aboutsummaryrefslogtreecommitdiff
path: root/kolla/template
AgeCommit message (Collapse)AuthorFilesLines
2026-10-14Use gazpacho for UCAMichal Nasiadka1-1/+1
Unfortunately Hibiscus will not have a Noble/UCA dist. Closes-Bug: #2170813 Related-Bug: #2170815 Change-Id: Id65412f12d7f6a4689c059a8d1bd8ec910d89653 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-09-10Drop support for CentOS Stream 10Michal Nasiadka2-20/+2
Change-Id: I5973943fe83bbb00cfc8623c0cd4d4b98b369315 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-08-05Add cleanup_repos to revert build_only overridesMichal Nasiadka1-31/+158
Repos marked build_only: true are backed up before handle_repos() overwrites them and restored at the end of each image build, so CI mirror URLs are not baked into the final image. The cleanup RUN was injected into every Dockerfile, not just images that called handle_repos() for those repos. Child images with no backup fell through to "rm -f", deleting the inherited repo file (e.g. debian.sources in bifrost-base, breaking cpio install). Fix by adding a {repo}.enabled sentinel that handle_repos creates when it processes a build_only repo, making the cleanup conditional on that sentinel. Change-Id: Ie5b9970a4575b6258dc238059d3f33ddfe155789 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09Update docstring in handle_reposMichal Nasiadka1-5/+13
Change-Id: Ic088f5a85f3c033b0c5024d0b2e1bc889c52648d Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09Add support to override base reposMichal Nasiadka2-25/+124
BaseOS and AppStream for CentOS/Rocky ubuntu, ubuntu-security for Ubuntu debian, debian-security for Debian ubuntu-cloud-archive is not really a base repo - so removing it from ubuntu.sources Change-Id: Iab98de963f2e8532389b7563bb572d8aa20c7aa6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-29Add opt-in SPICE support for Rocky via COPR.Michael Still1-0/+5
RHEL9 dropped SPICE support from qemu-kvm, and Rocky Linux followed suit. Up until now the documented guidance has been to use the Debian or Ubuntu container images if you want to serve the ``spice-direct`` console type, because the stock Rocky nova-libvirt image will simply fail to start any SPICE-enabled instance. This change adds a second version of the nova-libvirt container image called nova-libvirt-spice. It is always built, but is identical for all supported container base distributions except for Rocky Linux. In the Rocky Linux case, this container adds the community maintained ligenix/enterprise-qemu-spice COPR repository that provides a rebuild of ``qemu-kvm`` with SPICE support re-enabled for both EPEL 9 and EPEL 10. Which nova-libvirt container should be used in a given deployment is delegated to logic in kolla-ansible, based on the deployer's settings in globals.yml. The COPR is a third-party rebuild with no vendor support contract. The release note and support matrix are updated to describe the opt-in path and call this caveat out explicitly. The earlier "you must use Debian or Ubuntu" wording in the support matrix is softened here, rather than by retroactively editing the kerbside container-build patch that introduced it, so that this feature can land (or not land) independently of the earlier change. Partial-Bug: #2131793 (spice-direct consoles) Prompt: I am interested in seeing how we would go about using https://copr.fedorainfracloud.org/coprs/ligenix/enterprise-qemu-spice/ to add SPICE support back to the Kolla build Rocky Linux containers as a new patch in the kolla/ORDER list. Could you please investigate options here? Assisted-By: Claude Code Co-Authored-By: Claude Opus 4.7 (1M context, medium effort) <noreply@anthropic.com> Change-Id: I410b87b7f8cdd541c48d9a749b3fea634a5f4e6c Signed-off-by: Michael Still <mikal@stillhq.com>
