aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2026-09-16grafana: install Prometheus datasource pluginstable/2025.2Piotr Milewski1-1/+4
Closes-Bug: #2165921 Change-Id: Ib4a0d7185ccc64900b4068dd74995dbf1ba6823c Signed-off-by: Piotr Milewski <vurmil@gmail.com> (cherry picked from commit aece83cc507ac587769ae61d011161d462dafb1d)
2026-08-03ironic-pxe: don't fail if symlinks already exist21.2.0Owen Jones1-4/+2
`ironic-pxe` start-up fails if symlinks to efi files have previously been created. Removing test for existence and adding `-f` flag to symlink creation ensures they always exist without failing on start. Closes-Bug: #2160317 Change-Id: Ib736e5beb201409c8987fbc62225c75f89cbfe62 Signed-off-by: Owen Jones <owen@stackhpc.com> (cherry picked from commit 2da1223d8301da05f9b070ca656d62c1bde93c66)
2026-06-25Merge "[2025.2 and older] Create Ironic temp directory" into stable/2025.2Zuul1-0/+11
2026-06-22Install and start virtlogd in nova-libvirt.Michael Still2-1/+15
Due to implementation choices in qemu and libvirt, standard log rotate does not work on these console files, and instead the usual approach is to have libvirt's virtlogd rotate the contents of the console log file when it gets a bit big. OpenStack Compute knows how to read data from more than one rotated console log file if required to service a REST API request. OpenStack Kolla and Kolla-Ansible deploy OpenStack components in docker or podman containers. An error in the startup configuration for the nova_libvirt container results in the libvirt virtlogd daemon not being run, which results in this console log rotation not occurring. This opens up the risk of a disk usage denial of service attack on a hypervisor. The console log is stored on the same filesystem as ephemeral disks, and OpenStack Nova will take a hypervisor out of service if disk space becomes constrained. There is some protection from the instance console not being able to write data particularly quickly, but it is definitely still possible to fill the hypervisor file system -- especially if multiple instances are used. This misconfiguration appears to exist in all versions of Kolla / Kolla-Ansible as best as I can tell. Partial-Bug: 2155214 Change-Id: Ib62191e3022e5bcff781c12f662c9800fb210eb9 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 97d1352f225509bcb5e3e25013e9bfe1f3c995f0)
2026-06-19[2025.2 and older] Create Ironic temp directoryJed Preist1-0/+11
Creates a temp directory at /var/lib/ironic/tmp inside the Ironic container. Change-Id: Ia35c87428841e57a04b42541021d6b7daa3cd43a Signed-off-by: Jed Preist <jed@stackhpc.com>
2026-06-09keepalived: Install mariadb client packageMichal Nasiadka1-2/+6
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/992020 Related-Bug: #2155865 Change-Id: I1c67f6b0f4780b7caf83ccf95a20861d9fefe20b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 7477b2244ee525ffd6effeb4229608991c639fc8)
2026-05-14horizon: rebuild static assets after theme changesGrzegorz Koper1-1/+2
Include the theme directory in settings_bundle so theme-only changes invalidate the cache and rebuild the static assets. Closes-Bug: #2148389 Change-Id: If4fbc24c5c339f7dee7bf67a09fc6448ede0c9fd Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com> (cherry picked from commit 21cacdd855bca15be846d392ec6795d667bf8ac1)
2026-04-15Return missing systemd-udev into cinder and glance containers21.1.0Victor Chembaev2-2/+4
systemd-udev package provides /usr/lib/udev/scsi_id tool, required for operating with scsi-attached storage Closes-Bug: #2148205 Change-Id: I7b0c25d361fc61992089ee88625fb3ab63c12fb4 Signed-off-by: Victor Chembaev <chembervint@gmail.com> (cherry picked from commit 5096d8bff2519e983cb1c1b06a96a55f1849d87a)
2026-04-10Remove dsa from haproxy-ssh host key typesAntony Messerli1-1/+1
