aboutsummaryrefslogtreecommitdiff
path: root/tools
AgeCommit message (Collapse)AuthorFilesLines
2026-06-11kolla-build: Use SandboxedEnvironment to prevent SSTIMichal Nasiadka1-1/+2
Switch from jinja2.Environment to jinja2.sandbox.SandboxedEnvironment to block Server-Side Template Injection attacks. Closes-Bug: #2146056 Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com> (cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)
2025-08-26CI: Drop dump_info.shMichal Nasiadka1-26/+0
It should not be required anymore, all these information are dumped by different means (generic zuul playbooks, etc). Change-Id: I80569b6fe9e4d779a5448015b8ad9caf09e5abf6 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
2022-12-15CI: do not check for error in binary imagesMarcin Juszkiewicz2-50/+0
There are no such anymore. Change-Id: Icf7d1988aa7208cda1b6f70269b9b54cd201b730
2021-12-20Drop vmtpRadosław Piliszek1-1/+0
Details in the attached reno. Change-Id: I1a8363da02d98255fce31749f4c9838088443a67
2021-08-04Merge "drop leftovers of RHEL support"Zuul1-1/+1
2021-07-29Remove patrole from version-checkRadosław Piliszek1-1/+0
Patrole was used by tempest which is now removed. Change-Id: Ie7f26fa016d6fcafc6eee860b827bca868b4c487
2021-07-28drop leftovers of RHEL supportMarcin Juszkiewicz1-1/+1
As a project we never built RHEL based images so support for them was not tested. Change-Id: I27dfe34ade088228d71f6857ec4f3ab28ee63915
2021-06-24Remove tempest imagewu.chunyang1-19/+0
Remove tempest project as planned Change-Id: I016f7bb17b91769ced21c90d73f693c54a71aef9
2021-06-20Remove rallywu.chunyang1-2/+0
Remove rally project as planned Change-Id: I3560c3a2bee4e391cac841b9bcd8b8d2199f920d
2021-04-19[release] Use Wallaby sources by defaultRadosław Piliszek1-4/+0
Removes 3 Neutron plugins from the default config to build. Change-Id: Ib32cfe4bacbfb2ccd526b62846b8d89c06506d02
2021-01-25Remove zaqar image and related pluginsChristian Berendt1-1/+0
Signed-off-by: Christian Berendt <berendt@betacloud-solutions.de> Change-Id: Id3187b2b95e9b9bd3d9233a498f7c45e66c604c7
2021-01-15Remove nova-mksproxy imageChristian Berendt1-1/+0
Signed-off-by: Christian Berendt <berendt@betacloud-solutions.de> Change-Id: I3d101f171bd1cc6f3c192ddc98cea0d63bccb739
2021-01-14Remove novajoin imageChristian Berendt1-1/+0
Signed-off-by: Christian Berendt <berendt@betacloud-solutions.de> Change-Id: Ia636747bc2d886f44abb2f4f816fcb621b90a298
2020-10-19Merge "Finish off removing Congress"Zuul1-2/+0
2020-10-12rally: Add rally-openstackMichal Nasiadka1-0/+1
Currently source builds and centos-binary builds do not install rally-openstack. It results in errors with finding openstack plugin. Change-Id: I26ad81a7076bad7a659e2d80a1ad0453c13794d1 Closes-Bug: #1803968
2020-10-09Finish off removing CongressMark Goddard1-2/+0
Change-Id: I0ebd68f0f5bcd989ddd1ffc6a85fed6c8a11ff6d
2020-08-28version-check: handle using of stable branch tarballsMarcin Juszkiewicz1-1/+50
For Ussuri we decided to follow stable branch tarballs instead of using release ones. This gives us all fixes just as they land in a repository. Change-Id: Iff600179630484228fb359417687e3d2a1a8b9f9
2020-07-06Remove sensu imagesMarcin Juszkiewicz1-1/+0
They have been deprecated in Ussuri [1]. [1]: https://review.opendev.org/#/c/711636/ Change-Id: I0cfde46c29eedce77c70c1c677220814a801ff3a
2020-06-02Fix pre-commit-hookmnasiadka2-6/+2
Currently pre-commit-hook is failing due to yaml validations using unversioned python and using non-existent json validations. Change-Id: I67dc11efe667e2cc67ea1a731edc5c4a03ebd1e7 Closes-Bug: #1778146
2020-04-15CentOS 8: Switch last mentions of yum to dnfMark Goddard1-2/+2
Change-Id: I31e9742793cfb1abff9749083c9ce86000dae1af Partially-Implements: blueprint centos-rhel-8
2020-04-04Merge "CI: Ansiblify setup of builders"Zuul2-41/+0
2020-04-03CI: Ansiblify setup of buildersRadosław Piliszek2-41/+0
