aboutsummaryrefslogtreecommitdiff
path: root/docker/neutron
AgeCommit message (Collapse)AuthorFilesLines
2026-07-06Migrate to pyproject.tomlMichal Nasiadka25-751/+0
[tool.setuptools.data-files] does not support recursive directory installation. The old setup.cfg [files] worked because PBR's FilesConfig.expand_globs() used os.walk() to expand docker/*, but this hook is not triggered by the pbr.build PEP-517 backend. Move docker/ into kolla/ and use [tool.setuptools.package-data] instead. Update kolla_worker._get_images_dir() to check the kolla package directory first so both editable and regular installs work. Change-Id: I4fc452c03740ef22ebbb4e8d0d86c4f4783e2d09 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-24kolla-build: fix build-date LABEL invalidating Docker layer cacheMichal Nasiadka12-12/+12
The build-date label was rendered into a LABEL instruction on line 3 of every Dockerfile template, immediately after FROM. Because Docker invalidates the cache for a changed instruction and all subsequent layers, a date change caused a full rebuild of every image on each new calendar day, even when nothing else had changed. Fix this by removing build-date from the Dockerfile templates and applying it as a --label argument at build time via image.labels. Labels passed on the build command line are not part of the Dockerfile cache key, so the date is still recorded in the image metadata without affecting layer caching. Change-Id: I8ef0d85bab1a999a4d09f7cbf0c088ca00fdcf77 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-19Remove support for networking-infobloxTakashi Kajinami1-20/+0
The project[1] has received no commit for 4 years. Its latest commit still uses upper constraints from the old, abandoned Wallaby branch. [1] https://opendev.org/x/networking-infoblox Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/988844 Change-Id: I9e2ba00671eb7d05de3c40ed9524f20922e081b1 Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2026-04-02Merge "Add Dockerfile for neutron-ovn-vpn-agent"Zuul1-0/+31
2026-03-25Add Dockerfile for neutron-ovn-vpn-agentMaximilian Stinsky1-0/+31
This patch adds support for the standalone neutron-ovn-vpn-agent. The new agent was added in the 2024.1 and is required for vpnaas when using ovn. [1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/765353 Related-Bug: #2048392 Change-Id: I552b9fbc8fa0b49d3e0e3212dd11962b02837b9f Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Pablo COLSON <colson.pablo@gmail.com> Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-12-05neutron: Remove networking-generic-switch from u-cMichal Nasiadka1-0/+1
networking-generic-switch was added to u-c [1] and it breaks our install scheme. Alternative is to remove networking-generic-switch from sources.py, but that would be a user facing change and if we would pursue that we would need to do the same for all neutron plugins. using u-c removal macro to preserve previous approach of installing n-g-s from a branch tarball compared to a pypi version [1]: https://review.opendev.org/c/openstack/requirements/+/964059 Change-Id: Ifcee01f9415e9b9de8138b55cd676873a99c86aa Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-24Merge "Remove container image of neutron-linuxbridge-agent"Zuul1-21/+0
2025-10-24Remove container image of neutron-linuxbridge-agentTakashi Kajinami1-21/+0
The agent was removed from neutron during 2025.1 cycle. The remaining implementation to deploy it is being removed from kolla-anible now. Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/962278 Change-Id: I2cf22b874fcb885752bf3800c8ad8fa7a5eacff7 Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-10-24Merge "neutron-metadata-agent: copy wrapper script for haproxy processes"Zuul2-0/+20
2025-10-09neutron: keepalived wrapper script does not rm containersMichal Nasiadka1-1/+1
keepalived wrapper script as the only one didn't have --rm in docker/podman invocation - so these didn't get deleted when stopped/crashed/etc. Closes-Bug: #2127170 Change-Id: I85ae37250ac4ef629b77ade04826a363e8047a91 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02Move repo enablement to respective rpm blocksMichal Nasiadka1-1/+3