CentOS/Rocky 10 no longer supports DSA keys, causing haproxy-ssh to fail on startup with "unknown key type dsa". This aligns haproxy-ssh with the same fix already applied to keystone-ssh and nova-ssh. Closes-Bug: #2143880 Change-Id: I3990c2c67756378063e0867edcd004e8d28574dd Signed-off-by: Antony Messerli <antony@mes.ser.li> (cherry picked from commit 01fef6fc62c4dbf3c7f75bde1cdcf73e1b1745aa)
2026-04-02Re-enable SPICE support on Ubuntu Noble.Michael Still1-0/+6
The move to Ubuntu Noble for Kolla 2025.1 onwards accidentally broke SPICE consoles for Nova (both Horizon and spice-direct). This is because Debian and Ubuntu now package the SPICE support in a separate package. Without this package, an attempt to start an instance in Nova requiring SPICE will result in messages like this in the nova-libvirt logs: libvirt.libvirtError: unsupported configuration: spice graphics are not supported with this QEMU And the instance will enter an error state. The fix is to install the `qemu-system-modules-spice` package as well in the nova-libvirt image. Closes-Bug: #2138186 Change-Id: Ib4ced4a04353b9c11c6f0abb7cfa91001b239e53 Signed-off-by: Michael Still <mikal@stillhq.com>
2026-02-10Remove special handling for python3.12Pierre Riteau2-23/+0
This is not required anymore since we have switched to Rocky Linux 10. Change-Id: I10b68c2d3afa91cabf9341df75d8cf9f626c0f9b Signed-off-by: Pierre Riteau <pierre@stackhpc.com> (cherry picked from commit 64475a0b1b4dccbc3b817c78453e1d027b3f0d68)
2026-02-10horizon: pin setuptools <82Bartosz Bezak1-2/+5
setuptools 82 removed pkg_resources [1] [1] https://setuptools.pypa.io/en/stable/history.html#v82-0-0 Related-Bug: #2141293 Change-Id: Iced7662f7e58b9f094306e9a6c4f1b5a79f48b17 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 4cdf881631eb0a671b9f70d5afefa6ead1949118)
2026-01-22Fix ironic-pxe syslinux-tftpboot on aarch64 Rocky LinuxBartosz Bezak1-6/+1
Closes-Bug: #2138872 Change-Id: I6e30b749488a0ef2f247adf182db40cda8fa8ca4 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com> (cherry picked from commit 900fd8002a6a6538d48127e232b9ac0ba4499b99)
2026-01-13Add genisoimage package to nova-compute-ironicRafal Lewandowski1-1/+5
Closes-Bug: #2132960 Change-Id: I672f625e445bd1a2db1c4994baa7c44c20723a62 Signed-off-by: rafal Lewandowski <rafal@stackhpc.com> (cherry picked from commit 96b54022857ccef8dc6bb11789abe32119827109)
2026-01-10Update repo GPG key for influxdata.Michael Still1-1/+1
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit b852b8ce32a53cd747d8385e6185d2ad521dee5d)
2025-12-03mariadb: Switch EL to mariadb upstream reposMichal Nasiadka1-4/+1
Change-Id: I8fa363e7e9bc87195adaf218c46d6e9fb4575419 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 3b1fe42e32a734fe555e9377b23faae4984a62ce)
2025-12-02manila: Stop enabling kolla_el10 COPR repoMichal Nasiadka1-4/+0
This repo enablement is here by mistake, the glusterfs-fuse package installation has been removed in the original CentOS Stream 10 patch. Change-Id: I395fcae7fd39ea7488191690f994ad98a8184f65 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 14a7644a1e458dcfe8e928d9ea032b0465da08f5)
2025-11-27rocky: Remove EPEL hack - 10.1 is outMichal Nasiadka1-5/+0
Change-Id: I60de8ef452adad4a9b0d974a2678264b91eb6e3b Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit cbbc1b0bca94e0f768be8433ba4bd38cb6f0c583)
2025-11-19Transition to the new rabbitmq Debian package archives.Michael Still1-1/+1
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com> (cherry picked from commit 0fc73a644bdb7e4f583ba5ebf7ee3fcd60fb8ffc)
2025-11-06Merge "Add httpd image for OIDC/SAML frontend in uWSGI case"Zuul2-0/+46
2025-11-05debian: use valkey from bookworm-backportsBartosz Bezak2-2/+10
