aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2020-09-09Merge "Fix Masakari dashboard policy file location"Zuul1-1/+1
2020-09-09Merge "Add collectd-libpod-stats to image"Zuul1-0/+1
2020-09-08Merge "Enable mod_wsgi in Ironic API and Inspector container"Zuul3-4/+2
2020-09-06Fix Masakari dashboard policy file locationMark Goddard1-1/+1
The horizon image copies the masakari dashboard's policy file to Python site packages, but it should go to /etc/openstack-dashboard. This allows the dashboard to be seen by non-admins, although it fails to load. We get an error like the following in horizon.log: No policy rules for service 'instance-ha' in /etc/openstack-dashboard/masakari_policy.json This change fixes the issue. Change-Id: I8ede183c76a830de06ce6524dc3f6f6944b182c1 Closes-Bug: #1894240
2020-09-06Replace cradox with radosMatthias Runge1-1/+1
Gnocchi supports both, but cradox is not actively maintained. Change-Id: I3d9547237ffa3ee02c306376f0e553fce5472e57
2020-09-05Emergency fixes to pass CIRadosław Piliszek1-17/+14
1) makes bifrost unbuildable as it evolves rapidly at the moment 2) makes neutron bootstrap/upgrade only the core service [1] 1) will be reverted 2) will be made more flexible [1] https://bugs.launchpad.net/bgpvpn/+bug/1894056 Change-Id: I1eefcfceded985b5f61ee8d796f9d8994c9ee97c
2020-09-02Fix bifrost network configMichal Nasiadka1-0/+1
Set bifrost internal_ip variable to adapt to change [1]. [1]: https://review.opendev.org/#/c/748230/ Change-Id: Idf401536b482b4088f5fb66408917752fd71726c
2020-08-31Merge "Clean up the stale FIXED message"Zuul1-3/+0
2020-08-28Fix kolla_set_configs --check with a directoryMark Goddard1-5/+6
There are several issues with kolla_set_configs --check: 1. We calculate the destination path incorrectly when comparing a file in a directory, due to passing arguments to os.path.relpath in the wrong order 2. For directories that have not changed, we also attempt to compare them as files, which fails when they are open()ed. 3. If the config JSON does not have a config_files key, it fails with a KeyError. The first two issues affect the fluentd container, which specifies directories as the source, without using a glob. The third affects OVN containers. This patch fixes these issues. Closes-Bug: #1890567 Change-Id: I8921befe51da4282121443849177a7ca5ebe8822
2020-08-27Merge "bifrost: stop sourcing env-vars"Zuul1-1/+1
2020-08-27bifrost: stop sourcing env-varsMark Goddard1-1/+1
This file has been removed from bifrost, and is not necessary for building. Change-Id: Id99d275eca5970e9897bbf3e289c37351ba9bdb5
2020-08-25Clean up the stale FIXED messagezhoulinhui1-3/+0
python-vmware-nsx is not installed anywhere, we don't need the FIXED message thi PS to clean it up Change-Id: I1b05c03002e142c7b0f26808ad423b569140a7bc
2020-08-24Merge "Add glusterfs-fuse package to manila-share container"Zuul1-2/+4
2020-08-24Add glusterfs-fuse package to manila-share containerLinPeiWen1-2/+4
Change-Id: I2b4cfdb25f3ff82d8d6fdebba8b75a818c10a388
2020-08-19Enable mod_wsgi in Ironic API and Inspector containerJames Kirsch3-4/+2
This patch modifies the Dockerfile for both the Ironic API and Inspector so that the 'root' user executes the container setup scripts. This enables the container httpd configuration script to execute. Change-Id: I02b58ac571cd4eb3b9d4a814fe0cb907a3564e23
2020-08-18ironic-pxe: add syslinux-tftpboot on ppc64leYaakov Selkowitz1-1/+1
syslinux-tftpboot was made installable on and shipped for ppc64le in RHEL and CentOS 8.1. Change-Id: I2135d6477d07e8786b81e6e3ea9f3367fc5e3ec6
2020-08-11Remove weird depsRadosław Piliszek12-30/+5
This is a follow-up on "Refactor httpd install to base image" [1]. It seems a copy-paste algorithm was used to craft Dockerfiles for some httpd-enabled services which resulted in an abundance of ldappool packages getting installed, even in the 'source' case. This seems to have also kept ldappool at a lower version because it did not get updated via pip later. This patch deals with that and also moves ldap deps for Keystone to their proper place in 'source' case (extras). Note Keystone client gets installed in openstack-base. Cinder does not need to include Keystone either. [1] https://review.opendev.org/744037 Change-Id: I017d7a6a5d2b1ae6c04556dcf172453a36de5be7
