| Age | Commit message (Collapse) | Author | Files | Lines |
|
Change-Id: Iaddda80bc78bf727d8a2835d1528f49639aa87a0
Signed-off-by: Michal Arbet <michal.arbet@ultimum.io>
|
|
Previously, openvswitch-base would enable the openvswitch repo, and
child containers (e.g. ovn-base, ovn-controller, etc) would be built
using ovn packages from that repo. Recently [1] builds were changed to
clean up repos at the end of the build, so now dependent containers must
re-enable the repo manually.
Also added an openvswitch repo override to tests to avoid regresssion.
[1] Ie5b9970a4575b6258dc238059d3f33ddfe155789
Closes-Bug: #2163314
Change-Id: I4ea1cc812167142743e3ebcbd532281bfe8a9799
Signed-off-by: Alex Welsh <alex@stackhpc.com>
|
|
Repos marked build_only: true are backed up before handle_repos()
overwrites them and restored at the end of each image build, so CI
mirror URLs are not baked into the final image.
The cleanup RUN was injected into every Dockerfile, not just images
that called handle_repos() for those repos. Child images with no
backup fell through to "rm -f", deleting the inherited repo file
(e.g. debian.sources in bifrost-base, breaking cpio install).
Fix by adding a {repo}.enabled sentinel that handle_repos creates
when it processes a build_only repo, making the cleanup conditional
on that sentinel.
Change-Id: Ie5b9970a4575b6258dc238059d3f33ddfe155789
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Leaving empty CI template_overrides file in case
we need to use it in future.
Change-Id: Ic46f1a594bcc330536bc78d93ece10e60622f6d4
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
|
|
We don't use npm anywhere
Change-Id: Ibc1b213d575775f79fd5b7b6b8c6e21685fdb0b0
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
BaseOS and AppStream for CentOS/Rocky
ubuntu, ubuntu-security for Ubuntu
debian, debian-security for Debian
ubuntu-cloud-archive is not really a base repo - so
removing it from ubuntu.sources
Change-Id: Iab98de963f2e8532389b7563bb572d8aa20c7aa6
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I8156e2c2a57d820afdee0b76cd5a050ad682fb38
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Add the ability to configure repositories in the same
way as we do Debuntu ones - via repos.yaml.
Removes .repo files from base - since these are not
needed there anymore.
gpgcheck = 1 is default in docker/base/dnf.conf
Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237
Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Change-Id: I80070b3c3658948c7157564fb8a79e6dd427f1d1
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
RDO has staffing problems and has decided to only
support SLURP releases - let's drop reliance on that
repository.
Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Known missing packages:
- mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR
- glusterfs-fuse in manila-share - built in Kolla COPR
- collectd/telegraf - no opstools repository
- redis - needs a switch to valkey
- python3-ethtool - not required for neutron-mlnx-agent since 6 years [1]
Building packages in Kolla COPR is a temporary solution until these show up
in EPEL10.
[1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751
Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
|
|
Commit 79a234239516b94b1b79c7ddafcc4fbe4e3ba155 introduced an ability to
build 'in-house'/'not-built-in' projects with Kolla.
This commits extends this feature with an ability to use configure_user
macro for 'not-built-in' users.
The implementation is done the same way as for 'sources', i.e. engine
after registers new section structure as soon as it finds unknown
'<project>-user' section.
In addition, the documentation and CI are extended to cover
``--docker-dir`` option.
Change-Id: I690d9f3829083f2493bf286a1c45764b9699219b
|
|
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3.
Reason for revert: Epoxy cycle is on
Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
|
|
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312
Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
|
|
This reverts commit 2ed66effa6e4a102919cb53a4b0737f852eb8674.
Reason for revert: Let's use RDO trunk
Change-Id: I3945fe5fd0aef2e12a7f6c60d714e69ea496083b
|
|
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/900536
Change-Id: I1bc19f8198da3f9ab2ae2a8864c3349b21b0249e
|
|
This reverts commit 881e3925c7aa8c3bbe6897ea8790f109dc0a7fb8.
Reason for revert: switch back to master, to be followed by switch to bobcat when available
Change-Id: Ib8fdad41a669fc8404b8de2de5361db9547c4ea2
|
|
|
|
Skip using the mirror for now, given the OpenDev AFS
space issues.