2026-06-16repos: Merge user-provided with default repos.yamlMichal Nasiadka1-8/+11
Change-Id: I7513f1ab627aa5137e16777ca6bee600e14a00e9 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-06-01httpd: Install mod_auth_mellon from EPELMichal Nasiadka1-4/+0
And remove the redundant comment and repo enablement in keystone container. Change-Id: I3a64b13fcaef62c73cccc9c478e7392efc8ee554 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-05-08Remove influxdb from repos.yamlMichal Nasiadka1-9/+0
It was ommitted in the original influxdb removal patch [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/973051 Change-Id: Ie28d1cc615cc09f013438285b4dcbc2dbab0f4b5 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-03-25Update Ceph Squid RPM repo to centos-10-streamSeunghun Lee1-1/+1
Change-Id: I530a0f710507c8f959ccf10e4d3560372e800a05 Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2026-03-12Update ProxySQL 3.0.x RPM repo to use almalinux 10Seunghun Lee1-1/+1
Change-Id: Ic79e5385607f6241cefb5d16d6d233fde814899f Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2026-01-20Merge "opensearch: Fix repository name"Zuul1-1/+1
2026-01-09Update repo GPG key for influxdata.Michael Still1-1/+1
According to https://www.influxdata.com/blog/package-signing-key-rotation the preferred signing key for influxdata package repositories changed in early 2026. Update to the new preferred key. Closes-Bug: #2138095 Change-Id: I77d38e713678ea653ded3b14fd0541d3ec0ebee6 Signed-off-by: Michael Still <mikal@stillhq.com>
2025-12-19opensearch: Fix repository namePierre Riteau1-1/+1
Change-Id: If59a55b758f48b7b89beb3b0dd94f1b8002cee73 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-12-16Switch to Debian TrixieMichal Nasiadka1-9/+10
Change-Id: Ib7f551d4a7c6ffe95786853d6899e704de4747b8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-11-18Transition to the new rabbitmq Debian package archives.Michael Still1-4/+4
RabbitMQ announced some time ago that the package archives were moving: https://www.rabbitmq.com/blog/2025/07/16/debian-apt-repositories-are-moving The old location is no longer working, so this patch transitions to the new one. Closes-Bug: #2131736 Change-Id: I6ef0ed9cc40be42a0d98c6a4c83c5c5c26d9cdbf Signed-off-by: Michael Still <mikal@stillhq.com>
2025-10-14mariadb: Bump to 11.4Michal Nasiadka1-4/+3
11.4 is the next LTS release (see [1]) New variable ``VERIFY_DB_SERVER_CERT`` is added to mitigate the MariaDB client variable ``ssl-verify-server-cert`` change from ``FALSE`` to ``TRUE``. [2] This variable can be overidden by assigning ``TRUE`` to environment variable with the same name. [1]: https://mariadb.org/11-4-lts/ [2]: https://jira.mariadb.org/browse/MDEV-31857 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/928487 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/958281 Change-Id: Ifb41c0c48c4743e70e95fa7e1d329e91362e966c Signed-off-by: Seunghun Lee <seunghun@stackhpc.com>
2025-10-10repos: Deduplicate repos.yamlMichal Nasiadka2-169/+74
Introduce rpm/deb entry in repos.yaml, create a structure [base_package_type]: [base_distro]: [base_distro-$arch] Allow any of these to be undefined, defaulting to empty dict This allows to deduplicate entries between distros of the same base_package_type (rpm/deb) Sort repos.yaml Change-Id: Ifc351d5d612e6c6cc82be282aed179c656ae252c Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-09Update Fluentd from v5 LTS to v6 LTSPiotr Milewski1-8/+8