2020-08-10Merge "Refactor httpd install to base image"Zuul26-531/+90
2020-08-10Merge "ubuntu: move to 20.04 Focal"Zuul4-37/+30
2020-08-10Refactor httpd install to base imageJames Kirsch26-531/+90
Refactor installing and initial setup of httpd and mod wsgi from individual services to base image. Change-Id: I651a55a9ebe258ef403d33de010a4dfb368a4021
2020-08-08Merge "Install Monasca plugin for Grafana by default"Zuul1-0/+15
2020-08-07ubuntu: move to 20.04 FocalMarcin Juszkiewicz4-37/+30
There is a time once every 2 years when ubuntu team releases new LTS release. And then UCA joins with binary packages for current OpenStack development cycle. It is this time for Ubuntu 20.04 'focal'. Depends-On: https://review.opendev.org/745156 Change-Id: I045aa6b4b4fd83fbe7d1fda89549f0ef1e88ec12
2020-08-05Add collectd-libpod-stats to imagepleimer1-0/+1
This patch adds the installation of collectd-libpod-stats as part of the collectd image. The package is available in the centos-opstools repo. Collectd-libpod-stats monitors resource usage of running containers on a host, specifically those managed by the libpod library. Upstream: https://github.com/pleimer/collectd-libpod-stats Change-Id: I12efbaae9c0795f29c2f68158127509fd1b543b0 Signed-off-by: pleimer <pfbleimer@gmail.com>
2020-08-05Merge "Add missing horizon plugins for debian based OS"Zuul1-1/+9
2020-08-05Install Monasca plugin for Grafana by defaultIsaac Prior1-0/+15
Change-Id: I472af9ec8cee3462beb5aca04ea6171b79933abe Co-Authored-By: Bartosz Bezak <bartosz@stackhpc.com>
2020-08-05Add missing horizon plugins for debian based OSMichal Arbet1-1/+9
Change-Id: I220fb14a1c5a2bd1fdbc0fa4e5316da41a70c788
2020-08-04Merge "Remove TODO in libvirt script"Zuul1-8/+0
2020-08-03remove duplicate package(planned)wu.chunyang1-2/+0
remove python3-pymysql from placement since it has added into openstack-base Change-Id: Iae240eae5d3e4a9efa42ec73940728775dfc25fb
2020-07-31Remove TODO in libvirt scriptRadosław Piliszek1-8/+0
This is no longer required when Kolla-Ansible is patched. Note this is *not* safe to backport as it requires the user to have Kolla-Ansible patched, i.e. would normally break most. Change-Id: Ic5b9a58d212711a4d6c13822548c92013a6bae50 Related-Bug: #1681461 Depends-On: https://review.opendev.org/735441
2020-07-29Merge "Upgrade Fluentd Monasca plugin"Zuul1-1/+1
2020-07-27Upgrade Fluentd Monasca pluginDoug Szumski1-1/+1
Switch to YAJI JSON parser as suggested in [1]. [1] https://docs.fluentd.org/quickstart/faq#i-got-encoding-error-inside-plugin-how-to-fix-it Closes-Bug: #1889065 Change-Id: I2ecd3b029b956e000feaaa9e10a169521ba53d66
2020-07-27Merge "Remove neutron-server-ovn and neutron-ovn-metadata-agent images"Zuul2-26/+0
2020-07-23Remove neutron-server-ovn and neutron-ovn-metadata-agent imagesMichal Nasiadka2-26/+0
Those have been deprecated in previous cycle - see [1]. [1]: https://review.opendev.org/#/c/701074/ Change-Id: Ifde221e807df75d884a3f8cc4fc29eb0cb303472
2020-07-23Remove neutron-server-opendaylight imageMichal Nasiadka1-62/+0
In [1] we have removed opendaylight image, but left neutron-server-opendaylight image. [1]: https://review.opendev.org/#/c/739446/ Change-Id: Iae312e24a4ff9ab79979328abac3410fbb1a3cc2
2020-07-22Merge "fluentd: migrate to td-agent 4 where possible"Zuul3-6/+7
2020-07-20Merge "copy rootwarp files form venv in ironic base"Zuul1-1/+1
2020-07-20fluentd: migrate to td-agent 4 where possibleMarcin Juszkiewicz3-6/+7
td-agent 4 got released for all distributions we support. For both x86-64 and aarch64 architectures. Change-Id: I86ecdc1ac45dfd76b94a34d1b837f7c0bc975dcd
2020-07-10Merge "Upgrade to Logstash 6"Zuul2-49/+14
2020-07-09introduce 'infra_image_prefix' for infra imagesMarcin Juszkiewicz72-72/+72
Defaults to 'image_prefix' for now but shows which images gets their names changed soon. Change-Id: I0608e8f62f28d6667b4c8753c47553e4cbf75503
2020-07-09Merge "novajoin: install 'freeipa-client' on both Debian and Ubuntu"Zuul1-2/+2
2020-07-09Merge "Fix ceilometer-upgrade params"Zuul1-1/+1
