summaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2022-02-10ironic: Fix UEFI & iPXE bootloader filenamesMark Goddard1-0/+17
When using Ironic with UEFI boot mode and iPXE booting, nodes will attempt to chainload iPXE using a Network Boot Program (NBP). This is configured in Ironic via [pxe] uefi_ipxe_bootfile_name, and the default since Xena is snponly.efi. In Wallaby and earlier releases, the default was ipxe.efi. These files need to be available in the /tftpboot directory of the ironic-pxe image. The current default of snponly.efi was not present for any supported distros. ipxe.efi was present for Debian/Ubuntu but not CentOS, which appends the architecture to the filename (e.g. ipxe-x86_64.efi). This change ensures that both ipxe.efi and snponly.efi exist in /tftpboot for all supported distributions, ensuring that both the current and previous Ironic defaults should work. Where these files have different names, we use symlinks to allow for any deployers overriding the filenames in configuration. Closes-Bug: #1959203 Change-Id: I79e78dca550262fc86b092a036f9ea96b214ab48
2022-02-09rabbitmq: update to 3.9Michal Nasiadka4-9/+8
Also update Erlang to 24 Change-Id: Ifbaccc54896bab096a6d16dc7733941dd600cf39 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/828594
2022-02-09Merge "Futureproof the uninstallation of offending es gems"Zuul1-3/+3
2022-02-08Merge "Revert "nova: drop pypowervm dependency""Zuul1-3/+0
2022-02-08Merge "nova-compute: 'ndctl' is available on all archs"Zuul1-8/+1
2022-02-08Merge "erlang: use packages from Erlang Solutions on AArch64"Zuul4-29/+24
2022-02-08Revert "nova: drop pypowervm dependency"Marcin Juszkiewicz1-3/+0
This reverts commit 7de91fd60355104cbd650e0fe6f680b2eb0f2ffa. Reason for revert: Nova dropped pypowervm dependency so we do not need to handle it anymore. Change-Id: I8bb6c4c07c30f108e77fbb8cdc38d634b42b900f
2022-02-05erlang: use packages from Erlang Solutions on AArch64Marcin Juszkiewicz4-29/+24
RabbitMQ requires Erlang 23+ and soon will bump to 24+. On AArch64 we used version 22 as there was no other option. Now it is. Change-Id: I667ccda5bb4edbfbfb97dfb0cea264837ed05cae
2022-02-05nova-compute: 'ndctl' is available on all archsMarcin Juszkiewicz1-8/+1
In past 'ndctl' was x86-64 only in Ubuntu. This changed in 19.04 so time to adapt. Change-Id: I3e599f780e8f84ea131988f4a9a45f17055c8ab2
2022-02-05pin out some package from Debian OpenStack Team reposMarcin Juszkiewicz1-0/+5
Debian OpenStack Team backports many packages to get their stuff done. Sometimes something goes wrong: INFO:kolla.common.utils.kolla-toolbox:The following packages have unmet dependencies: INFO:kolla.common.utils.kolla-toolbox: git : Depends: git-man (< 1:2.30.2-.) but 1:2.34.1-1~bpo11+1 is to be installed INFO:kolla.common.utils.kolla-toolbox:E: Unable to correct problems, you have held broken packages. So let pin out problematic packages as we are fine with bullseye version of git. Change-Id: I8c740655c7f7803d9ab36dac79d30e35e65dd586
2022-02-04Add LetsEncrypt images for cert request/renewalJason Anderson2-0/+39
Adds container images for LetsEncrypt. Implements: blueprint letsencrypt-https Change-Id: I36d1a367fd8f40bb93ebc49122c8ee4fdcc151b2 Co-Authored-By: Jason Anderson <jasonanderson@uchicago.edu>
2022-02-04collectd: pcie-errors is x86-64 only nowMarcin Juszkiewicz1-6/+1
Change-Id: Iad7e7ebb1fbf4d14f20960d6257345db71d0e214
2022-02-04Switch to use Yoga binary packagesMarcin Juszkiewicz2-2/+2
At R-8 week we are moving to current release binary packages for CentOS and Ubuntu (Debian OpenStack team do not publish before RC). Change-Id: I5e620cd07326b3d69b07f7c4667176918d7c1b24
2022-02-03Remove missing collectd packagesMichal Nasiadka2-5/+0
Since CentOS Linux 8 repository retirement from CentOS mirrors - we need to use CentOS Stream 8 version of Opstools repo. Listed below packages are missing from the repo, and according to the maintainer dpdk_telemetry is not going to show up at all (it's basically dead). The rest of the packages might show up at a later stage - but it's not a priority for the maintainer. - collectd-dpdk_telemetry - collectd-libpod-stats - collectd-sensubility - python3-sqlalchemy-collectd Change-Id: I5f446fc276e245c1e6974ceeb6ff3dccd84ee502
2022-01-31Merge "Ensure set_configs sets execute bit on directories"Zuul1-0/+10
