aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2025-08-07keystone: Add local wsgi fileMichal Nasiadka2-6/+5
It has been removed with I9fa7cd60bf27768db06f69681675fce2e55712af Change-Id: Ib42be3d56bdb64247ac6f17b8ac1f1baa873f475 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-06ironic: Stop copying rootwrap since Ironic dropped itMichal Nasiadka2-3/+0
See I0a8e26e8990eae8108537541159f7810d35b70f1 Change-Id: I95500612168871454ce269b3562a8daccdf4de4f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-28Merge "change erlang arm64 repo to rhel based"Zuul1-2/+2
2025-07-25change erlang arm64 repo to rhel basedBartosz Bezak1-2/+2
centos stream diverged too much nothing provides libcrypto.so.3(OPENSSL_3.4.0)(64bit) needed by erlang-26.2.5.14-1.el9.aarch64 Change-Id: I3a0aa82d0903b341156c2fce68393cc4031e7728 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-25Remove temporary fix for skyline-apiserver.Michael Still1-2/+0
skyline-apiserver's Dockerfile has a comment around removing a line when I2dababab7c79e7c37983c1702178419c88e014a5 merges. Given the referenced change has now merged, remove the TODO and the temporary fix. Change-Id: If2b9aff8f1900fb98e038972e775c3eddaad373f Signed-off-by: Michael Still <mikal@stillhq.com>
2025-07-18[base/rhel] Disable docker-ce repository in base fileGrzegorz Koper1-1/+1
Enabling repo should be handled by enable_extra_repos macro Closes-bug: #2117249 Change-Id: I92af980a4fd63540297b6bde0d52b2dfd02f72ce Signed-off-by: Grzegorz Koper <grzegorzk@stackhpc.com>
2025-07-17Merge "Move to CentOS Stream 10"Zuul18-32/+47
2025-07-16Move to CentOS Stream 10Michal Nasiadka18-32/+47
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-14masakari: Ensure log files are owned by masakari userMichal Nasiadka1-0/+3
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/954903 Change-Id: Icc2fe528956a0fb47dd66344d414c81212705480 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-14heat: Ensure log files are owned by heat userMichal Nasiadka1-0/+3
Change-Id: I4567aaf352f1f590af2fa7d067768799adad64d1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-10Merge "ovn: Fix log permissions"Zuul11-0/+44
2025-07-04rabbitmq: fix Erlang pin in Debian/UbuntuBartosz Bezak2-4/+4
Previous apt preference missed the epoch and sub-packages, so no pinning was applied. Closes-Bug: #2115893 Change-Id: I5c765db0508a2ffec90ba149bb5ea9b90dd31bc8 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-04Enable EPEL repo for Ceph deps in glance and gnocchiBartosz Bezak2-2/+2
Ceph Reef client dependencies now require EPEL repo on EL9. See thread here [1]. [1] https://lists.centos.org/hyperkitty/list/devel%40lists.centos.org/thread/BZM3RO2LNAMB47FBT2QO3ZOSGBHPCO3V/ Closes-Bug: #2115448 Change-Id: I87e4135425e721f2f750402b3fcc6404643a3bd3 Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-07-04zun: add wsgi script to use module pathsBartosz Bezak2-1/+3
zun has moved to module paths [1]. [1] https://review.opendev.org/c/openstack/zun/+/953551 Change-Id: I81ad9c5bc404adfdc31eb50fd98e636ae5312eef Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
2025-06-27Merge "Fix glance-api: add missing lsscsi package"Zuul1-0/+2
2025-06-27ovn: Fix log permissionsMichal Nasiadka11-0/+44
ovn is running as root, and fluentd can't read it's log files, so we need to precreate these. Closes-Bug: #2115244 Change-Id: Icb0e47cf95a67cb4585c71f863e542bc59ff5009
2025-06-25Merge "keystone: Remove ARGS to support uwsgi"Zuul1-1/+0
2025-06-23Merge "rabbitmq: Improve healthcheck script output"Zuul1-6/+4
2025-06-23Merge "Remove the OVN exporter for Prometheus"Zuul1-22/+0
2025-06-23Merge "Fix kolla-set-configs --check to detect state mismatch"Zuul1-0/+54
2025-06-19Fix kolla-set-configs --check to detect state mismatchMichal Arbet1-0/+54
If a configuration file is tracked in the state file but no longer appears in config.json, it should either be restored or removed. This patch introduces a new exception StateMismatch and updates execute_config_check() to detect such cases. If any destination path is present in the defaults state but missing from config.json, we now raise StateMismatch. A dedicated unit test has been added to verify this behavior. Closes-Bug: #2114173 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io> Change-Id: I6e0b4aaa5722990e3ac647578023f474db3d4381
