summaryrefslogtreecommitdiff
path: root/docker/neutron
AgeCommit message (Collapse)AuthorFilesLines
2023-03-28neutron-mlnx-agent: pin pyzmq at 21.*Marcin Juszkiewicz1-2/+4
20.* fails to build so let us try version where upstream fixed packaging issues. Change-Id: I099b21872a12c2dccaba4065965d9227ee2e87bc (cherry picked from commit b2d5307a442994d1a9348926f0664bb94ef96248)
2023-03-23neutron: Add iproute-tcMichal Nasiadka1-0/+1
Closes-Bug: #2000782 Change-Id: I5cf944c509f23d430665de458cbbdb2fd31db7bb (cherry picked from commit d7d43bed84dff0c394a28730fef593bdfbb064f2)
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek1-1/+0
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-09-30Add RockyLinux 9 supportMichal Nasiadka1-1/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz1-18/+20
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-04-22adjust permissions on _extend_start files (part II)Marcin Juszkiewicz1-1/+1
Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760
2022-04-21flatten images a bitMarcin Juszkiewicz2-10/+10
As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-11Adjust permissions on _extend_start files.Tim Shearer1-1/+1
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-09docker: drop binary partsMarcin Juszkiewicz11-260/+67
Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
2022-03-01Revert "neutron: fix build in stable branches"Michal Nasiadka1-1/+0
This reverts commit 360d335e94246d7095672c5aa92b59afa380a059. Reason for revert: I don't think that's still needed. Change-Id: I67adef1762d36f23b84ab8a2297e1f3385082b8a
2021-11-02Merge "neutron-openvswitch-agent: openvswitch is already installed"Zuul1-4/+2
2021-11-01neutron-openvswitch-agent: openvswitch is already installedMarcin Juszkiewicz1-4/+2
We install openvswitch package in neutron-base image already so there is no need of repeating it. Change-Id: Id578cbc49c9a432414e5c758e0c853e59f79b039
2021-10-29neutron: Use update-alternatives --display instead of --queryMichal Nasiadka1-1/+2
--query is not supported before update-alternatives 1.15 and CentOS uses 1.13 Closes-Bug: #1936947 Change-Id: I78da7eb2b6b5eae2b04fd95b24615bd4a572a1d6
2021-10-04Remove neutron api-paste.ini from old locationPierre Riteau1-14/+2
We have been configuring neutron to use /etc/neutron/api-paste.ini for more than a month now. Remove this file from its old location before Xena is released. Stop creating /usr/share/neutron which is now unused. Change-Id: Ic90cd8e3065fa629d5ad67abaf7c193fd845259a
2021-08-23Merge "ironic-neutron-agent: enable for Debuntu binary"Zuul1-0/+1
2021-08-12[release] Use RDO master Delorean packagesPierre Riteau1-0/+4
CentOS binary packages for Xena have moved Neutron's api-paste.ini file to /etc/neutron [1]. Make this file available at the old location [2] for compatiblity with kolla-ansible, until the configuration is modified to use the new location. [1] https://review.rdoproject.org/r/c/openstack/neutron-distgit/+/34845 [2] /usr/share/neutron/api-paste.ini Change-Id: I2295884ef3b4c3bf4b087599322b0c5761e7b775
2021-08-12ironic-neutron-agent: enable for Debuntu binaryMark Goddard1-0/+1
Packages are available for focal and bullseye. Change-Id: I61623748d1149adb1b096adf2fffb5a902df3181
2021-04-27neutron: Remove vmware-nsx and networking-mlx from binaryMichał Nasiadka1-3/+0
Those plugins have been already removed from source images, this change removes them from binary. Change-Id: If21a21296489c1f243bb46f2595ff94d999bd686
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-0/+1
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
2021-03-23enable 'libvirt' repo for images with python*-libvirtMarcin Juszkiewicz1-0/+2
There are several images installing 'python3-libvirt' package. Which for Debian reside in 'libvirt' repo. So let's enable it where needed. Change-Id: I1c91d27f2578f5ca7c83c4747725b1d9371880b0
2021-03-01neutron-server: make it build againMarcin Juszkiewicz1-1/+1
1. stop pinning networking-hyperv Pike release was long time ago so maybe it is time to unpin it? commit 6dc8e978462fd08122133e273ae956721997d3af Author: Dan Ardelean <dardelean@cloudbasesolutions.com> Date: Mon Aug 28 12:56:25 2017 +0300 Change networking-hyperv version for Pike 2. stop install vmware-nsxlib as a plugin vmware-nsx is a plugin and we install it already vmware-nsxlib can be fetched from Pypi Solves: INFO:kolla.common.utils.neutron-server:The conflict is caused by: INFO:kolla.common.utils.neutron-server: The user requested vmware-nsxlib 15.0.8.dev129 (from /plugins/vmware-nsxlib-15.0.8.dev129) INFO:kolla.common.utils.neutron-server: vmware-nsx 15.0.1.dev424 depends on vmware-nsxlib>=17.0.0 Change-Id: I6ef344d463333e5cdc3a0850c8e068218779fdbd
