aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2025-03-17debian: Use Dalmatian extrepo releaseMichal Nasiadka1-1/+1
Change-Id: I954106dc32b4c08604d5c40e00fe53e5bb18b266
2025-02-25[release] Use UCA EpoxyGrzegorz Koper2-2/+2
Change-Id: I6c15cf0fd7b8f1cc3339936c58ad8a8581cfc570
2025-02-18Allow to use configure_user macro for external templatesAndriy Kurilin1-0/+3
Commit 79a234239516b94b1b79c7ddafcc4fbe4e3ba155 introduced an ability to build 'in-house'/'not-built-in' projects with Kolla. This commits extends this feature with an ability to use configure_user macro for 'not-built-in' users. The implementation is done the same way as for 'sources', i.e. engine after registers new section structure as soon as it finds unknown '<project>-user' section. In addition, the documentation and CI are extended to cover ``--docker-dir`` option. Change-Id: I690d9f3829083f2493bf286a1c45764b9699219b
2025-02-14Merge "Add ovn-sb-db-relay image with newer ovn-ctl"Zuul1-0/+15
2025-02-11Merge "Adds missing nvme package in cinder-backup"Zuul2-3/+3
2025-02-07Fix permissions for ironic metricsMichal Arbet3-1/+14
This patch adds creation of metrics folder, set permissions and SetGID bit. Closes-Bug: #2097098 Change-Id: Ic46b895775edf5e5fb2b637be49e2de1eb4adf36
2025-02-06Install pycadf from pypi packageMichal Arbet10-13/+10
Previously, the `pycadf` package did not include configuration files, so they were manually installed from source. However, this was fixed in pycadf's upstream in [1], allowing us to rely on the package itself. Additionally, the `ceilometer_api_audit_map.conf` file has been removed, as it was dropped in pycadf's upstream commit here [2] [1] https://review.opendev.org/c/openstack/pycadf/+/936741 [2] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I022aa4c403f08385beb83b5d0c81f8abb42eb4a7
2025-01-31Bump pycadf version to 4.0.1Michal Arbet1-1/+0
This patch also removing copy of ceilometer_api_audit_map.conf file as it is now removed [1]. [1] https://review.opendev.org/c/openstack/pycadf/+/930971 Change-Id: I7c086ed5da0e3713ac15aaeaceb38f4a05b84bf0
2025-01-29Merge "cinder: Fix log dir permission"Zuul1-0/+3
2025-01-24Add ovn-sb-db-relay image with newer ovn-ctlMichal Nasiadka1-0/+15
We need newer ovn-ctl with [1] - for now download that from ovn-org/ovn@master - once 25.03 is branched we should get that the normal way. [1]: https://github.com/ovn-org/ovn/commit/2ecba75432cf90ffb5d6a3a53b8aed521ecf0f44 Change-Id: I429f00ed4bdcd24409d14453ab53c5fa11fdb00b
2025-01-13Merge "openvswitch: Fix logs dir permission"Zuul3-0/+12
2025-01-13openvswitch: Fix logs dir permissionMichal Nasiadka3-0/+12
Closes-Bug: #1795609 Change-Id: Iedfb2df027c0cefc45668a76d45ce62193aba9ef
2025-01-13ironic: Fix dnsmasq.log permissionsMichal Nasiadka2-0/+15
Closes-Bug: #2093881 Change-Id: I3f45178c07a9cd054e572ff80d0e19fb014d69d3
2025-01-13Adds missing nvme package in cinder-backupFelipeAFV2-3/+3
The package moved to the cinder-base image since it already added to the cinder-volume in I84c7633765749a5e9ced983505ef290c32154ccc. Closes-Bug: #2089587 Change-Id: I06e61ab388d9ecfa78e5d1fe1ae9cb8602d1cd36 Signed-off-by: FelipeAFV <ffigueroa@whitestack.com> Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2025-01-10Merge "[letsencrypt] Rename script for updating certificates"Zuul3-3/+3
2025-01-07Merge "neutron-dhcp-agent: change dnsmasq.log rights"Zuul2-0/+11
2025-01-07neutron-dhcp-agent: change dnsmasq.log rightsMichal Nasiadka2-0/+11
Fixes /var/log/kolla/neutron/dnsmasq.log rights so fluentd can read logs from that file. Closes-Bug: #1693712 Change-Id: I57e36ef07e8840eead2efde77e0ab9dfd4842931
2025-01-02Merge "Time mismatch in /etc/localtime and /etc/timezone"Zuul1-1/+3
2024-12-30Merge "Remove setuptools pin"Zuul2-1/+3
2024-12-23cinder: Fix log dir permissionMichal Nasiadka1-0/+3
In order to add support to uwsgi (which is opening the log file after dropping privileges) we need to set proper permissions for /var/log/kolla/cinder directory Change-Id: I46da8fad93febbc462cbe42a0d96ef7d423b8965
2024-12-19Merge "Move uwsgi installation to openstack-base"Zuul2-7/+3
2024-12-18[letsencrypt] Rename script for updating certificatesMichal Arbet3-3/+3
This patch renames the update-haproxy-cert script to update-loadbalancer-cert to make the name more generic. The change is necessary because support for ProxySQL will be introduced in the next patch, requiring a name that reflects broader applicability. To keep the diff in the following patch clean and easier to review, this patch focuses exclusively on the rename. Change-Id: I15f9b5cf3976f4298cdc7da4530f2d7d09614e88