2025-06-13Add rsync package to the nova-ssh containerMaksim Malchuk1-1/+2
This change fixes the issue with absent rsync package when 'remote_filesystem_transport = rsync' is enabled in nova_compute. Closes-Bug: #2113926 Change-Id: Ie6719928e4ec2901d661f44c9f259add35afa269 Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2025-06-12add venv path check when set dev modezhengzongwei1-1/+3
Closes-Bug: #2113874 Change-Id: I71003e0d454deaf75f8e2ad2080077a1118af12c
2025-06-11Copy aodh's api-paste to /etc as defaultMichal Arbet1-0/+2
Normally, for other images, we simply copy etc/*, but Aodh has its api-paste located elsewhere. This patch copies the default Aodh api-paste into /etc/aodh/. Signed-off-by: Michal Arbet <michal.arbet@ultimum.io> Change-Id: I5eccc1b994c537e1d1adea21520d045674a9d41c
2025-06-11rabbitmq: Improve healthcheck script outputMichal Nasiadka1-6/+4
We've seen multiple occassions of all these healthcheck commands not being able to be executed in 30s after the switch to RMQ 4.1. Let's put more information in the Docker/Podman healthcheck logs. Change-Id: I4b1b54983144f5514a6703c255d2cb4fa052a0fb
2025-06-09keystone: Remove ARGS to support uwsgiMichal Nasiadka1-1/+0
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/952093 Change-Id: I38688e442b995d38e9826fbb545b6ab09e06bdf5
2025-06-06Remove the OVN exporter for PrometheusDoug Szumski1-22/+0
Since this exporter is no longer developed, and is not used in Kolla Ansible, remove it immediately. A replacement has been proposed in change #951971. Change-Id: Ie47aed221d04bbb2b50ccfbd7c398e6ab6022442
2025-06-05Remove dibbler from neutron-l3-agentAlex-Welsh1-3/+1
The dibbler-client package has been removed from upstream Rocky repos, breaking neutron-l3-agent container image builds on RL9. Since the 2025.1 release, package is no longer used in Neutron has been removed because the project is stale and functionality was untested [1]. This change removes the package from the image build for all distributions. [1] https://review.opendev.org/c/openstack/neutron/+/934283 Closes-Bug: #2112575 Change-Id: I35b233a499c6bf1861b376fc441dc8081cfaf5d6 Signed-off-by: Alex Welsh <alex@stackhpc.com>
2025-06-04Fix ProxySQL rule sanity check to support username-based routingMichal Arbet1-4/+14
Kolla Ansible now generates ProxySQL query rules not only based on the schema name (schemaname), but also on the username. This is needed to properly route queries that are executed before a database schema is selected, such as `SET AUTOCOMMIT` or `ROLLBACK`. To support this, the ProxySQL config sanity check must correctly deduplicate rules based on both `schemaname` and `username`, and avoid false positives when both types are used simultaneously. This change adjusts the logic in `kolla_proxysql_config_sync` to: - recognize rules by key `schema:<schemaname>` or `user:<username>` - assign unique rule IDs only to truly distinct rules - log and skip exact duplicates with appropriate context This fix is required to support the Kolla Ansible patch below. Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/951599 Change-Id: I99acd1984ee555a5b6c731e6ee460a33677060d0
2025-06-03Merge "Update OpenSearch and OpenSearch Dashboards to version 3.x"Zuul2-11/+11
2025-06-03Merge "Bump proxysql to 3.0.x"Zuul2-3/+3
2025-06-02Merge "rabbitmq: Update to 4.1"Zuul4-8/+8
2025-05-31Merge "kolla-toolbox: Fix apt_preferences_rabbitmq.ubuntu link"Zuul1-1/+1
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski2-11/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet2-3/+3
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30debian: Use Epoxy extrepoMichal Nasiadka1-1/+1
Change-Id: I1ba004df309667460aa152928f789aaf6be6051f
2025-05-30[base] Ensure full control over APT sources for UbuntuMichal Arbet2-4/+2