Fluent Package v5 LTS will reach end of support at the end of 2025. Fluent Package v6 LTS will be supported until at least the end of 2027. This change updates the apt repository configuration and package version to use Fluent Package v6 LTS for Ubuntu, Debian and RHEL. No changes to existing Fluentd configuration files are required. Change-Id: Iaf3c4de859986629f9768563a319fe0385acff6a Signed-off-by: Piotr Milewski <vurmil@gmail.com>
2025-10-02Stop duplicating repos in repos.yamlMichal Nasiadka2-233/+5
Change-Id: Ic8bfaedb1e94dd8b64fa8a63d9cd3b76a2b73ffb Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02Add support for rpm to repos.yamlMichal Nasiadka2-110/+398
Add the ability to configure repositories in the same way as we do Debuntu ones - via repos.yaml. Removes .repo files from base - since these are not needed there anymore. gpgcheck = 1 is default in docker/base/dnf.conf Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01Move to Rocky Linux 10Michal Nasiadka1-2/+4
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-12Revert "mariadb: pin to 10.11.13"Michal Nasiadka1-4/+4
This reverts commit e478adcbe63d81faa44bc09f72461fd6a7fcdf94. Reason for revert: mariabackup fixed Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/957087 Change-Id: Ib694d3be0d2a199469690a01ba17a3349f3802b1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-07mariadb: pin to 10.11.13Pierre Riteau1-4/+4
Closes-Bug: #2119954 Change-Id: I1e334b47c6ab16eb032458141faae55cf39e3eb4 Signed-off-by: Pierre Riteau <pierre@stackhpc.com>
2025-07-16Move to CentOS Stream 10Michal Nasiadka1-2/+4
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-05-30Update OpenSearch and OpenSearch Dashboards to version 3.xPiotr Milewski1-16/+16
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949478 Change-Id: I4507fb60d361ea504459a4b502d6f6c42a327064
2025-05-30Bump proxysql to 3.0.xMichal Arbet1-4/+4
This patch bump proxysql 2.7.x to 3.0.x Change-Id: I30d5093c1997b1ac99a762983248b8d29e677ba3
2025-05-30debian: Use bookworkm suite for rabbitmq APT repoMichal Arbet1-2/+2
Change-Id: Ifd664de82a81830eeda8ccc019b22ee93768635e
2025-05-15Revert "mariadb: pin to 10.11.11"Michal Nasiadka1-4/+4
This reverts commit 535b2f270faf24cfa30b9aa1a896a62c5090f1aa. Reason for revert: 10.11.12 is revoked upstream Change-Id: I0a8cdc232e5b46cb47e4a3e1b0af7b2402103690
2025-05-07mariadb: pin to 10.11.11Michal Nasiadka1-4/+4
Temporarily disable upgrade jobs to get epoxy rc1 branched this week. Closes-Bug: #2110122 Change-Id: If301b9ebd7d0dc38bea4d60467e8e80a7a49825d
2025-03-28Merge "neutron: Add docker clients for ML2/OVS improvement"Zuul1-0/+24
2025-03-26neutron: Add docker clients for ML2/OVS improvementMichal Nasiadka1-0/+24
Docker does not support running a container in a given network namespace (netns) so we need a client installed in the Neutron container images. Related-Bug: #1891469 Change-Id: I5349449183dbb7f4ec2042a21526076fb42591b3
2025-02-18Allow to use configure_user macro for external templatesAndriy Kurilin1-0/+6
Commit 79a234239516b94b1b79c7ddafcc4fbe4e3ba155 introduced an ability to build 'in-house'/'not-built-in' projects with Kolla. This commits extends this feature with an ability to use configure_user macro for 'not-built-in' users. The implementation is done the same way as for 'sources', i.e. engine after registers new section structure as soon as it finds unknown '<project>-user' section. In addition, the documentation and CI are extended to cover ``--docker-dir`` option. Change-Id: I690d9f3829083f2493bf286a1c45764b9699219b