2020-11-20Remove footer block from intermediate imagesMark Goddard1-0/+5
Only the final image in a hierarchy should have the footer block. neutron-infoblox-ipam-agent image still has two footers because it inherits from the neutron-server image. We set the user to root at the beginning of that Dockerfile, so that headers and footers have the right context. Change-Id: I95e5bb5583be2a76e289749e8adfc303a4e7197a
2020-11-04neutron: Fix update-alternatives on CentOSMichal Nasiadka2-5/+14
Change-Id: I151420d3036410dd5ce6d90907d72dd3c20643b5 Closes-Bug: #1884778
2020-10-05Be strict about errors in startRadosław Piliszek1-0/+5
Make start.sh run with pipefail and nounset to avoid common errors in the start scripts and detect them early. Httpd code had to be patched to allow it to pass on Debuntu. Also fix the two missed applications of httpd to make sure all its path are covered. And also fix Horizon's ENABLE_ZAQAR - K-A does not use Zaqar. Yet another - Horizon's settings_bundle. :-) Finally, fix Neutron for Debuntu (KOLLA_LEGACY_IPTABLES). Change-Id: I39b8d78f6758df1f92b8b0d2c06ea99b038b843b Depends-On: https://review.opendev.org/711923
2020-09-30Fix Neutron migrations orderRadosław Piliszek1-2/+2
It seems I mixed up the order when commenting/uncommenting. Neutron base has to go first. Change-Id: Ib2bf51d4c6e2a574b98671a699777cd8a9a22768
2020-09-23Restore Neutron migrationsRadosław Piliszek1-12/+10
For details see [1]. Note this will also be amended on the Kolla-Ansible side to squash [2] as well. [1] https://review.opendev.org/750075 [2] https://bugs.launchpad.net/kolla-ansible/+bug/1894380 Change-Id: Id47ea8a5ea5318a69cf6814162db2115b40c7e6f
2020-09-05Emergency fixes to pass CIRadosław Piliszek1-17/+14
1) makes bifrost unbuildable as it evolves rapidly at the moment 2) makes neutron bootstrap/upgrade only the core service [1] 1) will be reverted 2) will be made more flexible [1] https://bugs.launchpad.net/bgpvpn/+bug/1894056 Change-Id: I1eefcfceded985b5f61ee8d796f9d8994c9ee97c
2020-08-25Clean up the stale FIXED messagezhoulinhui1-3/+0
python-vmware-nsx is not installed anywhere, we don't need the FIXED message thi PS to clean it up Change-Id: I1b05c03002e142c7b0f26808ad423b569140a7bc
2020-07-27Merge "Remove neutron-server-ovn and neutron-ovn-metadata-agent images"Zuul2-26/+0
2020-07-23Remove neutron-server-ovn and neutron-ovn-metadata-agent imagesMichal Nasiadka2-26/+0
Those have been deprecated in previous cycle - see [1]. [1]: https://review.opendev.org/#/c/701074/ Change-Id: Ifde221e807df75d884a3f8cc4fc29eb0cb303472
2020-07-23Remove neutron-server-opendaylight imageMichal Nasiadka1-62/+0
In [1] we have removed opendaylight image, but left neutron-server-opendaylight image. [1]: https://review.opendev.org/#/c/739446/ Change-Id: Iae312e24a4ff9ab79979328abac3410fbb1a3cc2
2020-06-18Remove deployment of FWaaSAlfredo Moralejo2-3/+0
FWaaS is being retired upstream [1][2] in V cycle. [1] https://review.opendev.org/#/c/735838/ Change-Id: I45679c8596844780565644e52034bd3de0915ff4
2020-06-13Merge "Revert "[to-revert] Pin ovsdbapp in neutron to 1.1.0""Zuul1-2/+0
2020-06-10add libibverbs package for openvswitchwuchunyang1-0/+1
ovs images which based on centos miss libibverbs package. this ps add the package to neutron-ovs-agent and ovs-base images. Closes-Bug: 1882863 Change-Id: I3e307efc43f934a944a91d5d131a11f607411df2
2020-06-01Revert "[to-revert] Pin ovsdbapp in neutron to 1.1.0"Radosław Piliszek1-2/+0
This reverts commit 83ef520d640783b7745368ab1654aec59afa6461. As planned. Change-Id: I75a17bab92c9c43c4429fe4283cc63d530c99bef
2020-06-01[to-revert] Pin ovsdbapp in neutron to 1.1.0Radosław Piliszek1-0/+2
This fixes the related bug for us while we wait for common release. Change-Id: I93276b2dc53e729f918fb3e680dd78a6013c109e Related-Bug: #1881424
2020-04-15Remove support for CentOS 7Marcin Juszkiewicz5-66/+9
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images so there is no need for checking which Python version (2.x or 3.x) is used inside of containers. We also no longer have to support yum as a value for distro_package_manager. Partially-Implements: blueprint centos-rhel-8 Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
