOS 7 atm. 1. https://review.opendev.org/#/c/697370/ Change-Id: I944e8e42fef1d359d767cbc6e1c13371ed753f31
2020-01-08Add OVN bits to neutron-baseMichal Nasiadka1-3/+6
Currently neutron-server-ovn container does not run db setup for networking-ovn subproject when bootstrapping - since it uses extend_start from neutron-server (where networking-ovn is not installed). Since OVN is being added as in-tree driver to Neutron and there is no rationale behind supporting separate container images for neutron-server-ovn and neutron-metadata-agent-ovn, hile networking-ovn driver uses around 1-2MB of space - this change adds networking-ovn installation to neutron-base image and deprecates neutron-server-ovn and neutron-metadata-agent-ovn images. Change-Id: Ib2dbdd7e7d34f56985b7a5b2494c3b89034688cb
2019-12-12Add Networking-MLNX to Neutron-Base packagesHamdy Khader1-0/+3
The package is required for infiniband deployment to be installed on containers: neutron-server, neutron-dhcp-agent and neutron-l3-agent. Change-Id: I017b65c2032648fa0ac7126d4a06cd98cb7c33a0
2019-11-29drop *_existing_user_fix macrosMarcin Juszkiewicz1-6/+0
Commit 109706aa8b26f6f915e1cadae89de8135c3b68bf bumped 'system' users beyond range used by Kolla. So Debian/Ubuntu does not complain that system users created by packages exist already on package install. Change-Id: I9bf4b240839d46088ac668f26cf065dd5e3775c2
2019-10-12Neutron: add support to use legacy iptablesJan Vondra2-0/+15
Setting legacy iptables for host system kernels not supporting iptables-nft. Change-Id: I3b17bfdbc68a9a227bb22dc05a02ed6da607a114
2019-09-29Neutron: fwaas should be installed also in DebianViktor Michalek1-10/+4
Change-Id: I3cbb64bc13bca6508dbc334fcec9214ca4c32185
2019-06-15Merge "Remove Neutron LBaaS support"Zuul1-2/+0
2019-06-07Remove Neutron LBaaS supportCarlos Goncalves1-2/+0
The project has been retired and there will be no Train release [1]. This patch removes Neutron LBaaS support in Kolla. [1] https://review.opendev.org/#/c/658494/ Depends-On: https://review.opendev.org/#/c/663875/ Change-Id: I99484c48ed09f7e015e134bdff1f298c359c6905
2019-06-07Merge "Debian/Ubuntu: more python3 packages for binary"Zuul1-2/+2
2019-06-06Debian/Ubuntu: more python3 packages for binaryMark Goddard1-2/+2
backport: Stein During the switch to Stein UCA, we did not switch all packages to python 3 for Debian/Ubuntu binary images. This change switches some more of those packages. Change-Id: I0bff21384d88ea678608392de2db1ba418c96665 Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
2019-06-06Debian/Ubuntu: move to Python 3 for source imagesMarcin Juszkiewicz1-1/+1
Commit 43b74ccc157c0b50138c3785ed91dab504895571 enabled use of Python 3 based packages but not switched to use Python 3. Some of images still contain Python 2. There are two reasons: - Ceph (ceph-common depends on Py2) - python3-ldappool on Ubuntu 18.04 In Ceph situation Py3 packages were added. For second one we can not do anything - Py2 dependency got dropped in Ubuntu 18.10 version. Removed neutron-server-plugin-networking-infoblox due to being not maintained. Once https://review.opendev.org/#/c/657578/ get merged someone may revert that part. Implements: blueprint debian-ubuntu-python3 Depends-on: Ie2a1077f7def0743f1403341985e2109aa490026 Change-Id: Ibfe0c2b8be98db56c61f74fb0247488ab3749ef4
2019-05-24Install iputils package in neutron containersSlawek Kaplonski1-0/+2
This package provides e.g. arping tool which is used by Neutron services. On e.g. RHEL7 it was probably installed as some dependency to other package but on RHEL8 it's missing which cause some errors e.g. in neutron_l3_agent container. Change-Id: I9c087164f32cb8a69d2155bc68b6f62233ad58c6 Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1713321
2019-03-12Add python3 packages for RHEL systemsAlex Schultz1-1/+13
RDO is currently working on python3 support for the next version of CentOS/RHEL based systems. This package uses the distro_python3 flag that was added as part of I4028991bad92c0e8e21066cc4173c06ce5eba393 to use the python3 specific package names. This change only adds python3 package names for RHEL systems. Conflicts-With: https://review.openstack.org/#/c/636457/ Change-Id: Iad6b70b433a0dd1b0f8ae6790fd280594517661a Related-Blueprint: python3-support
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 21:07:05 +0000