2020-07-09Fix ceilometer-upgrade paramsRadosław Piliszek1-1/+1
It seems [1] has introduced a slight regression in that it tries by default to pass an empty string to ceilometer-upgrade which makes it fail: ceilometer-upgrade: error: unrecognized arguments: (note there is nothing more on that line) This patch fixes that by allowing the params to be of any number, including zero. Backport to Ussuri. [1] 3d587409ee068843cfa28710f09f65af48b69367 Change-Id: I989a1dd30d1656b5c1fda7a46abbf5f265fbb72c Closes-Bug: #1884919
2020-07-08novajoin: install 'freeipa-client' on both Debian and UbuntuMarcin Juszkiewicz1-2/+2
freeipa-admintools got merged into 'freeipa-client' before Debian 'buster'. Ubuntu 'focal' does not have transitional package so let's fix name before we switch to it. Change-Id: I32f62a763b909da787dee1007055197d6a2dbce1
2020-07-07copy rootwarp files form venv in ironic baseSean Mooney1-1/+1
This change modifies the ironic base container to copy rootwarp filters from the virtual env rather than the source code directory. This is need because some required filters have been moved to ironic-lib and are not present in the /ironic dir. The rootwrap filters are not automitaclly installed in /etc/... due to kolla use of virtual envs and https://github.com/pypa/wheel/issues/92 Closes-Bug: #1886663 Change-Id: Idb0a675d92bab8b9a0cf5209f0a06e996e96033c
2020-07-07Upgrade to Logstash 6Doug Szumski2-49/+14
Elasticsearch and Kibana 6 are used on all distros, but Logstash is still pinned at 2 which is not compatible. See the product compatibility matrix [1]. [1] https://www.elastic.co/support/matrix#matrix_compatibility Partial-Bug: #1884090 Change-Id: I1579e762bcfb07f0baa73507eb9955ae2f83c4ec
2020-07-07Remove opendaylight imageMichal Nasiadka5-63/+0
It has been deprecated in Ussuri cycle. Change-Id: I6d3174e8b52cb4d1f2eca4d85d506665dafe2406
2020-07-07Merge "Remove sensu images"Zuul6-177/+0
2020-07-06Merge "Drop systemd support from nsswitch.conf on RHEL-based distros"Zuul1-1/+2
2020-07-06Drop systemd support from nsswitch.conf on RHEL-based distrosMichele Baldessari1-1/+2
A bit like we did for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 we should remove the nss-systemd lookup from containers. The reasons for this are as follows: 1) Just like for I3e0e86026f5a4a78473bed824cd1682d3a020cd5 when this nss module is triggered it tries to talk to dbus. It triggers a bunch of selinux denials and it makes little sense to open all containers to talk to dbus. In particular, if a container is run as non-privileged and bind-mounts /run from the host, we will hit selinux denials like the following: type=USER_AVC msg=audit(1592337775.860:74119): pid=1284 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=406228 scontext=system_u:system_r:container_t:s0:c162,c886 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus permissive=0 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'UID="dbus" AUID="unset" SAUID="dbus" 2) It just makes little sense in a kolla-world to have containers talk to dbus/systemd and it saves us some time when a lookup triggers the systemd module for whatever reason. Especially because the nss-systemd module does a few things which are not useful in a container (ensures that the root and nobody users and groups remain resolvable, SystemD's DynamicUser= feature, provide Lookup API via Varlink) The sed regex gives us the wanted results: $ diff -u /etc/nsswitch.conf.orig /etc/nsswitch.conf --- /etc/nsswitch.conf.orig 2020-06-19 07:18:10.974580755 +0000 +++ /etc/nsswitch.conf 2020-06-19 07:20:12.260230103 +0000 @@ -53,9 +53,9 @@ # group: db files # In order of likelihood of use to accelerate lookup. -passwd: sss files systemd +passwd: sss files shadow: files sss -group: sss files systemd +group: sss files hosts: files dns myhostname services: files sss netgroup: sss Related-Bug: #1883849 Change-Id: I81e5b7abf4571fece13a029e25911e9e4dece673
2020-07-06openvswitch-netcontrold: build alwaysMarcin Juszkiewicz1-9/+0
This is infrastructure package where binary/source split does not make sense. Change-Id: I445134333b50439af20a3ca12757d519fa2624d4
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 18:50:59 +0000