Change-Id: I8e55c699e493494b3e5c908c7e8c370ce992fdf5
|
|
Antelope was released, landed in CentOS repo, time to use it.
Change-Id: I9fa8fd5dd9b75251363f1957d1e249e7cb4beb84
|
|
We revert all repos to their normal versions. This change takes care of
forgotten Delorean repos.
Change-Id: I8bcddbd6ebf3119f4f56d86e47377f27b8671b1a
|
|
Repo definitions in RHEL 9 rebuilds use metalink method for most of
entries which makes our use of sed obsolete.
This patch adds file with definitions of all CS9 repos we use and
moves all official definitions a side at start of build. After build our
definitions get removed and official ones are restored.
Similar is done for RockyLinux 9 builds but there RL9 repos are used
from official mirrors while CS9/EPEL ones are from OpenDev mirrors.
Final images will have repos in wrong enabled/disabled state.
Change-Id: I04121fd5ca9894b6deeda3808808cbffd6b97811
|
|
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570
Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
|
|
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go.
This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is
planned as final solution.
CI moved to CentOS Stream 9 nodes.
Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715
Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
|
|
This change adds and unifies an ability to override hardcoded URLs for
air-gapped environments via the usual blocks mechanism. Also, this
change replaces ENV with ARG instruction for the variables used only
in building images, and uses bash variable expansion where it possible.
This change is a continuation of the I46b77978926fc2b578a68d1aaa944b2198af0685
Change-Id: I1fbad333b1bc95484e6f4c5145d5936a0e2db84f
Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
|
|
epel-release now installs epel*.repos with following baseurl:
baseurl=https://download.example/pub/epel/$releasever/Everything/$basearch
Change-Id: I19f57d258021ff660df6b6b95e8205b69f3bea85
|
|
|
|
Infra mirrors get their indices rebuilt to avoid broken
indices (due to partial update).
Unfortunately, this wipes out the cryptographic signatures.
Our approach so far was disabling apt security features globally.
However, this is not a valid choice for external repos.
It hid an issue we introduced with new RabbitMQ repos missing
proper keys installed in the image.
This caused permanent failures outside of our CI.
Our process should be as close as possible to users' experience.
This patch makes CI trust only the mirrors that have their indices
rebuilt (so infra mirrors).
Change-Id: Ic5abc4b87fd76f87aba383abf43e95ba70629fcb
|
|
[[ is bash only
In many distributions /bin/sh == bash but not in Debian and derived
where it is dash (very simple POSIX shell).
Change-Id: I2b084ea78b236623b174473f411bae04e624a3e9
|
|
Bullseye is now in hard freeze cycle and goes for release.
https://release.debian.org/bullseye/freeze_policy.html
Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com>
Change-Id: I543965a2741cebfa759576a4c75669a7bacd4208
|
|
When building images in CI, we use local package mirrors to reduce
external network traffic. These mirrors are not necessarily reliable nor
are they guaranteed to be accessible outside of the CI environment
(although many are).
While it is an antipattern to install packages in containers at runtime,
the Bifrost container does just that. If the mirrors configured in the
image are unavailable, Bifrost deployment can fail.
This change fixes the issue by reverting to public package mirrors as a
final step of the image build process.
Closes-Bug: #1902101
Change-Id: I2592a736206eaec811290e9fbdbf2540c0518ffe
|
|
Fixes a FIXME.
Change-Id: I2e6e07d6f466a7485ce6481e6e43b034fdc27f41
|
|
Following this change it is possible to add 'Depends-On' lines to a
kolla commit message that point to reviews in other projects. For
example, this could be used to test building and deploying container
images containing a change to the nova project that is currently in
review.
It also allows to introduce jobs testing against Kolla in other
projects.
The kolla-build-config Ansible role can also be used by other projects,
such as kolla-ansible, to generate the necessary configuration.
This takes us closer to the Kolla Builder - Next Generation concept [1].
[1] http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014255.html
Change-Id: Ia2efa6b5d7278b75ab8dec23207f92d6bd7c58f0
Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
|
|
Since Kolla is run in the wild against PyPI mirrors which do not
include the OpenDev-provided wheels, it might be nice to be able
to test these scenarios in the CI.
These jobs are added to the experimental queue so that they do
not consume resources when not needed.
Any Gerrit user may run them now to verify whether the change
passes them.