Currently we are enabling repos irrespective of rpm/deb statement blocks and not failing in the method used if a repository is missing. Downside is - we might be producing one more layer, but it probably is a more logical approach. This is required for adding rpm support in repos.yaml that will also include failing on missing repositories. Change-Id: I5479c5c935760f00fe4cd307366f261deee3199f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-17neutron-metadata-agent: copy wrapper script for haproxy processesMaximilian Stinsky2-0/+20
In ml2/ovn setups, the neutron-metadata-agent spawns haproxy processes to serve metadata requests. To run these haproxy instances inside their own containers, the wrapper script must be available in the metadata-agent container. This is a follow up on I679ac66186d457ae53f89469fe22c5662089019a Change-Id: Ia47af98ff723ebe8ea8461d05a2bc3b58af845f9 Signed-off-by: Maximilian Stinsky <maximilian.stinsky-damke@wiit.cloud>
2025-08-29Remove RDO/DeloreanMichal Nasiadka1-2/+2
RDO has staffing problems and has decided to only support SLURP releases - let's drop reliance on that repository. Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul1-1/+0
2025-07-16Move to CentOS Stream 10Michal Nasiadka1-1/+0
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-06-05Remove dibbler from neutron-l3-agentAlex-Welsh1-3/+1
The dibbler-client package has been removed from upstream Rocky repos, breaking neutron-l3-agent container image builds on RL9. Since the 2025.1 release, package is no longer used in Neutron has been removed because the project is stale and functionality was untested [1]. This change removes the package from the image build for all distributions. [1] https://review.opendev.org/c/openstack/neutron/+/934283 Closes-Bug: #2112575 Change-Id: I35b233a499c6bf1861b376fc441dc8081cfaf5d6 Signed-off-by: Alex Welsh <alex@stackhpc.com>
2025-05-05neutron: Add agents wrappers in the neutron-base imageMichal Nasiadka12-0/+288
These scripts have been based on TripleO version of the same feature. Unfortunately due to the fact that Neutron/python is stripping env vars when it's running dnsmasq/haproxy/etc processes - we need to do the ,,config'' handling in copy-wrappers script. Change-Id: I679ac66186d457ae53f89469fe22c5662089019a
2025-04-01Merge "Add libnetfilter-log to l3 agent container"Zuul1-2/+3
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul1-1/+3
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka1-1/+3
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-02-06Install pycadf from pypi packageMichal Arbet1-1/+1
Previously, the `pycadf` package did not include configuration files, so they were manually installed from source. However, this was fixed in pycadf's upstream in [1], allowing us to rely on the package itself. Additionally, the `ceilometer_api_audit_map.conf` file has been removed, as it was dropped in pycadf's upstream commit here [2] [1] https://review.opendev.org/c/openstack/pycadf/+/936741 [2] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I022aa4c403f08385beb83b5d0c81f8abb42eb4a7
2025-01-07neutron-dhcp-agent: change dnsmasq.log rightsMichal Nasiadka2-0/+11
Fixes /var/log/kolla/neutron/dnsmasq.log rights so fluentd can read logs from that file. Closes-Bug: #1693712 Change-Id: I57e36ef07e8840eead2efde77e0ab9dfd4842931
2024-11-15Add mechanism for patching files in containersMichal Arbet13-0/+26
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-09-19Add libnetfilter-log to l3 agent containerMichael Chapman1-2/+3
neutron-fwaas requires libnetfilter-log1 when fwaas_v2_log is enabled on l3 agent. As this package isn't easily available via rpm, this is only added for deb platforms. Partial-Bug: #2079775 Change-Id: I22d05d1a1c6ab92ed5507d6c90b8c2281abfc7af
2024-02-26Remove calls to libvirt repoMichal Nasiadka1-2/+0
It does not exist in repos.yaml since [1]. [1]: Id585c7744ba130ad1dfc28138fb0f9e6eeae771d Change-Id: Ic74eba44fc6e5508976de24cf20a5039f3292731
2024-01-17Fix openstack CADF audit maps and installationMichal Arbet1-0/+1
This patch fixes missing pycadf's audit maps for services and change the way how pycadf is installed. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/905858 Closes-Bug: #2047941 Change-Id: I9b43d1a9990ad8aa7381ea81b0f2d692967be949
2023-10-18Adds TAAS Neutron plugin to support OVS port mirrorsFelipeAFV1-1/+2
Related-Bug: #2022375 Depends-On: I7b48770709bd0fb9ea5072ce6c8673074c39ab2b Change-Id: I8afb1ccddaa527378b7fd833bd51fb9bb9c4c58c Signed-off-by: FelipeAFV <ffigueroa@whitestack.com>
2023-06-22Revert "neutron-mlnx-agent: pin pyzmq at 21.*"Marcin Juszkiewicz1-3/+1
