aboutsummaryrefslogtreecommitdiff
path: root/docker
AgeCommit message (Collapse)AuthorFilesLines
2023-01-25Add util-linux to centos base packagesMichal Nasiadka1-9/+10
Currently /usr/sbin/nologin is missing, because util-linux is not installed in the image. Change-Id: I717b4f2215054ef9135a1ac252ed26820bdcb1aa
2023-01-20sahara: install netcat-openbsd on Debian/UbuntuMarcin Juszkiewicz1-1/+1
By default in both Debian:11 and Ubuntu:22.04 'netcat' means 'netcat-openbsd'. Debian 'bookworm' 12 will not have such default. So let install proper package. Change-Id: I9795fca15aa3e9d59eb686ff749245bf618639cf
2023-01-18grafana: remove SHA1 workaroundMichal Nasiadka2-9/+0
Change-Id: I08fe2827bc58baa95d396daf28de1079e3df4f77
2023-01-16relay non-zero exit codes when creating openvswitch bridgesErik Panter1-4/+3
Calls to `ovs-vsctl` in `ovs_ensure_configured.sh` did not get checked for errors. This can cause false success statuses when the script is run by automation tools such as ansible. Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/870540 Closes-bug: #1999778 Change-Id: Iad83132b61efadbf09aa9aa2edf96235085764c6
2023-01-04Drop skydiveMichal Nasiadka4-84/+0
The project is not maintained anymore, last commit is 8th Jan 2022. Change-Id: Iefbc3481925156dd267c696c8ab8b306637f5564
2023-01-03Merge "CentOS: move gpg keys to repo files"Zuul4-4/+3
2023-01-03Merge "Do not use mistral user for mistral-api"Zuul1-2/+0
2023-01-03Do not use mistral user for mistral-apiArnaud Morin1-2/+0
Mistral-api is started using wsgi and apache2 in the container need to start with the root user, like nova-api. Closes-bug: #2000915 Signed-off-by: Arnaud Morin <arnaud.morin@ovhcloud.com> Change-Id: Icace8576dcf0085a5e51eb453cbad2ac89c7358e
2023-01-02CentOS: move gpg keys to repo filesMarcin Juszkiewicz4-4/+3
Definition of 3rdparty repo can contain also url to gnupg key used to sign files there. DNF knows how to handle that so we do not need to import keys in base image anymore. Functionality stays as people may use own repos with own keys. Change-Id: I88e8e86ca35ee1b6b6b5551c3ca8698f0ed814cb
2022-12-22Change libvirt-exporter repo to TinkoffMikhail Kraynov1-2/+2
libvirt-exporter repo has been moved from AlexZzz (https://github.com/AlexZzz/libvirt-exporter) to Tinkoff organization and is maintained by this organization now. The old link redirects to the new one. This commit prevents unnecessary redirect and adds clarity. Change-Id: Ie810149de353e12655994ba9ef371c85dea7f7a8
2022-12-07Merge "Drop elasticsearch, kibana and logstash"Zuul15-246/+0
2022-12-07Merge "mariadb: update clustercheck branch to match db version"Zuul1-1/+1
2022-12-06Merge "Remove monasca, kafka, storm and zookeeper."Zuul20-612/+1
2022-12-06Drop elasticsearch, kibana and logstashMichal Nasiadka15-246/+0
Support has been dropped in kolla-ansible, the upgrade path is opensearch. Change-Id: I6f32aacb4e0b7dd1eb7206e02425b16f5beae4f0
2022-12-06Remove monasca, kafka, storm and zookeeper.Michal Nasiadka20-612/+1
Monasca, kafka, storm and zookeeper have been removed in kolla-ansible [1],[2]. [1]: https://review.opendev.org/c/openstack/kolla-ansible/+/861392 [2]: https://review.opendev.org/c/openstack/kolla-ansible/+/865029 Change-Id: I0958a9353bc4585c4f65a1d316328a0e80b0b8b7
2022-12-06opensearch: fix footer nameMichal Nasiadka1-1/+1
Change-Id: I886da6215c20a3d0227b4ee5d603a7e416929618
2022-12-01mariadb: update clustercheck branch to match db versionMichal Nasiadka1-1/+1
Change-Id: I99bda6801995727dbeaa07219f336e22c8346ada
2022-11-16Add Opensearch image(s)Piotr Parczewski4-0/+99
Handles x86-64 and aarch64 targets. Change-Id: I70e2bb1d2744d38e08f5a9a79ab6a7265ebf24c9
2022-10-27Merge "Revert "ci: disable usage of EPEL mirror""Zuul2-4/+4
2022-10-27Revert "ci: disable usage of EPEL mirror"Michal Nasiadka2-4/+4
This reverts commit 0fa3fd885e03e887b11b2c960564a92c423a360e. Reason for revert: OpenDev mirror should be fixed now Change-Id: Ibf85ae4b5b374b4831b9ba33addd896c0507e8aa
2022-10-27rabbitmq: use Erlang 25 on AArch64/CentOS/RockyMarcin Juszkiewicz2-20/+2
We switched repo to provide Erlang 25 but not switched to it. Change-Id: I8b0a2f27ccb3db61a38d8fe89676f99eed1e3d75
2022-10-27ci: disable usage of EPEL mirrorMichal Nasiadka2-4/+4
It's broken now - let's stop using it. Change-Id: I4d881e6a1af07f7c6cf4547cac72e971bfadeefb
2022-10-18Merge "rabbitmq/aarch64: use COPR for Erlang"Zuul3-12/+12
2022-10-18Merge "rabbitmq: use Erlang from PPA on Debian/Ubuntu"Zuul3-15/+3
2022-10-18rabbitmq/aarch64: use COPR for ErlangMarcin Juszkiewicz3-12/+12
