summaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2015-11-11Drop root for kolla-ansiblePaul Bourke2-2/+8
This change ensures commands run in the kolla-ansible container are done as the 'ansible' user rather than root. By default Ansible tries to write it's temporary files to $HOME/.ansible on the target, which in most cases won't exist when run as the new user. Hence we now supply the kolla-ansible container with an ansible.cfg, to tweak the remote_dir option to /tmp. Change-Id: I838a8c8cd0c7dc1aeca4d12e38c346f252170e7c Partially-Implements: blueprint drop-root
2015-11-11Clean up horizon httpd pid files for RPM distrosPaul Bourke1-0/+7
(apply same fix that we did for keystone, to horizon) In some cases we're seeing httpd not cleaning up properly after itself, which results in the horizon container failing to restart. This is confirmed to happen on rpm based distros, but have not had any reports on Ubuntu. Change-Id: I8ece6da1a8a1180730d68be0d129a656ddcede07 Closes-Bug: #1515214 backport: liberty
2015-11-10Drop root for designateMichal Rostecki8-1/+15
Change-Id: I1df05608be62cc008ccef1ca88d0b37983568d22 Partially-Implements: blueprint drop-root
2015-11-10Horizon rdo package requires python-keystoneauth1Martin André1-0/+1
Change-Id: I0d98399d7d573ea43689746dda59a647c307b25f Closes-Bug: #1514697
2015-11-09Merge "drop root for glance"Jenkins4-1/+7
2015-11-09Merge "Base image changes for drop-root"Jenkins3-3/+24
2015-11-09drop root for glanceSteven Dake4-1/+7
This uses the grouping feature of sudo to limit the amount of times the base sudo file has to be modified to only once. The container contents always runs as the user root, except the software which is controlled by Kolla. This software may run as root, but it has undergone a security audit and preserves permissions of the correct files and does not permit the glance user to write any of the set_config.py control files. Change-Id: Ie3cd23edcde5b408a8f66970456279a1b15028e0 Partially-Implements: blueprint drop-root
2015-11-09Base image changes for drop-rootSteven Dake3-3/+24
The reason we are doing drop root is so that a network exposed software component (i.e. glance) cannot be used to affect the immutability of the container which it runs in. I have tried several different approaches and this is the only approach which puts glance in PID=1 while ensuring no files may be written by the glance process in the container image except for the log files. Change-Id: Ifd3c8c361b78d0e4791dade3afa6435290407c41 Partially-Implements: blueprint drop-root
2015-11-09Fix validate-all-maintainer.sh to look for Dockerfile.j2Angus Salkeld29-29/+29
And fix the fallout. Change-Id: Iccad3f4fdb0a6a7c14246df3408cae0425b833a5
2015-11-06Switch to RDO untested master repositoryDavid Moreau Simard1-1/+1
RDO does not yet provide a CI tested Mitaka repository. As such, the current-passed-ci repository is the last tested repository before the stable/liberty branch was cut. To be able to test against the latest packages, we need to use the untested repositories until the CI tested repository is in place. TrivialFix Change-Id: I4a125eb3c84fa790746a9a8eca19e4fb2d9ecf38
2015-11-06Remove mysql-devel cruftMartin André1-1/+0
This was conflicting with Percona-Server-devel-55 and broke centos source build for openstack-base image. Backport: Liberty Change-Id: Ia2bb2106038e8e2eadb6668f4ae1ad1d95710c09 Closes-Bug: #1513711
2015-11-05Merge "Clean up keystone httpd pid files for RPM distros"Jenkins1-0/+7
2015-11-05Clean up keystone httpd pid files for RPM distrosPaul Bourke1-0/+7
In some cases we're seeing httpd not cleaning up properly after itself, which results in the keystone container failing to restart. This is confirmed to happen on rpm based distros, but have not had any reports on Ubuntu. Change-Id: I58b006189e700f1c851601b4f64dd0fae931103c Closes-Bug: #1489676 Co-Authored-By: Tim Potter <tpot@hpe.com>
2015-11-05Add Docker in Docker containerSam Yaple2-0/+56
Change-Id: I3c953125ed0105b7e8b62e62da56bf3fa30889d1 Partially-Implements: blueprint multinode-gate
2015-11-05Merge "Fix RHEL builds"Jenkins1-4/+4
2015-11-04Fix RHEL buildsRyan Hallisey1-4/+4
Register with RHEL on the host machine and use yum to setup the repos in the container. Change-Id: I38aaf43fffaf7a235e69b330d5d9f0f1be31fe83 Backport: Liberty Closes-Bug: #1513088
2015-11-04Adjust package name for Ubuntu IronicSam Yaple1-3/+3
We target 14.04 which has the package name 'syslinux' >14.04 has the package name 'pxelinux' TrivialFix Backport: Liberty Change-Id: Id0f4f503257d62d9ce45be5eb8f4faa766244d0a
2015-11-03Merge "Make nova-spice5htmlproxy build on RDO"Jenkins1-2/+2
2015-11-03Merge "Download, install, and enable rabbitmq_cluster"Jenkins3-6/+11
2015-11-03Merge "Prevent virbr0 from being created by default"Jenkins1-1/+2
2015-11-03Make nova-spice5htmlproxy build on RDOSteven Dake1-2/+2
Change-Id: Id031ee7f38a4c023c424e8a8b5d9e1636c4c7563 Closes-Bug: #1512579 Partially-Implements: blueprint nova-proxies
2015-11-03Download, install, and enable rabbitmq_clusterSam Yaple3-6/+11
