summaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2020-07-06Merge "Drop systemd support from nsswitch.conf on RHEL-based distros"Zuul1-1/+2
2020-07-06Drop systemd support from nsswitch.conf on RHEL-based distrosMichele Baldessari1-1/+2
A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we should remove the nss-systemd lookup from containers. The reasons for this are as follows: 1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 when this nss module is triggered it tries to talk to dbus. It triggers a bunch of selinux denials and it makes little sense to open all containers to talk to dbus. In particular, if a container is run as non-privileged and bind-mounts /run from the host, we will hit selinux denials like the following: type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus" 2) It just makes little sense in a kolla-world to have containers talk to dbus/systemd and it saves us some time when a lookup triggers the systemd module for whatever reason. Especially because the nss-systemd module does a few things which are not useful in a container (ensures that the root and nobody users and groups remain resolvable, SystemD's DynamicUser= feature, provide Lookup API via Varlink) The sed regex gives us the wanted results: $ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf --- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000 +++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000 @@ -53,9 +53,9 @@ # group: db files # In order of likelihood of use to accelerate lookup. -passwd: sss files systemd +passwd: sss files shadow: files sss -group: sss files systemd +group: sss files hosts: files dns myhostname services: files sss netgroup: sss Related-Bug: #1883849 Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673
2020-07-06openvswitch-netcontrold: build alwaysMarcin Juszkiewicz1-9/+0
This is infrastructure package where binary/source split does not make sense. Change-Id: I445134333b50439af20a3ca12757d519fa2624d4
2020-07-06Remove sensu imagesMarcin Juszkiewicz6-177/+0
They have been deprecated in Ussuri [1]. [1]: https://review.opendev.org/#/c/711636/ Change-Id: I0cfde46c29eedce77c70c1c677220814a801ff3a
2020-07-02Merge "Bump prometheus-openstack-exporter version to 1.1.0"Zuul1-1/+1
2020-07-02Bump prometheus-openstack-exporter version to 1.1.0Jorge Niedbalski1-1/+1
Change-Id: Ia2306507d6ef97f01ff520dc4222bc48c1eb9843 Signed-off-by: Jorge Niedbalski <jnr@metaklass.org>
2020-07-02Remove glance-registry containerAlfredo Moralejo1-11/+0
glance-registry service was deprecated in Queens release and has been removed in Victoria [1]. [1] https://review.opendev.org/#/c/738671/ Change-Id: I0d8695fde2a70509c7535d0d582136c0b0e7667b
2020-07-01Merge "CentOS/AArch64: RabbitMQ is back!"Zuul2-7/+4
2020-06-30Merge "Remove deployment of FWaaS"Zuul4-13/+0
2020-06-26Merge "Change lang package block order"Zuul1-13/+13
2020-06-26Merge "Add sysfsutils to nova-compute ubuntu source"Zuul1-0/+1
2020-06-25Merge "Fix loading of Storm on Centos8 / Python 3"Zuul1-0/+7
2020-06-24Remove unused variable MAX_NUMBERPierre Riteau1-5/+1
This variable won't be used by Kolla Ansible once change Ia786d037f5484f18294188639c956d4ed5ffbc2a is merged. Change-Id: I600e24896e74496f05387183c10d6c8c6bbbb17b Depends-On: https://review.opendev.org/735617
2020-06-23CentOS/AArch64: RabbitMQ is back!Marcin Juszkiewicz2-7/+4
CentOS 8.2 has Erlang and RabbitMQ available in 'messaging/rabbitmq-38' repository. We use it to grab Erlang while RabbitMQ comes from upstream (like on x86-64). Change-Id: I2559267d120081f2e5eabc9d966b019517a5ad5d
2020-06-22Merge "Fix horizon debian binary docker image"Zuul1-3/+4
2020-06-22Add sysfsutils to nova-compute ubuntu sourceRadosław Piliszek1-0/+1
This fixes the FC Cinder backend usage in Nova. Change-Id: I036cfe3af3dd96625f986a820c78a10e6558b086 Closes-bug: #1884484
2020-06-21Fix horizon debian binary docker imageMichal Arbet1-3/+4
Debian packages are different from ubuntu packages. Differencies in /etc/openstack-dashboard: - Symlinking {{ python_path }}/openstack_dashboard/local/enabled/ -> /etc/openstack-dashboard/enabled - Symlinking {{ python_path }}/openstack_dashboard/local_settings.d/ -> /etc/openstack-dashboard/local_settings.d - Symlinking {{ python_path }}/openstack_dashboard/conf/ -> /etc/openstack-dashboard/policy Every dashboard-plugin debian package is copying his policy files, local_settings, enabled to above locations. Every dashboard-plugin is triggering dpkg and collect-static, compress is done by openstack-dashboard package. Kolla has to remove all these debian package's configs and provide kolla configs. Move also /etc/openstack-dashboard/policy to standard location and delete symlink as kolla-ansible is overriding default policy files path to /etc/openstack-dashboard/. Change-Id: Ieca15bdb315d52e9547d798df11641ef36485b26 Depends-On: https://review.opendev.org/733612