2022-01-28Ensure set_configs sets execute bit on directoriesJakub Darmach1-0/+10
While handling permissions for directories, set_configs.py configures them same as for files - i.e. 0640 set in config.json which works fine for file will cause any potential subdirectories to lack traverse permission. Check and permission change was added to handle_permissions function to add +x if +r is present for user, group, others. Change-Id: Ic6e3ae4ff40c6ce5a5c0646ed309a2938903f6c0
2022-01-27Futureproof the uninstallation of offending es gemsRadosław Piliszek1-3/+3
Uninstall based on version range. Change-Id: I353ef9b6b8da0e726c17ad2e06995d3690731e1d
2022-01-27Unpin td-agent and cap elasticsearch gemDr. Jens Harbott3-13/+8
With [0] the version of td-agent being installed was pinned, which isn't sustainable in the long run, so we drop the pin. Latest version of the elasticsearch gem no longer works with older (OSS) versions of Elasticsearch. This is fixed by downgrading the version of the elasticsearch gems. [0] Iefcdd3100b7e3c5320bc5f1286a18251bdeab885 Related-Bug: 1930867 Closes-Bug: 1954759 Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823155 Change-Id: I3045786e863b098d7339d1066aef6c857aa5f97f
2022-01-26Use distro provided GRUB efiXinliang Liu2-18/+30
Use distro provided GRUB efi instead of creating it like ironic GRUB setup doc[1]. This avoids below ubuntu ironic-python-agent images PXE booting failure. ---------- error: invalid magic number. error: you need to load the kernel first. Press any key to continue... ---------- This also fixes x86_64 uefi pxe booting issue by setting up GRUB efi for x86_64. Besides, GRUB setup only needs to do once at bootstrap stage. [1]: https://docs.openstack.org/ironic/train/install/configure-pxe.html#uefi-pxe-GRUB-setup Closes-Bug: #1879265 Change-Id: I8be5bdf5f1a62751aefe6bd0959e8f558fcfe591
2022-01-25Merge "Clean up fluentd image recipe"Zuul2-72/+17
2022-01-25Upgrade pip and friends in source images (part 2)Marcin Juszkiewicz2-2/+4
New pip has nice features for detection of conflicting requirements. When installing from PyPI, as we do in source images, running the latest pip+setuptools+wheel is recommended. This change covers entries missed in I4ae3a82cc796a60450c2a35beba32972964bc5d0 Change-Id: I0d69009b8b736b59b122ad29a9a5f6a22b041513
2022-01-21Merge "Mitigate two Log4j vulnerabilities in Apache Storm"Zuul1-0/+5
2022-01-20Merge "Clean MariaDB/MySQL"Zuul5-16/+1
2022-01-20Merge "base: do not duplicate repo data on CentOS"Zuul1-29/+16
2022-01-13Mitigate two Log4j vulnerabilities in Apache StormPierre Riteau1-0/+5
The Log4j version was bumped on GitHub [1] but it is still pending inclusion in a release of Apache Storm. Apply the alternative mitigation recommended by Log4j [2] of removing the JndiLookup class from the classpath. [1] https://github.com/apache/storm/pull/3427 [2] https://logging.apache.org/log4j/2.x/security.html Change-Id: Ib3ecd73f9e39e320acb2c5f0962b8af9b1a817e9
2022-01-12magnum: fix issue with keystone auth default policyMichal Nasiadka1-0/+1
Closes-Bug: #1957159 Change-Id: I042da2234d0a06f1b7ddcac9eb6db8b86f13d205
2022-01-11Merge "Add fluentd grok-parser plugin on CentOS on aarch64"Zuul1-1/+1
2022-01-04base: do not duplicate repo data on CentOSMarcin Juszkiewicz1-29/+16
Instead of listing all repositories twice, do it just once and then add architecture specific ones. Change-Id: Icf0675c17a5227643148e9956496b8eacec67bee
2021-12-29Clean up fluentd image recipeRadosław Piliszek2-72/+17
Since Xena, there is no arch supported other than x86_64 and aarch64. Additionally, the conditional for x86_64 Debian does not seem to be needed now with current td-agent. Moreover, drop two plugins that are relevant only to fluentd 0.12, one of which (parser) causes fluentd 0.12 (!) to be installed. Modern fluentd has both built-in. Finally, drop the labels as they are no longer useful. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823093 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/823094 Change-Id: I7326cd8fcfa459dedcb6404e5287f0f5aeeed6cb
2021-12-28Add fluentd grok-parser plugin on CentOS on aarch64Radosław Piliszek1-1/+1
This conditional was missed in the original patch moving aarch64 to td-agent. [1] After this change, other plugins will have newer versions installed as well, as it happens in other image flavours. [1] I86ecdc1ac45dfd76b94a34d1b837f7c0bc975dcd Closes-Bug: #1955889 Change-Id: I10ff098b3356eb02ad4a1006b988812356768fec
