summaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2023-03-23neutron: Add iproute-tcMichal Nasiadka1-0/+1
Closes-Bug: #2000782 Change-Id: I5cf944c509f23d430665de458cbbdb2fd31db7bb (cherry picked from commit d7d43bed84dff0c394a28730fef593bdfbb064f2)
2023-02-15Pin setuptools=67.2.*Michal Nasiadka1-1/+1
67.3.1 is out and it broke Horizon builds Change-Id: Ie6c078a9c37f54d60f0d5a4aadb647e184489cb8 (cherry picked from commit ca0238598a37c4a174c7b8d55b64c15bb34ef58a)
2023-01-31influxdb: Update gpg keyMichal Nasiadka2-2/+2
Influx repo gpg key has been rotated as of of 2023-01-26 [1]. [1]: https://www.influxdata.com/blog/linux-package-signing-key-rotation/ Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/872257 Change-Id: I76b35bb20ddc0130ca15ff03942e1a97f5d36ff0 (cherry picked from commit ab70c7618b3b7e025759fe38c8692f66ef420b15)
2023-01-26Add util-linux to centos base packagesMichal Nasiadka1-9/+10
Currently /usr/sbin/nologin is missing, because util-linux is not installed in the image. Change-Id: I717b4f2215054ef9135a1ac252ed26820bdcb1aa (cherry picked from commit 1371e4fc5b9d3d55f5bb48540753f740f1d1af02)
2023-01-18grafana: remove SHA1 workaroundMichal Nasiadka2-9/+0
Change-Id: I08fe2827bc58baa95d396daf28de1079e3df4f77 (cherry picked from commit 47a9a818596b27f658fb7b40aac2130fd04b66b6)
2023-01-17Merge "relay non-zero exit codes when creating openvswitch bridges" into ↵Zuul1-4/+3
stable/zed
2023-01-16relay non-zero exit codes when creating openvswitch bridgesErik Panter1-4/+3
Calls to `ovs-vsctl` in `ovs_ensure_configured.sh` did not get checked for errors. This can cause false success statuses when the script is run by automation tools such as ansible. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/870540 Closes-bug: #1999778 Change-Id: Iad83132b61efadbf09aa9aa2edf96235085764c6 (cherry picked from commit a840ac0d7c8777a8198ae40cbb79b65c5fffd7e1)
2023-01-13CentOS/Rocky: use CentOS Cloud SIG repo instead of DeloreanMarcin Juszkiewicz3-14/+18
Zed was released, landed in CentOS repo, time to use it. Change-Id: I829a0fc4439281b074c40e200d96a27584da3765
2022-12-07Merge "Drop elasticsearch, kibana and logstash"Zuul15-246/+0
2022-12-07Merge "mariadb: update clustercheck branch to match db version"Zuul1-1/+1
2022-12-06Merge "Remove monasca, kafka, storm and zookeeper."Zuul20-612/+1
2022-12-06Drop elasticsearch, kibana and logstashMichal Nasiadka15-246/+0
Support has been dropped in kolla-ansible, the upgrade path is opensearch. Change-Id: I6f32aacb4e0b7dd1eb7206e02425b16f5beae4f0
2022-12-06Remove monasca, kafka, storm and zookeeper.Michal Nasiadka20-612/+1
Monasca, kafka, storm and zookeeper have been removed in kolla-ansible [1],[2]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/861392 [2]: https://review.opendev.org/c/openstack/kolla-ansible/+/865029 Change-Id: I0958a9353bc4585c4f65a1d316328a0e80b0b8b7
2022-12-06opensearch: fix footer nameMichal Nasiadka1-1/+1
Change-Id: I886da6215c20a3d0227b4ee5d603a7e416929618
2022-12-01mariadb: update clustercheck branch to match db versionMichal Nasiadka1-1/+1
Change-Id: I99bda6801995727dbeaa07219f336e22c8346ada
2022-11-16Add Opensearch image(s)Piotr Parczewski4-0/+99
Handles x86-64 and aarch64 targets. Change-Id: I70e2bb1d2744d38e08f5a9a79ab6a7265ebf24c9