2020-06-20Remove mongodb dockerfile from kollagugug3-54/+0
more info: https://opendev.org/openstack/kolla-ansible/commit/a6c97d7284c7de437ebfc9f8ee289244f29e65d7 Change-Id: I9e8a973e10389d42d6fedffb98bd23f1a8271087 Co-Authored-By: jacky06 <zhang.min@99cloud.net>
2020-06-20Merge "Remove the congress images since it has been retired"Zuul8-112/+0
2020-06-19Remove the congress images since it has been retiredgugug8-112/+0
more info: https://review.opendev.org/#/c/721733/ Depends-On: I12d74b53b64268d0358220af35f7fd719d82b397 Depends-On: I21c9ab9820f78cf76adf11c5f0591c60f76372a8 Change-Id: I7bd03b4f70ddfb15c96ed68e659cb6dccb0c36a3 Co-Authored-By: jacky06 <zhang.min@99cloud.net>
2020-06-19kolla-toolbox: use u-c while installing virtualenvMarcin Juszkiewicz1-4/+4
We need to be sure that we use exact same version every time. So fetch upper-constraints.txt file earlier and use it while installing virtualenv package. Change-Id: I61711a878b2bda9f0d2e88966f13121dfcddfda7
2020-06-18Fix loading of Storm on Centos8 / Python 3Doug Szumski1-0/+7
In the Centos8 images, Storm fails to start since it cannot find Python. This patch ensures that it can by setting the PYTHON env var. Change-Id: If6663b2f6dfadfd6a6db5e4aaca4eb782b87161f Closes-Bug: #1876461
2020-06-18Remove deployment of FWaaSAlfredo Moralejo4-13/+0
FWaaS is being retired upstream [1][2] in V cycle. [1] https://review.opendev.org/#/c/735838/ Change-Id: I45679c8596844780565644e52034bd3de0915ff4
2020-06-18Add collectd-amqp to the collectd imageMatthias Runge1-0/+1
This allows to write collected data via amqp. Change-Id: Ieb88fd60d177f19a635ada9366193e57c516f90b
2020-06-17Merge "base/centos: take care of whitespaces"Zuul1-12/+9
2020-06-16Merge "Install Fluentd Prometheus plugin out of the box"Zuul1-0/+1
2020-06-16cyborg-api: install proper WSGI for CentOSMarcin Juszkiewicz1-1/+1
Change-Id: Icc9d65c4ce22c959145a8d95fc6b823252659ddd
2020-06-15Install Fluentd Prometheus plugin out of the boxDoug Szumski1-0/+1
This plugin [1,2] supports a number of use cases which are likely to be useful out of the box to users enabling either Monasca or Prometheus: 1. As a system admin I want to monitor the status of Fluentd to ensure that it is functioning normally. 2. As a system admin I want to know the time to response for calls made to endpoints defined in HAProxy. [1] https://docs.fluentd.org/deployment/monitoring-prometheus [2] https://github.com/fluent/fluent-plugin-prometheus Change-Id: I9790cd6c9d142a4a3ced6d5c9a9af621c3892eb0
2020-06-13Merge "Revert "[to-revert] Pin ovsdbapp in neutron to 1.1.0""Zuul1-2/+0
2020-06-13Merge "add libibverbs package for openvswitch"Zuul2-0/+2
2020-06-12Change lang package block orderGaël THEROND1-13/+13
Fix offline installation of language pack packages. Change-Id: I9f4a21bbf1c8383e21e59350206aba3424602270 Closes-bug: #1883233
2020-06-10Merge "Remove tripleoclient container from Kolla"Zuul2-58/+0
2020-06-10add libibverbs package for openvswitchwuchunyang2-0/+2
ovs images which based on centos miss libibverbs package. this ps add the package to neutron-ovs-agent and ovs-base images. Closes-Bug: 1882863 Change-Id: I3e307efc43f934a944a91d5d131a11f607411df2
2020-06-04Merge "Stop to use the __future__ module."Zuul1-2/+0
2020-06-03Remove shade and kolla_sanity.py from kolla-toolboxMichal Nasiadka2-67/+1
Shade is deprecated long time, and only kolla_sanity.py utilised by k-a swift role is using that. Closes-Bug: #1760517 Depends-On: https://review.opendev.org/733143 Change-Id: Ie2e17bba37494b320986c17b30b15b62dd71ba22
2020-06-02Stop to use the __future__ module.Hervé Beraud1-2/+0
The __future__ module [1] was used in this context to ensure compatibility between python 2 and python 3. We previously dropped the support of python 2.7 [2] and now we only support python 3 so we don't need to continue to use this module and the imports listed below. Imports commonly used and their related PEPs: - `division` is related to PEP 238 [3] - `print_function` is related to PEP 3105 [4] - `unicode_literals` is related to PEP 3112 [5] - `with_statement` is related to PEP 343 [6] - `absolute_import` is related to PEP 328 [7] [1] https://docs.python.org/3/library/__future__.html [2] https://governance.openstack.org/tc/goals/selected/ussuri/drop-py27.html [3] https://www.python.org/dev/peps/pep-0238 [4] https://www.python.org/dev/peps/pep-3105 [5] https://www.python.org/dev/peps/pep-3112 [6] https://www.python.org/dev/peps/pep-0343 [7] https://www.python.org/dev/peps/pep-0328 Change-Id: Ie97dcb610b6c723ba08a84ad79763bbbd4af20d9