2024-12-16Merge "magnum: Add helm binary for magnum-cluster-api"Zuul1-0/+3
2024-12-13magnum: Add helm binary for magnum-cluster-apiMichal Nasiadka1-0/+3
Closes-Bug: #2091608 Change-Id: I52105f6cbf7529ce107cabf8a38a10525be7435c
2024-12-11Fix EAB support in letsencryptMichal Arbet1-10/+12
This patch fixes recently merged [1] patch. - Original patch added params function args eab, hmac, key_id, but then EXTERNAL_ACCOUNT_BINDING_OPTS var is passed into obtain_or_renew_certificate which can't work - This patch correctly set EXTERNAL_ACCOUNT_BINDING, HMAC, KEY_ID defaults and then call obtain_or_renew_certificate function with them. This will ensure that arguments are always set, so we can write if condtional correctly and process. [1] https://review.opendev.org/c/openstack/kolla/+/916617 Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/933924 Change-Id: I406ff10edec9dc94b1a3de005080e149ee3ab3f2
2024-12-11Remove setuptools pinMichal Nasiadka2-1/+3
Change-Id: I7d08ebb65e2de82e3edba7bd9307b2b6ac8cb7a8
2024-12-11Merge "Revert "[release] Use Dalmatian sources by default""Zuul2-1/+2
2024-12-11Merge "Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean ↵Zuul3-18/+14
(Dalmatian)""
2024-12-10Revert "[release] Use Dalmatian sources by default"Michal Nasiadka2-1/+2
This reverts commit 5af5febf50bc0a02422b437b16598570d0c5ffe3. Reason for revert: Epoxy cycle is on In addition to the revert skyline-apiserver aiosqlite u-c is removed until [1] is merged, designate rootwrap.conf.sample file has been renamed to rootwrap.conf and pycadf is bumped to 4.0.0. [1]: https://review.opendev.org/c/openstack/skyline-apiserver/+/935604 Change-Id: I1265633f0913b7927955564fac911a682615004a
2024-12-09Time mismatch in /etc/localtime and /etc/timezonePiotr Milewski1-1/+3
Python3-pip installs the dependent package tzdata and blocks the mount of the /etc/localtime file in docker. After deleting the symbolic link docker correctly mounts the external localtime file. Applies only to ubuntu 24.04, in previous versions of ubuntu there was no such problem Closes-Bug: #2091161 Change-Id: I733a50b5ca455cfa4b248dc324500d78c17c817b
2024-12-05Merge "Add Let's Encrypt EAB support"Zuul1-3/+29
2024-12-05Add Let's Encrypt EAB supportPiotr Parczewski1-3/+29
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/935656 Change-Id: I0b20d82a0061062f8aa9dfe179b1d02708ad610e
2024-12-02Change copy-cacerts behaviourRoman Krček1-19/+40
So far, the certificates were not part of config.json files for containers. With future patches that will remove container restarts based on triggers from config and service-copy-cert, it is important that all files that change during config are specified in config.json so that kolla-set-configs --check can detect those changes and based on that restart the container. This patch provides prerequisite for future patch in kolla-ansible. Comments from kevko: The script also takes into account whether review [1] is merged or not, ensuring that it will function correctly in both cases thanks to review [2], because using the state file, we can effectively verify whether the config.json that copies CA certs to /var/lib/kolla/share is being used or not. If we didn’t handle it this way, we would have to rely on checking whether the directory /var/lib/kolla/share exists or some another magic, which is insufficient because various states and combinations of Kolla image and Kolla-Ansible versions could result in certificates always being copied. This method provides a clear and definitive distinction. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/924651 [2] https://review.opendev.org/c/openstack/kolla/+/915440 Change-Id: I5120f1874f25a9ca8326e6db8b12dee4c81feb56 Signed-off-by: Roman Krček <roman.krcek@tietoevry.com> Co-Authored-By: Michal Arbet <michal.arbet@ultimum.io> Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/924651
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka3-18/+14
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-11-21Move uwsgi installation to openstack-baseMichal Nasiadka2-7/+3
Change-Id: I581ff79993d011b421d69295a6552cb14b8e2e66
2024-11-15Add mechanism for patching files in containersMichal Arbet205-4/+516