This reverts commit b2d5307a442994d1a9348926f0664bb94ef96248. Reason for revert: Bobcat uses 25+ version Change-Id: I589a5ae43ccf52104b8cbce327ab13248d3bbde0
2023-04-21docker: implement macros to alter upper-constraints.txtMarcin Juszkiewicz1-1/+1
upper_constraints_remove() macro allows to remove line upper_constraints_version_change() allows to change versions This way we have cleaner way to alter u-c in those images which need it. Change-Id: I8fc354b8aa4d03fcd3ecfb9cbfe75de67492a0e3
2023-03-27Merge "neutron-mlnx-agent: pin pyzmq at 21.*"Zuul1-2/+4
2023-03-22neutron: Add iproute-tcMichal Nasiadka1-0/+1
Closes-Bug: #2000782 Change-Id: I5cf944c509f23d430665de458cbbdb2fd31db7bb
2023-03-20neutron-mlnx-agent: pin pyzmq at 21.*Marcin Juszkiewicz1-2/+4
20.* fails to build so let us try version where upstream fixed packaging issues. Change-Id: I099b21872a12c2dccaba4065965d9227ee2e87bc
2023-03-20Add Dockerfile for neutron-ovn-agentRodolfo Alonso Hernandez1-0/+18
This patch adds support for the new OVN Neutron Agent [1]. This new agent will include any needed OVN functionality not implemented in ovn-controller. This agent will, in a future, include the metadata service, superseding the OVN Metadata Agent. [1]https://review.opendev.org/c/openstack/neutron-specs/+/868076 Related-Bug: #2000385 Related-Bug: #1998608 Change-Id: Ib15a89ce9ba7b1c5121a627da9d130dc5bf5a044
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek1-1/+0
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-09-30Add RockyLinux 9 supportMichal Nasiadka1-1/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz1-18/+20
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-04-22adjust permissions on _extend_start files (part II)Marcin Juszkiewicz1-1/+1
Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760
2022-04-21flatten images a bitMarcin Juszkiewicz2-10/+10
As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-11Adjust permissions on _extend_start files.Tim Shearer1-1/+1
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-09docker: drop binary partsMarcin Juszkiewicz11-260/+67
Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
2022-03-01Revert "neutron: fix build in stable branches"Michal Nasiadka1-1/+0
This reverts commit 360d335e94246d7095672c5aa92b59afa380a059. Reason for revert: I don't think that's still needed. Change-Id: I67adef1762d36f23b84ab8a2297e1f3385082b8a
2021-11-02Merge "neutron-openvswitch-agent: openvswitch is already installed"Zuul1-4/+2
2021-11-01neutron-openvswitch-agent: openvswitch is already installedMarcin Juszkiewicz1-4/+2
We install openvswitch package in neutron-base image already so there is no need of repeating it. Change-Id: Id578cbc49c9a432414e5c758e0c853e59f79b039
2021-10-29neutron: Use update-alternatives --display instead of --queryMichal Nasiadka1-1/+2
--query is not supported before update-alternatives 1.15 and CentOS uses 1.13 Closes-Bug: #1936947 Change-Id: I78da7eb2b6b5eae2b04fd95b24615bd4a572a1d6
2021-10-04Remove neutron api-paste.ini from old locationPierre Riteau1-14/+2
We have been configuring neutron to use /etc/neutron/api-paste.ini for more than a month now. Remove this file from its old location before Xena is released. Stop creating /usr/share/neutron which is now unused. Change-Id: Ic90cd8e3065fa629d5ad67abaf7c193fd845259a
2021-08-23Merge "ironic-neutron-agent: enable for Debuntu binary"Zuul1-0/+1
2021-08-12[release] Use RDO master Delorean packagesPierre Riteau1-0/+4
CentOS binary packages for Xena have moved Neutron's api-paste.ini file to /etc/neutron [1]. Make this file available at the old location [2] for compatiblity with kolla-ansible, until the configuration is modified to use the new location. [1] https://review.rdoproject.org/r/c/openstack/neutron-distgit/+/34845 [2] /usr/share/neutron/api-paste.ini Change-Id: I2295884ef3b4c3bf4b087599322b0c5761e7b775
2021-08-12ironic-neutron-agent: enable for Debuntu binaryMark Goddard1-0/+1
Packages are available for focal and bullseye. Change-Id: I61623748d1149adb1b096adf2fffb5a902df3181
2021-04-27neutron: Remove vmware-nsx and networking-mlx from binaryMichał Nasiadka1-3/+0
Those plugins have been already removed from source images, this change removes them from binary. Change-Id: If21a21296489c1f243bb46f2595ff94d999bd686
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-0/+1
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 20:19:43 +0000