CI is set up using Ansible playbooks now. This also drops redundant shell scripts. Co-authored-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org> Change-Id: I5264746fd04276448f4668c3bb3a218a40e8660b
2020-04-01Update hacking for Python3Andreas Jaeger2-0/+2
The repo is Python 3 now, so update hacking to version 3.0 which supports Python 3. Fix problems found by updated hacking version. Update local hacking checks for new flake8. Remove hacking and friends from lower-constraints, they are not needed in installations. Change-Id: I67e5ca24c550163c218fb06692de0b7c528d8318
2020-03-16do not use unversioned Python binaryMarcin Juszkiewicz3-3/+3
We said 'bye' to Python 2 already. So let us use Python 3 for all scripts. Unversioned Python binary should be avoided as it may be Python2 or Python3 (depends on distribution). Implements: blueprint drop-py2-support Change-Id: Ifd7912a3debf3ee4ddd8f3e1a4c5870848d4d688
2020-01-21Merge "Add note about vmware-nsx to version-check"Zuul1-0/+4
2020-01-20Make tools bash compatibleDincer Celik4-4/+7
Change-Id: Iccccc91b0a44f92bcbb2442638a93e7624da112b
2020-01-20Add note about vmware-nsx to version-checkRadosław Piliszek1-0/+4
Change-Id: Ie136940c883b15a082e0f538a1c46134edbb10cc
2020-01-15Revert "Add AArch64 publisher for Debian/source"Marcin Juszkiewicz1-32/+0
Turned out that linaro-london network pipe is too thin to support this job. Pushing images took 3 hours so job timed out. Will check it once new nodes arrive. This reverts commit f2801fabdd727fc72a28b056d79787af484424a7. Change-Id: I8897ede43f11090902fe7c0c096f17f57c1c9c67
2020-01-10Add AArch64 publisher for Debian/sourceMarcin Juszkiewicz1-0/+32
This time proper approach involves job dependencies. First we build and publish x86-64 and aarch64 images with architecture name in image tag. Then we create multiarch manifests to create 'master' images. Change-Id: I6b9505dc326636fc6df8798c62c3a5eb1f728a51
2019-11-26CI: Move to CentOS 8 nodepool imagesMark Goddard1-7/+2
This change modifies the CentOS build CI jobs to use a CentOS 8 host image. NOTE: This does not affect the version of CentOS used as the base image in containers built by kolla. Partially-Implements: blueprint centos-rhel-8 Partially-Implements: blueprint centos-rhel-python3 Change-Id: Ie25b54a4e6116ed2bcb9c3b5c44eb6edbd2e6b49
2019-11-07tox: use Python 3 where possibleMarcin Juszkiewicz1-1/+1
Time to say goodbye for Python 2 Depends-On: https://review.opendev.org/693356 Change-Id: I5f23da932df70bf17d09d42420ac408221d0e02f
2019-10-29CI: clean up setupRadosław Piliszek2-84/+1
Removes stuff which does not belong here, along with the docker daemon systemd service overrides. Also re-enables IPv6 on CentOS node. Change-Id: I45238b087647e733544561d333aa560f82e2a07c
2019-09-19CI: Use docker mirror proxyRadosław Piliszek2-5/+9
TODO: Debian build still requires access to original repo. Change-Id: Ie4bac5334369a63793d36568a9d3a58a0cdc7667 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-09-18Remove support for OracleLinuxMark Goddard1-1/+1
We have agreed to remove support for Oracle Linux. http://lists.openstack.org/pipermail/openstack-discuss/2019-June/006896.html Change-Id: I961dfba1aeef2c509ecdaf376dfe6928926ffb39 Depends-On: https://review.opendev.org/682858
2019-08-16CI: drop docker systemd MountFlagsMarcin Juszkiewicz1-1/+0
https://review.opendev.org/#/c/674587/ dropped using of that flag in deployments. Time to drop it on CI as Debian CI fails when it is enabled. Change-Id: I57fa5206f91abcedcd2d526e71e74cf634b81d2c
2019-07-15cleanup setup of Debian/Ubuntu CI nodesMarcin Juszkiewicz1-5/+7
Change-Id: I3a771793dfbbfc26f6d5716ba7a5b60c2e6154fa
2019-07-15Merge "Add script to check for forbidden instructions"Zuul2-0/+50
2019-07-05Merge "Change port of docker registry"Zuul1-1/+1
2019-06-20Clean up test processRadosław Piliszek3-32/+1