Change-Id: I9c33eeaf03be037651f82c831f0e07ab9a27752a
|
|
If they are available then we do not need to build them. Especially
AArch64 jobs will speedup (once wheels are built).
Change-Id: I79af6c37950e156018a9204fbcc7417cd7d41012
|
|
Looks like I missed one situation with "base/centos: take care of
whitespaces" change.
Change-Id: Id7b5e8ddf23f9ab13806fb02042e76183bcddf05
|
|
Let's get rid of this warning:
Change-Id: I121e2ecb30ec6e8d1b6d88d9b921894438c3e094
INFO:kolla.common.utils.base:ESC[91m[WARNING]: Empty continuation line found in:
INFO:kolla.common.utils.base: RUN dnf -y install centos-release-opstools epel-release dnf-plugins-core && dnf config-manager --enable PowerTools && dnf config-manager --disable centos-ceph-nautilus && dnf config-manager --disable centos-nfs-ganesha28 && dnf config-manager --disable influxdb && rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-OpsTools && dnf -y distro-sync --security --sec-severity=Important --sec-severity=Critical
INFO:kolla.common.utils.base:[WARNING]: Empty continuation lines will become errors in a future release.
INFO:kolla.common.utils.base:ESC[0m
INFO:kolla.common.utils.base:Step 1/39 : FROM centos:8
|
|
|
|
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images
so there is no need for checking which Python version (2.x or 3.x) is
used inside of containers.
We also no longer have to support yum as a value for
distro_package_manager.
Partially-Implements: blueprint centos-rhel-8
Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
|
|
also simplify Debian job definition
Depends-on: https://review.opendev.org/718413
Depends-on: https://review.opendev.org/718363
Depends-on: https://review.opendev.org/718236
Depends-on: https://review.opendev.org/718238
Change-Id: I2c75dbc2ea063dd3507eaaf93a484c50acae5fb5
|
|
We don't need tox nor tell our users to use it when doing kolla builds.
Tox is going away from base infra images (it is already gone from
aarch64 ones).
Depends-on: https://review.opendev.org/713134
Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
Change-Id: Ib1d97a783951ac42740ebf91bcc6ecaf2bf70853
|
|
Some CentOS repos (currently one - Ceph NFS Ganesha) use
https://mirror.centos.org instead of http:// and we break
their definition by removing mirrorlist= entry and not inserting baseurl
entry due to a missing match.
Change-Id: I7b29f8c6be80820042023d2b85162d5cc9a65f08
|
|
We want to test upgrades on aarch64. For this we need to publish images.
AArch64 images will get "-aarch64" added to tag to not collide with
x86-64 ones.
Change-Id: Ibae2578b4bc18c0ab7fcc1840c39bb86659ab920
|
|
Changes the default base tag and distro for CentOS images from 7 to 8.
Also changes the tag used by the publisher jobs for CentOS 8 images from
'master-centos8' to 'master'.
Change-Id: I5498141ade23219d63f34debc2b8e1330dec2e68
Partially-Implements: blueprint centos-rhel-8
|
|
This avoids issues with IPv6 not enabled in docker.
Change-Id: Iff80392357ef5e2dd3f2e24dbf4df299660805b9
|
|
Currently we use CentOS 8 nodepool images for all CI build jobs. This
means we can't use the ansible_distribution_major_version fact to detect
whether we are building CentOS 7 or 8 images. Due to this, all CentOS
images (including CentOS 7) are currently published with a
'master-centos8' tag.
This change fixes the issue by using the base_tag variable which is
defined for CentOS 8 build jobs.
Change-Id: I29b7b8ee742120107a11bd419ac58ab5c09b0b75
Partially-Implements: blueprint centos-rhel-8
|
|
|
|
On CentOS, ansible_distribution is 'CentOS' rather than 'centos'.
Our logic when setting the image tag for publisher jobs is incorrect,
meaning that the centos8 publisher publishes images as 'master'
rather than 'master-centos8'. Since this job only has two images it
is likely to complete before the CentOS 7 publisher, so hopefully
images will not be broken for long.
This change fixes the issue by using a case-insensitive comparison.
Change-Id: I66c93e07fe5c6c143e9cf65c6451e573bbfc51d8
Partially-Implements: blueprint centos-rhel-8
|