2024-10-24CI: bump hackingMichal Nasiadka1-1/+2
Change-Id: I5f2177b7c2edc0e35ed2e8e9bdfc4be2f262309f
2024-10-07Merge "Bump proxysql to 2.7.x"Zuul1-4/+4
2024-10-02Merge "erlang/aarch64: Move to openstack-kolla owned COPR"Zuul1-2/+2
2024-10-02erlang/aarch64: Move to openstack-kolla owned COPRMichal Nasiadka1-2/+2
Change-Id: I219418411470bdeae9af84277f5150a623c05e69
2024-10-01Bump proxysql to 2.7.xMichal Arbet1-4/+4
This patch bump proxysql 2.6.x to 2.7.x Change-Id: I6e726d8ebf9dbc6d019dd72d6d0be9d9957a3f22
2024-09-30Switch to Ubuntu 24.04 LTSMichal Nasiadka1-12/+14
Add setuptools because Python3.12 dropped distutils Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/925581 Change-Id: Ie12c43dc1de122c203edc28181366457ccd67834
2024-09-12rabbitmq: Switch to Cloudsmith mirrorsMatt Crees1-4/+4
PackageCloud is discontinued as of August 18th [1]. Also corrects the versions docs for RabbitMQ and Erlang. Use new RMQ Cloudsmith repo URLs, these now use *.rabbitmq.com domains [2]. 1. https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates#packagecloud-will-be-discontinued-on-aug-18th-2024 2. https://www.rabbitmq.com/blog/2024/08/11/package-repository-updates#mirrors-now-use-rabbitmqcom-domains Change-Id: I2cce3dd2540c878878ff0aae80ee5a7e0f455da7
2024-03-18Bump proxysql to 2.6.xMichal Arbet1-4/+4
This patch bump proxysql 2.5.x to 2.6.x Change-Id: I26e6c04ad0ba15ad4aa90f95259dc41cad439e73
2023-11-30bump td-agent lts from v4 to v5Sven Kieske1-24/+24
notice that the td-agent command got renamed to fluentd. see also the upgrade notes at[0]. for more details, refer to the changelog[1]. [0]: https://web.archive.org/web/20231006084137/https://www.fluentd.org/blog/upgrade-td-agent-v4-to-v5 [1]: https://github.com/fluent/fluent-package-builder/blob/b4b7017c09d78f2c404db62612733b40f69668a6/CHANGELOG.md#release-v500---20230729 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/901509 Change-Id: I5e95363c6c180e330945fe3d98e97c7049bbd6f7 Signed-off-by: Sven Kieske <kieske@osism.tech>
2023-11-22Update Ceph repo name for dnf config-manager commandPierre Riteau1-4/+4
Since change I1bc19f8198da3f9ab2ae2a8864c3349b21b0249e we install the centos-release-ceph-reef package as a dependency, but some code was still expecting the quincy package. Change-Id: I8ebcf815d80f3bead25e0078d69b34e17ad013bd
2023-10-26Merge "debian: use erlang and mariadb from respective repos"Zuul1-18/+15
2023-09-30Merge "Followup notes after 896616"Zuul1-0/+5
2023-09-29Followup notes after 896616Michal Nasiadka1-0/+5
Change-Id: Ia1e1183d9ff1e58e7ae910ed53a5f23bdf6e2fa8
2023-09-29rabbitmq: use launchpad as erlang source for UbuntuMichal Nasiadka1-1/+1
Launchpad is not traffic constrained, so let's better use that, instead of the community mirror. Change-Id: Ie9e0f574c8e3a61e67736caa3faedb8602a5adde
2023-09-29debian: use erlang and mariadb from respective reposMichal Nasiadka1-18/+15
Change-Id: I48caa7516a6fe8803a5bb6a451355d7981400074
2023-09-29rabbitmq: Use novemberain repos for Debian/UbuntuMichal Nasiadka2-7/+13
CloudSmith is over budget, see [1]. As mentionedin in [2] - we're using amd64 packages on aarch64, since the community mirror does not mirror aarch64 - and the packages should be really marked as noarch. [1]: https://github.com/rabbitmq/rabbitmq-server/discussions/9526 [2]: https://github.com/rabbitmq/rabbitmq-server/discussions/9553 Closes-Bug: #2037469 Change-Id: I83179ce5d53fed6cfe7f5fcbf6fdecd7199baa36
2023-08-22debian: add mariadb bookworm repoMichal Nasiadka1-6/+5
Change-Id: I1003edccbbe16b3c26f8754c17e0d83395ec33ca
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 19:28:35 +0000