Ubuntu images were occasionally failing to build due to unavailability or slowness of the official Ubuntu security repositories. Although Kolla uses `mirror://` URLs to leverage Ubuntu mirror infrastructure, the original `/etc/apt/sources.list.d/ubuntu.sources` file was still present, causing the system to fallback to default sources. This commit aligns Ubuntu behavior with Debian by explicitly removing the distro `.sources` file and relying solely on the sources configured by Kolla. This ensures consistent and reproducible builds both in CI and on local environments. Closes-Bug: #2112140 Change-Id: I00bcb30662bb12ed8711b28a64ef1941dcce893a
2025-05-30[mariadb] Fix incremental backup using correct base dirMichal Arbet2-47/+77
The original script used --incremental-history-name and compressed full backups as gzip streams. This failed because mariabackup expects an actual decompressed base directory for incremental backups. This patch: - Decompresses the latest full backup into a temporary directory - Uses that as --incremental-basedir - Aligns the backup flow with official Mariabackup documentation: https://mariadb.com/kb/en/incremental-backup-and-restore-with-mariabackup/ This makes the incremental process reliable and fully supported. Closes-Bug: #2111620 Change-Id: I562ce5e54752015863a20bf113bce74a69e02331
2025-05-30Fix glance-api: add missing lsscsi packageJoachim de Groot1-0/+2
Closes-Bug: #2111828 Change-Id: I8e20c77a8f1538162fc1dac9dc92c837348a09f4
2025-05-20rabbitmq: Update to 4.1Michal Nasiadka4-8/+8
Change-Id: I4f852176918531ea19210961fd1b4fa63bc0ecca
2025-05-20kolla-toolbox: Fix apt_preferences_rabbitmq.ubuntu linkMichal Nasiadka1-1/+1
Change-Id: I1f9bc50b71f55dd5f579d1536a7ab63d5d554d1e
2025-05-15Revert "mariadb: pin to 10.11.11"Michal Nasiadka1-1/+1
This reverts commit 535b2f270faf24cfa30b9aa1a896a62c5090f1aa. Reason for revert: 10.11.12 is revoked upstream Change-Id: I0a8cdc232e5b46cb47e4a3e1b0af7b2402103690
2025-05-07mariadb: pin to 10.11.11Michal Nasiadka1-1/+1
Temporarily disable upgrade jobs to get epoxy rc1 branched this week. Closes-Bug: #2110122 Change-Id: If301b9ebd7d0dc38bea4d60467e8e80a7a49825d
2025-05-06Merge "Allow specification of a key type"Zuul1-3/+9
2025-05-06Merge "bifrost: fix creation of python3 lib symlink"Zuul1-1/+2
2025-05-06Merge "Enabling support for Thales Luna user id and group id."Zuul1-1/+1
2025-05-05Merge "neutron: Add agents wrappers in the neutron-base image"Zuul12-0/+288
2025-05-05neutron: Add agents wrappers in the neutron-base imageMichal Nasiadka12-0/+288
These scripts have been based on TripleO version of the same feature. Unfortunately due to the fact that Neutron/python is stripping env vars when it's running dnsmasq/haproxy/etc processes - we need to do the ,,config'' handling in copy-wrappers script. Change-Id: I679ac66186d457ae53f89469fe22c5662089019a
2025-05-02bifrost: fix creation of python3 lib symlinkPierre Riteau1-1/+2
When {{ venv_path }}/lib/python3 already exist and we run the ln command, we end up with: /var/lib/kolla/venv/lib/ ├── python3 -> python3.9 ├── python3.12 │   └── site-packages └── python3.9 ├── python3.12 -> python3.12 └── site-packages Instead, it should be: /var/lib/kolla/venv/lib/ ├── python3 -> python3.12 ├── python3.12 │   └── site-packages └── python3.9 └── site-packages Remove the existing link first to ensure it is created properly. Change-Id: I42dd2490d14070074fe1fa7ae9e0a4cbf095b06f
2025-05-02Enabling support for Thales Luna user id and group id.Mauricio Harley1-1/+1
The new client software version requires the use of a specific group called "hsmusers", and for consistency reasons, we are specifying both, the user id and the group id, and inserting the Barbican username inside of such a group. More information can be found on https://www.thalesdocs.com/gphsm/luna/7/docs/pci/Content/install/client_install/linux_install.htm Change-Id: Ib7d0c879b3741ca472cd0bbf3a9a88a0fee25cac Signed-off-by: Mauricio Harley <mharley@redhat.com>
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 01:30:32 +0000