aboutsummaryrefslogtreecommitdiff
path: root/tests/templates
AgeCommit message (Collapse)AuthorFilesLines
2026-09-09Remove creating logdirs in docker imagesMichal Arbet1-8/+0
Change-Id: Iaddda80bc78bf727d8a2835d1528f49639aa87a0 Signed-off-by: Michal Arbet <michal.arbet@ultimum.io>
2026-08-27Ensure openvswitch-base children get ovs repoAlex Welsh1-0/+5
Previously, openvswitch-base would enable the openvswitch repo, and child containers (e.g. ovn-base, ovn-controller, etc) would be built using ovn packages from that repo. Recently [1] builds were changed to clean up repos at the end of the build, so now dependent containers must re-enable the repo manually. Also added an openvswitch repo override to tests to avoid regresssion. [1] Ie5b9970a4575b6258dc238059d3f33ddfe155789 Closes-Bug: #2163314 Change-Id: I4ea1cc812167142743e3ebcbd532281bfe8a9799 Signed-off-by: Alex Welsh <alex@stackhpc.com>
2026-08-05Add cleanup_repos to revert build_only overridesMichal Nasiadka1-0/+10
Repos marked build_only: true are backed up before handle_repos() overwrites them and restored at the end of each image build, so CI mirror URLs are not baked into the final image. The cleanup RUN was injected into every Dockerfile, not just images that called handle_repos() for those repos. Child images with no backup fell through to "rm -f", deleting the inherited repo file (e.g. debian.sources in bifrost-base, breaking cpio install). Fix by adding a {repo}.enabled sentinel that handle_repos creates when it processes a build_only repo, making the cleanup conditional on that sentinel. Change-Id: Ie5b9970a4575b6258dc238059d3f33ddfe155789 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-30Move PIP_* env variables to ARG and configMichal Nasiadka1-28/+0
Leaving empty CI template_overrides file in case we need to use it in future. Change-Id: Ic46f1a594bcc330536bc78d93ece10e60622f6d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-11Merge "Add support to override base repos"Zuul2-43/+64
2026-07-09CI: Remove npm proxy configurationMichal Nasiadka1-8/+0
We don't use npm anywhere Change-Id: Ibc1b213d575775f79fd5b7b6b8c6e21685fdb0b0 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2026-07-09Add support to override base reposMichal Nasiadka2-43/+64
BaseOS and AppStream for CentOS/Rocky ubuntu, ubuntu-security for Ubuntu debian, debian-security for Debian ubuntu-cloud-archive is not really a base repo - so removing it from ubuntu.sources Change-Id: Iab98de963f2e8532389b7563bb572d8aa20c7aa6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-12-16debian: Switch to deb822Michal Nasiadka1-15/+16
Change-Id: I8156e2c2a57d820afdee0b76cd5a050ad682fb38 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-02Add support for rpm to repos.yamlMichal Nasiadka1-12/+1
Add the ability to configure repositories in the same way as we do Debuntu ones - via repos.yaml. Removes .repo files from base - since these are not needed there anymore. gpgcheck = 1 is default in docker/base/dnf.conf Change-Id: I7df7d452c45c57c434d5b4ad15a87963e4d6d0d4 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-10-01Move to Rocky Linux 10Michal Nasiadka1-17/+2
Depends-On: https://review.opendev.org/c/openstack/ansible-collection-kolla/+/961237 Change-Id: Idd809f5efd2d308c1565d7635e67af0a431d18f7 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-09-18CI: Use UCA mirror for UbuntuMichal Nasiadka1-0/+1
Change-Id: I80070b3c3658948c7157564fb8a79e6dd427f1d1 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-08-29Remove RDO/DeloreanMichal Nasiadka1-13/+1
RDO has staffing problems and has decided to only support SLURP releases - let's drop reliance on that repository. Change-Id: I56f86a1c5262e3ee2bcbb52cae53c3b2655ed87f Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-07-16Move to CentOS Stream 10Michal Nasiadka1-16/+1
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2025-02-18Allow to use configure_user macro for external templatesAndriy Kurilin2-0/+36