2022-10-27Merge "Revert "ci: disable usage of EPEL mirror""Zuul2-4/+4
2022-10-27Revert "ci: disable usage of EPEL mirror"Michal Nasiadka2-4/+4
This reverts commit 0fa3fd885e03e887b11b2c960564a92c423a360e. Reason for revert: OpenDev mirror should be fixed now Change-Id: Ibf85ae4b5b374b4831b9ba33addd896c0507e8aa
2022-10-27rabbitmq: use Erlang 25 on AArch64/CentOS/RockyMarcin Juszkiewicz2-20/+2
We switched repo to provide Erlang 25 but not switched to it. Change-Id: I8b0a2f27ccb3db61a38d8fe89676f99eed1e3d75
2022-10-27ci: disable usage of EPEL mirrorMichal Nasiadka2-4/+4
It's broken now - let's stop using it. Change-Id: I4d881e6a1af07f7c6cf4547cac72e971bfadeefb
2022-10-18Merge "rabbitmq/aarch64: use COPR for Erlang"Zuul3-12/+12
2022-10-18Merge "rabbitmq: use Erlang from PPA on Debian/Ubuntu"Zuul3-15/+3
2022-10-18rabbitmq/aarch64: use COPR for ErlangMarcin Juszkiewicz3-12/+12
RabbitMQ team maintains RPM package in Github repo [1]. Hrw then use it to build package using COPR service [2]. This way we have latest Erlang on both distributions and both architectures. 1. https://github.com/rabbitmq/erlang-rpm/ 2. https://copr.fedorainfracloud.org/coprs/hrw/erlang-for-rabbitmq/ Change-Id: I425ae2fab78e80ff56f21fd1b24708906ec32342
2022-10-14Bump node_exporter to 1.4.0Pierre Riteau1-1/+7
Change-Id: I947a0b9155fea18a7781f694dbeafc49033fef8e
2022-10-14rabbitmq: use Erlang from PPA on Debian/UbuntuMarcin Juszkiewicz3-15/+3
PPA from Team RabbitMQ [1] provides newer Erlang for Debian/Ubuntu. This way we have latest Erlang on both distributions and both architectures. 1. https://launchpad.net/~rabbitmq/+archive/ubuntu/rabbitmq-erlang Change-Id: Iec7e8461f9eb757e1576cf3898068306c5436239
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek42-48/+8
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-10-09Fix Swift deployment issueMaksim Malchuk1-0/+2
Swift deployment is broken since CVE-2022-38060 fixed sudoers file in the I66476a2b396e2cbe41e68ac51f57aae1806b2ed8. The kolla-toolbox container have their own virtualenv path differs from all other containers. This change adds the correct sudoers secure_path configuration needed only for kolla-toolbox conainer. Related-Bug: #1985784 Change-Id: I3651576ee354364d639c187ff750491667ecab56 Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-10-07Merge "Support qemu block rbd in nova-compute"Zuul1-0/+2
2022-10-05Merge "kolla-toolbox: bump ansible-core to 2.13"Zuul2-4/+1
2022-10-05Merge "CI/centos/rocky: use repos from opendev mirror"Zuul2-0/+110
2022-10-05kolla-toolbox: bump ansible-core to 2.13Michal Nasiadka2-4/+1
Change-Id: I13e3cf5a02dadcedd1ebbd54d56f7f633e6e3d68
2022-10-04Support qemu block rbd in nova-computeRadosław Piliszek1-0/+2
This is necessary if using nova-compute with RBD backend (directly, not via Cinder) and wishing to make an instance image to Glance while (1) following the recommended Ceph permissions which do not give Nova write permissions to the images' pool or (2) not using RBD with Glance or (3) not revealing what Glance actually uses as the backend (hiding locations). Change-Id: I88e1e0ca01b2b2effad9515b905cc761fbb5d2d4
2022-10-04debian: swtpm is in backportsMarcin Juszkiewicz1-2/+3