To fix arm64 valkey build. The virtual `valkey` resolves to `valkey-server` in bookworm-backports, but our global -1000 pin blocks it. Amd64 worked only because extrepo shipped it. Use valkey directly from the backports packages instead. follow up to https://review.opendev.org/c/openstack/kolla/+/932174 Change-Id: I846e4f19696ca28758cb9c0400be96c01b079daa Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-10-30Merge "Add Valkey"Zuul5-0/+107
2025-10-29Add ValkeyMichal Nasiadka5-0/+107
Change-Id: I02f3adf9825636e2b81c50543d6f95ea986019b6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-29Merge "horizon: unpin pip and setuptools"Zuul1-1/+0
2025-10-28Merge "Drop Venus images"Zuul6-89/+0
2025-10-28Bump Ansible to 12 and ansible-core to 2.19Michal Nasiadka2-2/+2
Change-Id: I37f4515587cb040296612e35d4c643f0c2bea6f6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-27Merge "mariadb: Bump to 11.4"Zuul3-9/+10
2025-10-27horizon: unpin pip and setuptoolsMichal Nasiadka1-1/+0
Since Venus is removed - that is not needed anymore Change-Id: I444304139dfbe451b5449a181de1129f073b7535 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-27Drop Venus imagesMichal Nasiadka6-89/+0
It has been marked as inactive and venus dashboard plugin is breaking Horizon Kolla builds. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/964860 Change-Id: I3a04487a75c04ba989fa70f2025db33308671dfb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-27horizon: pin pip to <25.3Michal Nasiadka1-1/+1
Closes-Bug: #2129916 Change-Id: Ib1b40a65cb2667b53c72f00d16bfe280bcf24bfe Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-24Merge "Remove container image of neutron-linuxbridge-agent"Zuul1-21/+0
2025-10-24Remove container image of neutron-linuxbridge-agentTakashi Kajinami1-21/+0
The agent was removed from neutron during 2025.1 cycle. The remaining implementation to deploy it is being removed from kolla-anible now. Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/962278 Change-Id: I2cf22b874fcb885752bf3800c8ad8fa7a5eacff7 Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-10-24Merge "neutron-metadata-agent: copy wrapper script for haproxy processes"Zuul2-0/+20
2025-10-24Add httpd image for OIDC/SAML frontend in uWSGI caseMichal Nasiadka2-0/+46
Change-Id: Ia85f253ecaeaef63c17e75dc4a223e030dbbc58d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-14mariadb: Bump to 11.4Michal Nasiadka3-9/+10
11.4 is the next LTS release (see [1]) New variable ``VERIFY_DB_SERVER_CERT`` is added to mitigate the MariaDB client variable ``ssl-verify-server-cert`` change from ``FALSE`` to ``TRUE``. [2] This variable can be overidden by assigning ``TRUE`` to environment variable with the same name. [1]: https://mariadb.org/11-4-lts/ [2]: https://jira.mariadb.org/browse/MDEV-31857 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/928487 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/958281 Change-Id: Ifb41c0c48c4743e70e95fa7e1d329e91362e966c Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-14Drop support for building MariaDB clustercheckSeunghun Lee11-94/+9
MariaDB clustercheck script has not been maintained and it will not work with MariaDB 11.4 (the next LTS version). This is because clustercheck.sh uses ``mysql*`` commands but from MariaDB 11.4, those commands are not supported. The health check of MariaDB server containers will be done by new script which comes with change [1]. Without MariaDB clustercheck, MariaDB server becomes only container image in the family, so mariadb-base and mariadb-server dockerfiles are merged. To avoid breaking changes, the name 'mariadb-server' is retained. Follow-up to rename references in Kolla and K-A from 'mariadb-server' to 'mariadb' would be nice. [1] https://review.opendev.org/c/openstack/kolla/+/962657 Change-Id: I01278f76ee82b018a854b5862f3caaa8c78a9a30 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-09Update Fluentd from v5 LTS to v6 LTSPiotr Milewski1-1/+1