Commit 79a234239516b94b1b79c7ddafcc4fbe4e3ba155 introduced an ability to build 'in-house'/'not-built-in' projects with Kolla. This commits extends this feature with an ability to use configure_user macro for 'not-built-in' users. The implementation is done the same way as for 'sources', i.e. engine after registers new section structure as soon as it finds unknown '<project>-user' section. In addition, the documentation and CI are extended to cover ``--docker-dir`` option. Change-Id: I690d9f3829083f2493bf286a1c45764b9699219b
2024-11-29Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)"Michal Nasiadka1-1/+13
This reverts commit db0f87d3c8e1e7eccdeb1ea46216d530711680d3. Reason for revert: Epoxy cycle is on Change-Id: Ie2a747223b33039684650bede8863af0c8906d2f
2024-10-24CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)Michal Nasiadka1-13/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/933312 Change-Id: I0ce9e907594fd160a08ad7929d5bc4bca9abf536
2023-12-20Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Bobcat)"Michal Nasiadka1-1/+13
This reverts commit 2ed66effa6e4a102919cb53a4b0737f852eb8674. Reason for revert: Let's use RDO trunk Change-Id: I3945fe5fd0aef2e12a7f6c60d714e69ea496083b
2023-11-09CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Bobcat)Michal Nasiadka1-13/+1
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/900536 Change-Id: I1bc19f8198da3f9ab2ae2a8864c3349b21b0249e
2023-10-05Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean"Michal Nasiadka1-1/+13
This reverts commit 881e3925c7aa8c3bbe6897ea8790f109dc0a7fb8. Reason for revert: switch back to master, to be followed by switch to bobcat when available Change-Id: Ib8fdad41a669fc8404b8de2de5361db9547c4ea2
2023-05-18Merge "ubuntu: use Antelope UCA"16.0.0.0rc1Zuul1-1/+0
2023-05-18ubuntu: use Antelope UCAMichal Nasiadka1-1/+0
Skip using the mirror for now, given the OpenDev AFS space issues. Change-Id: I8e55c699e493494b3e5c908c7e8c370ce992fdf5
2023-05-17CentOS/Rocky: use CentOS Cloud SIG repo instead of DeloreanMichal Nasiadka1-13/+1
Antelope was released, landed in CentOS repo, time to use it. Change-Id: I9fa8fd5dd9b75251363f1957d1e249e7cb4beb84
2023-01-10CI: CentOS/Rocky: revert Delorean repo url at the endMarcin Juszkiewicz1-1/+4
We revert all repos to their normal versions. This change takes care of forgotten Delorean repos. Change-Id: I8bcddbd6ebf3119f4f56d86e47377f27b8671b1a
2022-10-03CI/centos/rocky: use repos from opendev mirrorMarcin Juszkiewicz1-29/+35
Repo definitions in RHEL 9 rebuilds use metalink method for most of entries which makes our use of sed obsolete. This patch adds file with definitions of all CS9 repos we use and moves all official definitions a side at start of build. After build our definitions get removed and official ones are restored. Similar is done for RockyLinux 9 builds but there RL9 repos are used from official mirrors while CS9/EPEL ones are from OpenDev mirrors. Final images will have repos in wrong enabled/disabled state. Change-Id: I04121fd5ca9894b6deeda3808808cbffd6b97811
2022-09-30Add RockyLinux 9 supportMichal Nasiadka1-17/+14
Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/859570 Change-Id: I7af51d07b8a939c908aa072294061def57dd67de
2022-09-27Move to CentOS Stream 9Marcin Juszkiewicz1-2/+2
OpenStack 'zed' requires Python 3.8+ so RHEL 8 family has to go. This changeset moves to CentOS Stream 9 while move to RockyLinux 9 is planned as final solution. CI moved to CentOS Stream 9 nodes. Depends-on: https://review.opendev.org/c/openstack/kolla-ansible/+/839715 Change-Id: I113b9984294cf8663d3fc0c8840320e1d40ea731
2022-03-11Unify curl use (customisation options)Maksim Malchuk1-1/+1
This change adds and unifies an ability to override hardcoded URLs for air-gapped environments via the usual blocks mechanism. Also, this change replaces ENV with ARG instruction for the variables used only in building images, and uses bash variable expansion where it possible. This change is a continuation of the I46b77978926fc2b578a68d1aaa944b2198af0685 Change-Id: I1fbad333b1bc95484e6f4c5145d5936a0e2db84f Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com>
2021-07-01CI: Fix epel url overrideMichał Nasiadka1-3/+3
epel-release now installs epel*.repos with following baseurl: baseurl=https://download.example/pub/epel/$releasever/Everything/$basearch Change-Id: I19f57d258021ff660df6b6b95e8205b69f3bea85