We need to mark swtpm/libtpms in APT preferences to make it installed on AArch64. Change-Id: Ibee94fe5a6217048eef01aa24ebed6ee05aae8de
2022-10-03Merge "proxysql: Use almalinux for centos/rocky9"Zuul2-2/+2
2022-10-03CI/centos/rocky: use repos from opendev mirrorMarcin Juszkiewicz2-0/+110
Repo definitions in RHEL 9 rebuilds use metalink method for most of entries which makes our use of sed obsolete. This patch adds file with definitions of all CS9 repos we use and moves all official definitions a side at start of build. After build our definitions get removed and official ones are restored. Similar is done for RockyLinux 9 builds but there RL9 repos are used from official mirrors while CS9/EPEL ones are from OpenDev mirrors. Final images will have repos in wrong enabled/disabled state. Change-Id: I04121fd5ca9894b6deeda3808808cbffd6b97811
2022-10-03proxysql: Use almalinux for centos/rocky9Michal Nasiadka2-2/+2
As per https://github.com/sysown/proxysql/issues/3989 Change-Id: If077d60e9efd29fab80f4f5188a4f54015734a92
2022-10-03Fix ironic-pxe EFI path for rockyMichal Nasiadka1-2/+2
Change-Id: I6c82ef5b148b3ebdc8241871117dbe6cd68ed070
2022-09-30Add RockyLinux 9 supportMichal Nasiadka4-20/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-29Merge "debian: use Erlang 24 on AArch64"Zuul1-0/+6
2022-09-29Merge "use Erlang 24 on Ubuntu/AArch64"Zuul1-0/+6
2022-09-29Merge "centos: use Erlang 24 on AArch64"Zuul3-13/+24
2022-09-29debian: use Erlang 24 on AArch64Marcin Juszkiewicz1-0/+6
There are no Erlang 25 packages for Debian/AArch64. Change-Id: Ice5a7b4cbb61365bb81334ca7af92fac6739fe41
2022-09-29use Erlang 24 on Ubuntu/AArch64Marcin Juszkiewicz1-0/+6
There is no Erlang 25 package with for Ubuntu/AArch64. Change-Id: Ie07a6b821db0557c5e373037183082604acda4bd
2022-09-28Merge "repos: in CentOS Stream 9 haproxy is in appstream repo"Zuul1-2/+0
2022-09-28centos: use Erlang 24 on AArch64Marcin Juszkiewicz3-13/+24
We do not have Erlang 25 for CentOS Stream 9 on AArch64 so we revert to use Erlang 24 from CentOS repository. Also synced Erlang and RabbitMQ versions between images. Change-Id: I1480de095eaea66c3a83a61ca3ff269953181e39
2022-09-28Merge "nova-libvirt: provide TPM emulation"Zuul1-0/+2
2022-09-27repos: in CentOS Stream 9 haproxy is in appstream repoMarcin Juszkiewicz1-2/+0
So we do not need to define repo for it like it was in past. Change-Id: I9e22a43e068490d762c42a7bb491e445a715381b
2022-09-27Merge "Don't ignore the remaining apt-get update errors"Zuul2-2/+2
2022-09-27Don't ignore the remaining apt-get update errorsRadosław Piliszek2-2/+2
Follow-up to I5ce2eb66a647e1805f086aa37942bf5d13eb4106 So far, I have only observed these causing weird errors later but, in theory, ignoring these could allow the rest of the code to use archival (so wrong) entries. Change-Id: I9cef5ceeb78d431ca232c7b196c48eef5d2ccbca
2022-09-27nova-libvirt: provide TPM emulationMarcin Juszkiewicz1-0/+2
The goal of the swtpm project is to provide a TPM emulator (TPM 1.2 & TPM 2) that can be integrated into virtualized environments, such as virtual machines and containers. Nova supports it for quite a while: https://review.opendev.org/c/openstack/nova/+/631363 Change-Id: Ifb7e0f1632805807851720873a70179218bdf372
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 19:35:31 +0000