Fluent Package v5 LTS will reach end of support at the end of 2025. Fluent Package v6 LTS will be supported until at least the end of 2027. This change updates the apt repository configuration and package version to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL. No changes to existing Fluentd configuration files are required. Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-09neutron: keepalived wrapper script does not rm containersMichal Nasiadka1-1/+1
keepalived wrapper script as the only one didn't have --rm in docker/podman invocation - so these didn't get deleted when stopped/crashed/etc. Closes-Bug: #2127170 Change-Id: I85ae37250ac4ef629b77ade04826a363e8047a91 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-07Merge "ironic: Remove ipxe.efi handling for EL10"Zuul1-6/+1
2025-10-07ironic: Remove ipxe.efi handling for EL10Michal Nasiadka1-6/+1
RHEL removed ipxe.efi - see [1]. [1]: https://issues.redhat.com/browse/RHEL-37610 Change-Id: I142257d6537ceeff23cb2cb34e64d93de9f19d2e Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-06Merge "debian: Use {{ openstack_release_codename }} for extrepo"Zuul1-1/+1
2025-10-06Merge "Add MariaDB healthcheck.sh"Zuul1-0/+6
2025-10-03Add MariaDB healthcheck.shSeunghun Lee1-0/+6
MariaDB clustercheck has not been updated for a long time. Since the script uses ``mysql*`` commands but MariaDB 11.4 (next LTS version) does not support them, it will not work once MariaDB gets upgraded. Added alternative MariaDB container health check script ``healthcheck.sh`` from official MariaDB docker images. [1] This script uses ``mariadb*`` commands, so it's prone to MariaDB upgrade. [1] https://mariadb.com/docs/server/server-management/install-and-upgrade-mariadb/installing-mariadb/binary-packages/automated-mariadb-deployment-and-administration/docker-and-mariadb/using-healthcheck-sh Change-Id: I7816edb6ebd8c95412a6833ea20b32193c2d1415 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-03Merge "Adds ironic-pxe-filter container"Zuul3-0/+49
2025-10-03Adds ironic-pxe-filter containerWill Szumski3-0/+49
Used in conjunction with the inspector implementation built into Ironic and based on the Ironic documentation[1]. [1] https://docs.openstack.org/ironic/latest/admin/inspection/pxe_filter.html Partial-Bug: #2094790 Depends-On: https://review.opendev.org/c/openstack/ironic/+/959850 Change-Id: I17811f2225edd64fb20cc44f0d40e14e9edb1413 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> Signed-off-by: Will Szumski <will@stackhpc.com>
2025-10-02Add support for rpm to repos.yamlMichal Nasiadka12-150/+1
Add the ability to configure repositories in the same way as we do Debuntu ones - via repos.yaml. Removes .repo files from base - since these are not needed there anymore. gpgcheck = 1 is default in docker/base/dnf.conf Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02Move repo enablement to respective rpm blocksMichal Nasiadka26-37/+78
Currently we are enabling repos irrespective of rpm/deb statement blocks and not failing in the method used if a repository is missing. Downside is - we might be producing one more layer, but it probably is a more logical approach. This is required for adding rpm support in repos.yaml that will also include failing on missing repositories. Change-Id: I5479c5c935760f00fe4cd307366f261deee3199f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01Move to Rocky Linux 10Michal Nasiadka2-35/+6
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-23Merge "horizon: Ensure horizon owns /var/log/kolla/horizon"Zuul1-0/+4
2025-09-23debian: Use {{ openstack_release_codename }} for extrepoMichal Nasiadka1-1/+1
Change-Id: I5e89a9a241f746a2cbab723ea5fc57ea65ad5ee5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 19:03:34 +0000