2021-05-08Merge "CI: drop bashism from template overrides"Zuul1-1/+1
2021-05-04[CI] Trust only infra mirrorsRadosław Piliszek1-22/+10
Infra mirrors get their indices rebuilt to avoid broken indices (due to partial update). Unfortunately, this wipes out the cryptographic signatures. Our approach so far was disabling apt security features globally. However, this is not a valid choice for external repos. It hid an issue we introduced with new RabbitMQ repos missing proper keys installed in the image. This caused permanent failures outside of our CI. Our process should be as close as possible to users' experience. This patch makes CI trust only the mirrors that have their indices rebuilt (so infra mirrors). Change-Id: Ic5abc4b87fd76f87aba383abf43e95ba70629fcb
2021-05-04CI: drop bashism from template overridesMarcin Juszkiewicz1-1/+1
[[ is bash only In many distributions /bin/sh == bash but not in Debian and derived where it is dash (very simple POSIX shell). Change-Id: I2b084ea78b236623b174473f411bae04e624a3e9
2021-04-26move to Debian 'bullseye'Marcin Juszkiewicz1-1/+1
Bullseye is now in hard freeze cycle and goes for release. https://release.debian.org/bullseye/freeze_policy.html Co-Authored-By: Michal Nasiadka <mnasiadka@gmail.com> Change-Id: I543965a2741cebfa759576a4c75669a7bacd4208
2020-12-17CI: revert to public package mirrors after buildMark Goddard1-3/+56
When building images in CI, we use local package mirrors to reduce external network traffic. These mirrors are not necessarily reliable nor are they guaranteed to be accessible outside of the CI environment (although many are). While it is an antipattern to install packages in containers at runtime, the Bifrost container does just that. If the mirrors configured in the image are unavailable, Bifrost deployment can fail. This change fixes the issue by reverting to public package mirrors as a final step of the image build process. Closes-Bug: #1902101 Change-Id: I2592a736206eaec811290e9fbdbf2540c0518ffe
2020-10-28[CI] Use local RDO mirrorRadosław Piliszek1-1/+3
Fixes a FIXME. Change-Id: I2e6e07d6f466a7485ce6481e6e43b034fdc27f41
2020-09-16[CI] Support building source images with in-review changesMark Goddard1-18/+0
Following this change it is possible to add 'Depends-On' lines to a kolla commit message that point to reviews in other projects. For example, this could be used to test building and deploying container images containing a change to the nova project that is currently in review. It also allows to introduce jobs testing against Kolla in other projects. The kolla-build-config Ansible role can also be used by other projects, such as kolla-ansible, to generate the necessary configuration. This takes us closer to the Kolla Builder - Next Generation concept [1]. [1] http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014255.html Change-Id: Ia2efa6b5d7278b75ab8dec23207f92d6bd7c58f0 Co-Authored-By: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2020-08-12[CI] Add no-infra-wheels jobsRadosław Piliszek1-0/+2
Since Kolla is run in the wild against PyPI mirrors which do not include the OpenDev-provided wheels, it might be nice to be able to test these scenarios in the CI. These jobs are added to the experimental queue so that they do not consume resources when not needed. Any Gerrit user may run them now to verify whether the change passes them. Change-Id: I9c33eeaf03be037651f82c831f0e07ab9a27752a
2020-06-18CI: use wheels from infra mirrorMarcin Juszkiewicz1-0/+1
If they are available then we do not need to build them. Especially AArch64 jobs will speedup (once wheels are built). Change-Id: I79af6c37950e156018a9204fbcc7417cd7d41012
2020-06-18CI: fix line merge in CentOS buildsMarcin Juszkiewicz1-1/+1
Looks like I missed one situation with "base/centos: take care of whitespaces" change. Change-Id: Id7b5e8ddf23f9ab13806fb02042e76183bcddf05
2020-05-17base/centos: take care of whitespacesMarcin Juszkiewicz1-3/+3