Change-Id: I84d7587fca64dc8a9f05e326a27511ded79e902d Partially-Implements: blueprint rabbitmq-clusterer
2015-11-03Merge "Automate setting up a cache tier"Jenkins1-3/+7
2015-11-01Prevent virbr0 from being created by defaultSam Yaple1-1/+2
Small change to remove the default network since neutron handles all of the bridge and veth creation. virbr0 becomes clutter. CentOS doesn't seem to come with this default.xml network, so no change there. Note: This doesn't remove virbr0 from a running system, it only prevents its creation. Change-Id: I8e118ea285c674a47884bbe864df134133406bbc Closes-Bug: #1512060 Potential-Backport: Liberty
2015-10-23Use EL7 repostitory instead of EL6 for perconaSteven Dake1-2/+1
This patch uses the EL7 binary bits for percona's software instead of EL6. To match binary ABIs, it is recommended to use the same major version of EL for CentOS. backport: liberty Change-Id: I1d2b146a036806c7fd2baef97a6ed861a570d26e Partial-Fix: #1509281
2015-10-22Automate setting up a cache tierSam Yaple1-3/+7
Introduces a new flag to bootstrap cache devices DocImpact Partially-Implements: blueprint ceph-improvements Change-Id: I09b5a0d5c61b3465237e5f01dc10120725561cd3
2015-10-21Merge "Ironic binary shouldnt use upper-constraints"Jenkins1-1/+1
2015-10-21Ironic binary shouldnt use upper-constraintsSam Yaple1-1/+1
TrivialFix Related-Id: I9fbfa7ca442063db52c8b14586176ab994d2cf46 Change-Id: Ic1a7f311a323a3fed296ef2b76cd2dbde96053e2
2015-10-21Merge "Add nova-spicehtml5proxy console"Jenkins1-0/+18
2015-10-21Improve dry-ness of base dockerfile.j2Steven Dake1-13/+3
The delorean repositories no longer have a separate location for openvswitch. Now openvswitch is located in delorean-deps.repo and the rest of delorean master is located in the delorean.repo file. These files can be installed for both RDO and SOURCE, but not for RHOS. This patch uses the install_metatype to make a determination as to when to install these two repos. In the process, we can remove the source RPM installation. Change-Id: Ieedddd9d7ee234b6acdb03f7043d57c18e024951 Closes-Bug: #1508326
2015-10-20Make Ceph install from Source on RPMSteven Dake1-1/+2
Ceph doesnt install from source on RPM because Ceph pulls in python-requests. This causes a cpio error during unpacking because requests is installed in the base image. A simple workaround is to remove in the nova-compute container which is the only container this conflict occurs within. backport: liberty Change-Id: I493900854a53c98f1a5cb6478675a18feceefea5 Closes-Bug: #1508236
2015-10-20Increase Ceph RPM gpg key timeout to 90 secondsSteven Dake1-0/+2
The default timeout for Ceph GPG rpm key retrieval is 30 seconds. In my testing, the GPG key takes approximately 50 seconds to download often resulting in a failure to build containers that need to retrieve the Ceph GPG sign key. Crank up the timer to 90 seconds so the key is more likely to be downloaded, allowing images to be built. backport: liberty TrivialFix Change-Id: I7420cdf8d3b61aa9f4f52795fccbe5da3e48d57b
2015-10-20Fix typos in docstrings:malei2-3/+3
Change 'formating' to 'formatting' change 'seperate' to 'separate' Change-Id: I3093461c91cc71654c3ba86d7d662259262c09f5
2015-10-19Add nova-spicehtml5proxy consoleSam Yaple1-0/+18
Change-Id: I0ca15e00ee52373b84f7021d86a29304526b7436 Partially-Implements: blueprint nova-proxies
2015-10-15Merge "Use memcache for consoleauth and horizon"Jenkins1-1/+2
2015-10-15Merge "Use openstack/requirements for ironic"Jenkins2-2/+2
2015-10-15Merge "Use openstack/requirements for horizon"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for heat"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for gnocchi"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for glance"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for designate"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for cinder"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for ceilometer"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for keystone"Jenkins1-1/+1
2015-10-15Merge "Use openstack/requirements for repeatable builds"Jenkins1-2/+4
2015-10-15Use openstack/requirements for ironicPaul Bourke2-2/+2
See Iccb4e99f8e4b6659a19c1817d0f4c697824af25c for context. Change-Id: I9fbfa7ca442063db52c8b14586176ab994d2cf46 Partial-Bug: #150530
2015-10-15Use openstack/requirements for horizonPaul Bourke1-1/+1
See Iccb4e99f8e4b6659a19c1817d0f4c697824af25c for context. Change-Id: I145908bef5d18fea35f38032725f48c18f8cb831 Partial-Bug: #150530
2015-10-15Use openstack/requirements for heatPaul Bourke1-1/+1
See Iccb4e99f8e4b6659a19c1817d0f4c697824af25c for context. Change-Id: I36de9a5c52ac265d0fb54ba7d540048aedf33fde Partial-Bug: #150530
2015-10-15Use openstack/requirements for gnocchiPaul Bourke1-1/+1
See Iccb4e99f8e4b6659a19c1817d0f4c697824af25c for context. Change-Id: I70ade4df3297347833b116e73a77a50767d75d15 Partial-Bug: #150530
2015-10-15Use openstack/requirements for glancePaul Bourke1-1/+1
See Iccb4e99f8e4b6659a19c1817d0f4c697824af25c for context. Change-Id: I46f456ce71f76b0a6a2933220a500c5221769ff9 Partial-Bug: #150530
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-07 12:12:53 +0000