If stestr failed, then no node info was logged. Logging node info is now handled in pre and post stages of Zuul. Additionally Zuul v3 migration recommendations were applied and some unused code removed improving general readability. Change-Id: Iae9d37cb76997ba8389e21c7e2a3bf5905abe029 Signed-off-by: Radosław Piliszek <radoslaw.piliszek@gmail.com>
2019-06-18Merge "Remove crane image"Zuul1-1/+0
2019-06-17Change port of docker registrypengdake1-1/+1
The port of docker registry is conflict with keystone. So we need to change port of docker registry. Change-Id: If15c0caf76b5406f590b05030e43d65ca14c8788 Signed-off-by: pengdake <19921207pq@gmail.com>
2019-06-07Add script to check for forbidden instructionsMartin André2-0/+50
When building images for binary type, it is expected to not install executables from untrusted sources, and gem, sensu-install, npm or pip packages for instance should come from the distro itself. This commit adds a `validate-binary-build.sh` script that checks for forbidden commands in the rendered Dockerfile templates for the binary type builds and hooks this script with the pep8 CI job. The output is just informative for now until we've fixed the culprit Dockerfiles, then we'll make the script return an error code and with the ability to fail the pep8 CI check. This should prevent unwanted commands from entering binary type Dockerfiles. Change-Id: I66e54bd18f4256cdca6c0c50626de4f975c246b8
2019-06-07Remove crane imageMark Goddard1-1/+0
This image was deprecated in the Stein cycle. Change-Id: I249b78cd263c97c4a9223523c77f8c325f3e649a
2019-05-20Ignore EM releases in version-check.pyMark Goddard1-0/+4
We don't want to use Extended Maintenance (EM) tags, since these are just markers of a point in time and not available as released artifacts. Change-Id: If552f7ffc22d4b25769c14c083179eecf5a93158
2019-04-10Version check: update using project name or tarball nameMark Goddard1-0/+2
The current code worked only if the project was using the project_name in kolla/common/config.py, rather than the tarball_base name. This is only true on master - on stable branches we may switch to use the tarball_base name, so the regex won't match. Change-Id: I839649e6ef662ae3ff320edb3106da818956d26d
2019-03-28Set requirements branch in version-check.pyMark Goddard1-21/+38
We use the stable branch of the requirements project. Also add an exception for the crane project, which is not managed by OpenStack releases. Make use of 'tarball_base' field to handle tarball renames. Change-Id: I05186d9a3e21615e6b49c62cea83bc4bde4702fe
2019-03-25Remove unused scriptsMark Goddard2-112/+0
Removed various scripts which were part of previous CI configurations. Change-Id: I674c3bb89e049638926fcb2ad6577123117b5d32
2019-03-24Replace openstack.org git:// URLs with https://Ian Wienand2-2/+2
This is a mechanically generated change to replace openstack.org git:// URLs with https:// equivalents. This is in aid of a planned future move of the git hosting infrastructure to a self-hosted instance of gitea (https://gitea.io), which does not support the git wire protocol at this stage. This update should result in no functional change. For more information see the thread at http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html Change-Id: Ia4ad8d139eb5b37a9e661a789df13ec300eeee6f
2019-02-21Use overlay2 in tools/setup_Redhat.shMichal Nasiadka1-51/+1
Currently CentOS gates use btrfs storage driver and create /docker device backing btrfs. This patch is to sync the gate run with Ubuntu. (post-Trusty) does not use btrfs, only overlay2. Change-Id: Ic5caa8cf0271b21f71f03fd33c35b3c7bc93ccf4
2018-12-27Update hacking versionconfi-surya1-2/+1
Use latest release 1.1.0 and compatible changes w.r.t pep8 Change-Id: Ia3d1166a2746a46591e4e5a04ea91e03ddc28d93
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 20:05:47 +0000