Let's get rid of this warning: Change-Id: I121e2ecb30ec6e8d1b6d88d9b921894438c3e094 INFO:kolla.common.utils.base:ESC[91m[WARNING]: Empty continuation line found in: INFO:kolla.common.utils.base: RUN dnf -y install centos-release-opstools epel-release dnf-plugins-core && dnf config-manager --enable PowerTools && dnf config-manager --disable centos-ceph-nautilus && dnf config-manager --disable centos-nfs-ganesha28 && dnf config-manager --disable influxdb && rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-OpsTools && dnf -y distro-sync --security --sec-severity=Important --sec-severity=Critical INFO:kolla.common.utils.base:[WARNING]: Empty continuation lines will become errors in a future release. INFO:kolla.common.utils.base:ESC[0m INFO:kolla.common.utils.base:Step 1/39 : FROM centos:8
2020-04-15Merge "Remove support for CentOS 7"Zuul1-23/+0
2020-04-15Remove support for CentOS 7Marcin Juszkiewicz1-23/+0
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images so there is no need for checking which Python version (2.x or 3.x) is used inside of containers. We also no longer have to support yum as a value for distro_package_manager. Partially-Implements: blueprint centos-rhel-8 Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
2020-04-08CI: add Centos 8 and Ubuntu jobs for aarch64Marcin Juszkiewicz1-0/+1
also simplify Debian job definition Depends-on: https://review.opendev.org/718413 Depends-on: https://review.opendev.org/718363 Depends-on: https://review.opendev.org/718236 Depends-on: https://review.opendev.org/718238 Change-Id: I2c75dbc2ea063dd3507eaaf93a484c50acae5fb5
2020-04-03CI: Avoid toxRadosław Piliszek1-0/+5
We don't need tox nor tell our users to use it when doing kolla builds. Tox is going away from base infra images (it is already gone from aarch64 ones). Depends-on: https://review.opendev.org/713134 Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org> Change-Id: Ib1d97a783951ac42740ebf91bcc6ecaf2bf70853
2020-04-03CI: Add https match for mirror.centos.org to template-overridesMichal Nasiadka1-0/+3
Some CentOS repos (currently one - Ceph NFS Ganesha) use https://mirror.centos.org instead of http:// and we break their definition by removing mirrorlist= entry and not inserting baseurl entry due to a missing match. Change-Id: I7b29f8c6be80820042023d2b85162d5cc9a65f08
2020-03-19CI: publish AArch64 Debian/source imagesMarcin Juszkiewicz1-1/+2
We want to test upgrades on aarch64. For this we need to publish images. AArch64 images will get "-aarch64" added to tag to not collide with x86-64 ones. Change-Id: Ibae2578b4bc18c0ab7fcc1840c39bb86659ab920
2020-03-17CentOS 8: Switch default base image, tag as masterMark Goddard1-3/+1
Changes the default base tag and distro for CentOS images from 7 to 8. Also changes the tag used by the publisher jobs for CentOS 8 images from 'master-centos8' to 'master'. Change-Id: I5498141ade23219d63f34debc2b8e1330dec2e68 Partially-Implements: blueprint centos-rhel-8
2020-03-13CI: Use network mode = hostRadosław Piliszek1-0/+3
This avoids issues with IPv6 not enabled in docker. Change-Id: Iff80392357ef5e2dd3f2e24dbf4df299660805b9
2020-02-05CentOS 8: Fix CentOS 7 publisher tagMark Goddard1-1/+1
Currently we use CentOS 8 nodepool images for all CI build jobs. This means we can't use the ansible_distribution_major_version fact to detect whether we are building CentOS 7 or 8 images. Due to this, all CentOS images (including CentOS 7) are currently published with a 'master-centos8' tag. This change fixes the issue by using the base_tag variable which is defined for CentOS 8 build jobs. Change-Id: I29b7b8ee742120107a11bd419ac58ab5c09b0b75 Partially-Implements: blueprint centos-rhel-8
2020-01-30Merge "CentOS 8: Update packages in images"Zuul1-1/+1
2020-01-30CI: Fix tag suffix logic for CentOS 8Mark Goddard1-1/+1
On CentOS, ansible_distribution is 'CentOS' rather than 'centos'. Our logic when setting the image tag for publisher jobs is incorrect, meaning that the centos8 publisher publishes images as 'master' rather than 'master-centos8'. Since this job only has two images it is likely to complete before the CentOS 7 publisher, so hopefully images will not be broken for long. This change fixes the issue by using a case-insensitive comparison. Change-Id: I66c93e07fe5c6c143e9cf65c6451e573bbfc51d8 Partially-Implements: blueprint centos-rhel-8