This patch adds a way to patch files in a Docker image built by Kolla. This is very useful for several reasons, specifically: - Custom modifications - The stable branch of some library has a fix but no pip package has been released - Eliminates the need to package your own pip packages - Eliminates the need to invent your own versioning to prevent upstream versioning - Eliminates the need to manage a pip server - In other words, it eliminates the need to get a wheel into the image and install it manually using any method not previously mentioned It is also highly desirable because, although Kolla can replace the source for a service with a custom URL for a tarball or its own Git repo, it cannot do this for dependencies pulled from pip. I would also like to point out that this is a feature with its own code path and works only if the user "inserts" a patch into the folder patches/docker-image/something.patch and creates an analogous series file for patch source code. Simply said, this code will never interfere with the upstream build process since this feature is not intended for use in upstream. It is rather meant for downstream users who know what they are doing. Now they just have an option to patch their images. Everything works on all layers of the Docker image and stores a report of applied patches which can then be seen in /etc. This mechanism is similar as debian patch quilt. Change-Id: I61d0790c5d4d070b7ea9e8c99c0a76ff5d22bf9d
2024-11-06Fix handling configs in base imageMichal Arbet1-0/+151
This commit restructures the handling of configuration files in set_configs.py, introducing functions for managing default configuration files first. Closes-Bug: #2060855 Change-Id: If91e0330dc149143c82d2183b8ddf6fa9f68d80e
2024-11-05Enhance logging format for better readabilityMichal Arbet1-1/+5
Added timestamp with milliseconds, log level, and custom date format to improve clarity and make logs more useful for debugging. Change-Id: Ice2d601eddb54bbb0e7e3be6f03ba6db58256c1f
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka3-14/+18
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2024-10-22Merge "Fix missing tss user in Ubuntu/Debian nova containers"Zuul2-0/+2
2024-10-22Fix missing tss user in Ubuntu/Debian nova containersRafal Lewandowski2-0/+2
Closes-Bug: #2067050 Change-Id: Ife426c073048ff27bdfd9f3af30aaaab8c2e4497
2024-10-09Add way to backup from MariaDB replica serverMichal Arbet2-1/+139
ProxySQL reports its version to MySQL clients, causing the backup process to fail when ProxySQL is used. This patch adds a new script that handles backups from the replica server directly, without modifying the original backup script. The new script retrieves the server address via the load balancer and connects directly to the replica server to execute the backup. Moreover, this reduces the risk that the backup will be inconsistent or that it will block OpenStack MySQL clients, because they are connected to a different server, and no one is connected to the replica, or that it will overload the load balancer (such as ProxySQL or HAProxy) which listens on the VIP. Closes-Bug: #2080818 Change-Id: Ibf7e40e8b059d733e114963022df06180249c650
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul2-3/+3
2024-10-03aarch64: Exclude syslinux from ironic conductor packagesBartosz Bezak1-1/+5
The 'syslinux' package is not available on aarch64, so it is only included in the ironic conductor packages for x86_64 systems. Related-Bug: #1749780 Change-Id: I3eea308a0a70e47dd3b185eece106185b25616f5
2024-10-03aarch64: fix name of rabbitmq copr repoBartosz Bezak1-1/+1
it should be the same as in repos.yaml Change-Id: Ieb413f7a4bd1989d7f29309368b6b218d1395e0b
2024-10-02Merge "erlang/aarch64: Move to openstack-kolla owned COPR"Zuul3-12/+12
2024-10-02erlang/aarch64: Move to openstack-kolla owned COPRMichal Nasiadka3-12/+12
Change-Id: I219418411470bdeae9af84277f5150a623c05e69
2024-10-01Bump proxysql to 2.7.xMichal Arbet2-3/+3
This patch bump proxysql 2.6.x to 2.7.x Change-Id: I6e726d8ebf9dbc6d019dd72d6d0be9d9957a3f22
2024-09-30Switch to Ubuntu 24.04 LTSMichal Nasiadka3-16/+10
Add setuptools because Python3.12 dropped distutils Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/925581 Change-Id: Ie12c43dc1de122c203edc28181366457ccd67834
2024-09-30Added systemd-standalone-sysusers package for DebuntuMichal Arbet1-0/+1
This package provides a standalone sysusers binary with minimal dependencies, designed for use in non-systemd environments. This package simply ensures that all packages that want to install systemd as dependency will have to settle for this one because the systemd package breaks systemd-standalone-sysusers, as it is an alternative. [1] https://packages.debian.org/bookworm/systemd-standalone-sysusers [2] https://packages.ubuntu.com/noble/systemd-standalone-sysusers Change-Id: I3ba85069c265844bd2f8b5e6d2b14f32e4898cfd
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 21:41:07 +0000