2021-12-28Fix variable nameMaksim Malchuk1-2/+2
TrivialFix The customization format of the variable name should contain the <image_name> [1]. This change fixes the name of the 'remote_apt_keys' variable in base Dockerfile. 1. https://docs.openstack.org/kolla/latest/admin/image-building.html#dockerfile-customisation Change-Id: I423db39e77f337a73d3d88e3dbd56469be45110b Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2021-12-23nova: remove EPEL repository from nova-spicehtml5proxy imageMark Goddard1-3/+0
The EPEL8 repository doesn't provide the necessary spice-html5 package, and the image is marked unbuildable for CentOS. Let's not make EPEL look more useful than it is. TrivialFix Change-Id: Ia37792ca6e5b40156ebd57b6c290d1ee9d4ff87a
2021-12-21Merge "Make cron's logrotate schedule configurable"Zuul2-0/+20
2021-12-21Merge "Add HTTP proxy support for fetching APT keys"Zuul1-2/+7
2021-12-21Merge "Drop vmtp"Zuul2-39/+0
2021-12-21Merge "Bump up Alertmanager version"Zuul1-4/+7
2021-12-21Revert "Workaround setuptools==60.0.0 breakages"Dr. Jens Harbott1-3/+0
This reverts commit b69c58971895a6ab8a23bcdc4b7b56d01f26e2f5. Reason for revert: The original commit was a hotfix to work around build failures, we should try to move back to a normal state again. Change-Id: Iff79de9dabcd4bba795f3c44d3017baa5a860306
2021-12-20Drop vmtpRadosław Piliszek2-39/+0
Details in the attached reno. Change-Id: I1a8363da02d98255fce31749f4c9838088443a67
2021-12-20Workaround setuptools==60.0.0 breakagesDr. Jens Harbott1-0/+3
Setuptools 60.0.0 is trying to use it's own distutils[0]. Once again. Use the workaround they propose until all pkgs we need have fixed their build processes. [0] https://github.com/pypa/setuptools/blob/main/CHANGES.rst#v6000 Signed-off-by: Dr. Jens Harbott <harbott@osism.tech> Change-Id: I112c0ea510aad80f28fc3f8a9f04cdf09c924b18
2021-12-16Bump up Alertmanager versionPiotr Parczewski1-4/+7
Yoga deserves a newer version than one from 2019. Change-Id: Ib7b45ea6ca0a465ce075ac2f2a0e7b8006ee6190
2021-12-09Merge "horizon: add various dashboard plugins for ubuntu/binary"Zuul1-9/+10
2021-12-09Merge "CentOS: do not use advanced-virtualization repo"Zuul1-4/+2
2021-12-08Add HTTP proxy support for fetching APT keysYang Youseok1-2/+7
In network isolated environments the only way to go outside is through HTTP proxy. Make use of it if set. Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org> Closes-Bug: #1850575 Change-Id: I2718884c4742cb81a3900e38fee62fbd27b472d7
2021-12-07Ensure nvme-cli is present in nova-compute imagesPierre Riteau2-4/+5
The nvme-cli package is required to get the nvme command executed by os-brick, which is used by nova-compute. We don't need to explicitely install it for centos binary images, as it is required by os-brick which is required by openstack-nova-common, but all other types of images were missing it. Change-Id: I754939da7636c57d2a8d5b83debb5d8a58e38432 Closes-Bug: #1953509
2021-12-07Merge "Upgrade pip and friends in source images"Zuul2-2/+4
2021-12-04Merge "nova: drop pypowervm dependency"Zuul1-0/+3
2021-12-01nova: drop pypowervm dependencyMarcin Juszkiewicz1-0/+3
Nova depends on pypowervm for POWER architecture support. But it is unmaintained upstream and breaks CentOS builds (wants to install Py2 only 'futures' package). Change-Id: Ife9385c93239e910db2e4405ec4661f667357bc0
2021-11-26Upgrade pip and friends in source imagesRadosław Piliszek2-2/+4
New pip has nice features for detection of conflicting requirements. When installing from PyPI, as we do in source images, running the latest pip+setuptools+wheel is recommended. Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org> Change-Id: I4ae3a82cc796a60450c2a35beba32972964bc5d0
2021-11-26nova-compute: trim image a bit on CentOSMarcin Juszkiewicz1-3/+9
libguestfs package fetched kernel-core one which fetched linux-firmware. We remove the last one and save ~500MB of space: before/centos-binary-nova-compute: 3.3GB after1/centos-binary-nova-compute: 2.71GB Closes-Bug: #1946801 Change-Id: I98cc19c95fcec07dd4e494c14c09938d754f1de0
2021-11-23Merge "Add Swift lock path in Swift containers"Zuul1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 00:08:23 +0000