RabbitMQ team maintains RPM package in Github repo [1]. Hrw then use it to build package using COPR service [2]. This way we have latest Erlang on both distributions and both architectures. 1. https://github.com/rabbitmq/erlang-rpm/ 2. https://copr.fedorainfracloud.org/coprs/hrw/erlang-for-rabbitmq/ Change-Id: I425ae2fab78e80ff56f21fd1b24708906ec32342
2022-10-14Bump node_exporter to 1.4.0Pierre Riteau1-1/+7
Change-Id: I947a0b9155fea18a7781f694dbeafc49033fef8e
2022-10-14rabbitmq: use Erlang from PPA on Debian/UbuntuMarcin Juszkiewicz3-15/+3
PPA from Team RabbitMQ [1] provides newer Erlang for Debian/Ubuntu. This way we have latest Erlang on both distributions and both architectures. 1. https://launchpad.net/~rabbitmq/+archive/ubuntu/rabbitmq-erlang Change-Id: Iec7e8461f9eb757e1576cf3898068306c5436239
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek42-48/+8
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-10-09Fix Swift deployment issueMaksim Malchuk1-0/+2
Swift deployment is broken since CVE-2022-38060 fixed sudoers file in the I66476a2b396e2cbe41e68ac51f57aae1806b2ed8. The kolla-toolbox container have their own virtualenv path differs from all other containers. This change adds the correct sudoers secure_path configuration needed only for kolla-toolbox conainer. Related-Bug: #1985784 Change-Id: I3651576ee354364d639c187ff750491667ecab56 Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2022-10-07Merge "Support qemu block rbd in nova-compute"Zuul1-0/+2
2022-10-05Merge "kolla-toolbox: bump ansible-core to 2.13"Zuul2-4/+1
2022-10-05Merge "CI/centos/rocky: use repos from opendev mirror"Zuul2-0/+110
2022-10-05kolla-toolbox: bump ansible-core to 2.13Michal Nasiadka2-4/+1
Change-Id: I13e3cf5a02dadcedd1ebbd54d56f7f633e6e3d68
2022-10-04Support qemu block rbd in nova-computeRadosław Piliszek1-0/+2
This is necessary if using nova-compute with RBD backend (directly, not via Cinder) and wishing to make an instance image to Glance while (1) following the recommended Ceph permissions which do not give Nova write permissions to the images' pool or (2) not using RBD with Glance or (3) not revealing what Glance actually uses as the backend (hiding locations). Change-Id: I88e1e0ca01b2b2effad9515b905cc761fbb5d2d4
2022-10-04debian: swtpm is in backportsMarcin Juszkiewicz1-2/+3
We need to mark swtpm/libtpms in APT preferences to make it installed on AArch64. Change-Id: Ibee94fe5a6217048eef01aa24ebed6ee05aae8de
2022-10-03Merge "proxysql: Use almalinux for centos/rocky9"Zuul2-2/+2
2022-10-03CI/centos/rocky: use repos from opendev mirrorMarcin Juszkiewicz2-0/+110
Repo definitions in RHEL 9 rebuilds use metalink method for most of entries which makes our use of sed obsolete. This patch adds file with definitions of all CS9 repos we use and moves all official definitions a side at start of build. After build our definitions get removed and official ones are restored. Similar is done for RockyLinux 9 builds but there RL9 repos are used from official mirrors while CS9/EPEL ones are from OpenDev mirrors. Final images will have repos in wrong enabled/disabled state. Change-Id: I04121fd5ca9894b6deeda3808808cbffd6b97811
2022-10-03proxysql: Use almalinux for centos/rocky9Michal Nasiadka2-2/+2
As per https://github.com/sysown/proxysql/issues/3989 Change-Id: If077d60e9efd29fab80f4f5188a4f54015734a92
2022-10-03Fix ironic-pxe EFI path for rockyMichal Nasiadka1-2/+2
Change-Id: I6c82ef5b148b3ebdc8241871117dbe6cd68ed070
2022-09-30Add RockyLinux 9 supportMichal Nasiadka4-20/+11
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-29Merge "debian: use Erlang 24 on AArch64"Zuul1-0/+6
2022-09-29Merge "use Erlang 24 on Ubuntu/AArch64"Zuul1-0/+6
2022-09-29Merge "centos: use Erlang 24 on AArch64"Zuul3-13/+24
2022-09-29debian: use Erlang 24 on AArch64Marcin Juszkiewicz1-0/+6
There are no Erlang 25 packages for Debian/AArch64. Change-Id: Ice5a7b4cbb61365bb81334ca7af92fac6739fe41
2022-09-29use Erlang 24 on Ubuntu/AArch64Marcin Juszkiewicz1-0/+6
There is no Erlang 25 package with for Ubuntu/AArch64. Change-Id: Ie07a6b821db0557c5e373037183082604acda4bd
2022-09-28Merge "repos: in CentOS Stream 9 haproxy is in appstream repo"Zuul1-2/+0
2022-09-28centos: use Erlang 24 on AArch64Marcin Juszkiewicz3-13/+24
We do not have Erlang 25 for CentOS Stream 9 on AArch64 so we revert to use Erlang 24 from CentOS repository. Also synced Erlang and RabbitMQ versions between images. Change-Id: I1480de095eaea66c3a83a61ca3ff269953181e39
2022-09-28Merge "nova-libvirt: provide TPM emulation"Zuul1-0/+2
2022-09-27repos: in CentOS Stream 9 haproxy is in appstream repoMarcin Juszkiewicz1-2/+0
So we do not need to define repo for it like it was in past. Change-Id: I9e22a43e068490d762c42a7bb491e445a715381b
2022-09-27Merge "Don't ignore the remaining apt-get update errors"Zuul2-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-06 14:53:31 +0000