2020-06-02Use CentOS official mirrors for Ceph packagesAlfredo Moralejo2-21/+2
It's still using temporary mirror in RDO infra, but now that packages are properly synced to CentOS mirrors, let's switch to use it. Change-Id: I913efffe6a1d8a0210b1158261c77d0d45ac3147
2020-06-01Revert "[to-revert] Pin ovsdbapp in neutron to 1.1.0"Radosław Piliszek1-2/+0
This reverts commit 83ef520d640783b7745368ab1654aec59afa6461. As planned. Change-Id: I75a17bab92c9c43c4429fe4283cc63d530c99bef
2020-06-01[to-revert] Pin ovsdbapp in neutron to 1.1.0Radosław Piliszek1-0/+2
This fixes the related bug for us while we wait for common release. Change-Id: I93276b2dc53e729f918fb3e680dd78a6013c109e Related-Bug: #1881424
2020-05-29Remove tripleoclient container from KollaEmilien Macchi2-58/+0
This container was never needed or useful so far; let's remove it from Kolla. Depends-On: https://review.opendev.org/725349 Change-Id: I2c80080a5b2203c6b22c361f2b6126d65c0c50dc
2020-05-21Make Cyborg buildable (again)Radosław Piliszek1-34/+4
This is done by removing the dependency on OPAE SDK. Additionally, cursive is no longer tried to be installed again in the agent image as it is already installed in base via regular requirements. Details in reno and the referenced bug report. Change-Id: Ib6a6f38efd9860851e558f13ee3bdedd8bb57903 Closes-bug: #1873744
2020-05-20Merge "Ensure the confs exists for cyborg and masakari"Zuul2-1/+4
2020-05-20Merge "CentOS: disable more repos"Zuul5-2/+8
2020-05-19Ensure the confs exists for cyborg and masakarigugug2-1/+4
1. When cyborg images build completed, the /etc/cyborg folder is not exits, and there is not confs, especially the api-paste.ini 2. When masakari images build completed, it's configs is missing, this ps add them together cyborg should keep consistence with the other images[1], this PS to add it. [1]: https://github.com/openstack/kolla/blob/master/docker/nova/nova-base/Dockerfile.j2#L137 Change-Id: I8a802617952f80cfb9f906398054ef6d17559589
2020-05-18octavia: Add ovn-octavia-driverMichal Nasiadka1-3/+23
During this cycle Neutron team merged networking-ovn code to Neutron. As a consequence of it "OVN Octavia provider" project has been created. Before it the driver was placed in networking-ovn tree. Change-Id: I0dcd34b5e2c096557f0485aaec83d344e5cb01bb
2020-05-17base/centos: take care of whitespacesMarcin Juszkiewicz1-12/+9
Let's get rid of this warning: Change-Id: I121e2ecb30ec6e8d1b6d88d9b921894438c3e094 INFO:kolla.common.utils.base:ESC[91m[WARNING]: Empty continuation line found in: INFO:kolla.common.utils.base: RUN dnf -y install centos-release-opstools epel-release dnf-plugins-core && dnf config-manager --enable PowerTools && dnf config-manager --disable centos-ceph-nautilus && dnf config-manager --disable centos-nfs-ganesha28 && dnf config-manager --disable influxdb && rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-OpsTools && dnf -y distro-sync --security --sec-severity=Important --sec-severity=Critical INFO:kolla.common.utils.base:[WARNING]: Empty continuation lines will become errors in a future release. INFO:kolla.common.utils.base:ESC[0m INFO:kolla.common.utils.base:Step 1/39 : FROM centos:8
2020-05-17CentOS: disable more reposMarcin Juszkiewicz5-2/+8
'messaging-rabbitmq' and 'opstools' are enabled by RDO delorean-deps.repo file 'influxdb' was also enabled Depends-On: https://review.opendev.org/728687 Change-Id: Ibb0a7edc9e5632c1b89a7d52601f55a223b49dfb
2020-05-16Upgrade Monasca Fluentd output pluginDoug Szumski1-2/+2
As part of the support for using the unified Monasca API for logs, the Fluentd Monasca output plugin has been upgraded. Any custom Fluentd configuration which forwards logs to Monasca will need to be updated. Change-Id: I7deefec590cd3bfc774b47867d968afe1bd69d99
2020-05-14Remove Monasca Log APIDoug Szumski2-49/+0
Monasca, since the Train release has supported a unified API for both logs and metrics. The Log API is no longer required. Change-Id: I5a59a84b00a1770bfaf7257295e82bb5b92df029
2020-05-11Merge "Enable mod_wsgi in Nova API container"Zuul1-2/+0
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 13:33:51 +0000