2020-03-18neutron: Remove networking-ovn - part 2Michal Nasiadka1-1/+0
A followup to change [1]. Remove networking-ovn sources from kolla/common/config.py and neutron-db-manage call in neutron-server/extend_start.sh [1]: https://review.opendev.org/712762/ Change-Id: I976d60e5f2bf3e8a55b90485a77584d9e7579d62
2020-03-13neutron-base: drop python3-networking-ovnMarcin Juszkiewicz3-72/+0
This code is now part of neutron, as part of ML2/OVS convergence with OVN work [1]. [1]: https://blueprints.launchpad.net/neutron/+spec/neutron-ovn-merge Change-Id: I704d231ead35cf94a712a5bccdd7a427c46077c7
2020-03-01Add block labels to all DockerfilesChristian Berendt15-0/+30
Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
2020-01-30Merge "CentOS 8: Update packages in images"Zuul2-2/+15
2020-01-29CentOS 8: Update packages in imagesMark Goddard2-2/+15
* Some further changes for python2 vs python3 packages * Allow rabbitmq 3.7.*, since a newer erlang is available * Switch from qemu-img-ev to qemu-img on CentOS 8 * bridge-utils no longer available on CentOS 8 * libvirt-daemon-driver-lxc no longer available on CentOS 8 * Mark some more images buildable for CentOS 8 Change-Id: Iaf5b68ff6d944ae730ca0b1d5832172c106a6c08 Partially-Implements: blueprint centos-rhel-8 Partially-Implements: blueprint centos-rhel-python-3
2020-01-10neutron: fix build in stable branchesMarcin Juszkiewicz1-0/+1
When [1] was committed, neutron stopped building for Train. Analogous patch is proposed to other stable branches. This patch removes neutron from upper-constraints. Kolla master is affected directly because we build Train for CentOS 7 atm. 1. https://review.opendev.org/#/c/697370/ Change-Id: I944e8e42fef1d359d767cbc6e1c13371ed753f31
2020-01-08Add OVN bits to neutron-baseMichal Nasiadka2-3/+7
Currently neutron-server-ovn container does not run db setup for networking-ovn subproject when bootstrapping - since it uses extend_start from neutron-server (where networking-ovn is not installed). Since OVN is being added as in-tree driver to Neutron and there is no rationale behind supporting separate container images for neutron-server-ovn and neutron-metadata-agent-ovn, hile networking-ovn driver uses around 1-2MB of space - this change adds networking-ovn installation to neutron-base image and deprecates neutron-server-ovn and neutron-metadata-agent-ovn images. Change-Id: Ib2dbdd7e7d34f56985b7a5b2494c3b89034688cb
2019-12-12Add Networking-MLNX to Neutron-Base packagesHamdy Khader1-0/+3
The package is required for infiniband deployment to be installed on containers: neutron-server, neutron-dhcp-agent and neutron-l3-agent. Change-Id: I017b65c2032648fa0ac7126d4a06cd98cb7c33a0
2019-12-10Merge "Revert "Introduce macro to remove Py3 only plugins on CentOS 7""Zuul1-1/+2
2019-12-06Added python3 packages for mellanox agent containerChandan Kumar (raukadah)1-14/+17
https://review.opendev.org/#/c/672023 added mellanox agent container which contains python2 packages but on RHEL8 tripleo job, python3 packages are needed which broke the periodic container build job, including python3 packages will fix the issue. Closes-Bug: #1855050 Change-Id: I35909eccaa101ef498d0a3481b8708d8ee5884d3 Signed-off-by: Chandan Kumar (raukadah) <chkumar@redhat.com>
2019-12-06Revert "Introduce macro to remove Py3 only plugins on CentOS 7"Mark Goddard1-1/+2
This reverts the following commits: df987c9d3fca40e0a7529e48a3626dfdd58e2168 d866c63a32a494b8643b166c3b1e36e463a7502f 6b40b655f124d0a95f1b7d89ce04236606a02010 These are no longer necessary as we are using stable/train branch for source images until CentOS 8 / python 3 support is available and working. Change-Id: I5aedf1141862d51c5bb676a7393fc131c452c914 Related: blueprint centos-rhel-python-3
2019-12-05Introduce macro to remove Py3 only plugins on CentOS 7Marcin Juszkiewicz1-2/+1
As CentOS 7 is Python 2 we need a way to remove plugins used in OpenStack components once they switch to be Python 3 only. 'remove_py3_only_plugins_for_py2' macro does exactly that. This change also disables networking-bgpvpn for python 2. Change-Id: Ib90aabc485f1c831d3d41cc0f70052f8fffc3fe6 Related: blueprint drop-py2-support
2019-12-02Merge "Added Neutron Mellanox agent image"Zuul1-0/+46
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 18:23:20 +0000