RETIRED, Ansible role to modify container images built for TripleO
Go to file
Zuul 38691f5ef4 Merge "Fix git lookup" 2021-04-23 11:57:36 +00:00
ci-scripts Add tox checks, pbr packaging 2018-05-23 11:57:41 +12:00
defaults Add support for yum caching when buildah updates 2019-09-25 14:01:15 +02:00
files Fix git lookup 2021-04-13 16:01:14 +00:00
meta Run all linters via pre-commit 2019-02-15 18:22:10 +05:30
tasks Add retries on image pull ahead of updating 2020-06-11 14:55:24 +01:00
templates Add double quotes around the printf statements in yum_update.sh 2020-01-30 09:28:23 +00:00
vars Force docker format 2020-01-22 10:39:05 -07:00
zuul.d Migrate to content provider jobs/templates 2020-10-09 15:51:27 +05:30
.ansible-lint Run all linters via pre-commit 2019-02-15 18:22:10 +05:30
.gitignore fixed and bumped linters 2019-10-29 10:58:22 +00:00
.gitreview OpenDev Migration Patch 2019-04-19 19:43:05 +00:00
.pre-commit-config.yaml fixed and bumped linters 2019-10-29 10:58:22 +00:00
.yamllint Run all linters via pre-commit 2019-02-15 18:22:10 +05:30
LICENSE Run all linters via pre-commit 2019-02-15 18:22:10 +05:30
README.rst Add the possibility to update packages from local rpms using yum. 2020-01-13 20:38:19 -05:00
ansible-requirements.txt Add tox checks, pbr packaging 2018-05-23 11:57:41 +12:00
ansible.cfg Fix the roles_path to actually work in a venv 2018-08-29 15:46:57 -04:00
requirements.txt Add tox checks, pbr packaging 2018-05-23 11:57:41 +12:00
setup.cfg Convert readme to rst 2019-04-01 09:47:22 -06:00
setup.py Run all linters via pre-commit 2019-02-15 18:22:10 +05:30
test-requirements.txt Run all linters via pre-commit 2019-02-15 18:22:10 +05:30
tox.ini Replace deprecated UPPER_CONSTRAINTS_FILE variable 2020-11-04 11:14:26 +01:00

README.rst

TripleO Modify Image

A role to allow modification to container images built for the TripleO project.

Role Variables

Variables used for modify image
Name Default Value Description
source_image [undefined] Mandatory fully qualified reference to the source image to be modified. The supplied Dockerfile will be copied and modified to make the FROM directive match this variable.
modify_dir_path [undefined] Mandatory path to the directory containing the Dockerfile to modify the image
modified_append_tag date +-modified-%Y%m%d%H%M%S String to be appended after the tag to indicate this is a modified version of the source image.
target_image [undefined] If set, the modified image will be tagged with target_image + modified_append_tag. If target_image is not set, the modified image will be tagged with source_image + modified_append_tag. If the purpose of the image is not changing, it may be enough to rely on the source_image + modified_append_tag tag to identify that this is a modified version of the source image.
container_build_tool docker Tool used to build containers, can be 'docker' or 'buildah'
Variables used for yum update
Name Default Value Description
source_image [undefined] See modify image variables
modified_append_tag date +-modified-%Y%m%d%H%M%S See modify image variables
target_image '' See modify image variables
rpms_path '' If set, packages present in rpms_path will be updated but dependencies must also be included if required as yum is called with localupdate.
update_repo '' If set, packages from this repo will be updated. Other repos will only be used for dependencies of these updates.
yum_repos_dir_path None Optional path of directory to be used as /etc/yum.repos.d during the update
container_build_tool docker See modify image variables
yum_cache None Optional path to the host directory for yum cache during the update. Requires an overlay-enabled FS that also supports SE context relabling. Works only with container_build_tool=buildah.
force_purge_yum_cache False Optional argument that tells buildah to forcefully re-populate the yum cache with new contents.
Variables used for yum install
Name Default Value Description
source_image [undefined] See modify image variables
modified_append_tag date +-modified-%Y%m%d%H%M%S See modify image variables
target_image '' See modify image variables
yum_packages [] Provide a list of packages to install via yum
yum_repos_dir_path None Optional path of directory to be used as /etc/yum.repos.d during the update
container_build_tool docker See modify image variables
Variables used for dev install
Name Default Value Description
source_image [undefined] See modify image variables
modified_append_tag date +-modified-%Y%m%d%H%M%S See modify image variables
target_image '' See modify image variables
container_build_tool docker See modify image variables
refspecs [] An array of project/refspec pairs that will be installed into the generated container. Currently only supports python source projects.
python_dir [] Directory which contains a Python project ready to be installed with pip.

Requirements

  • ansible >= 2.4
  • python >= 2.6
  • docker-py >= 1.7.0
  • Docker API >= 1.20

Dependencies

None

Example Playbooks

Modify Image

The following playbook will produce a modified image with the tag :latest-modified-<timestamp> based on the Dockerfile in the custom directory /path/to/example_modify_dir.

- hosts: localhost
  tasks:
  - name: include ansible-role-tripleo-modify-image
    import_role:
      name: ansible-role-tripleo-modify-image
      tasks_from: modify_image.yml
    vars:
      source_image: docker.io/tripleomaster/centos-binary-nova-api:latest
      modify_dir_path: /path/to/example_modify_dir
      container_build_tool: docker # or buildah

The directory example_modify_dir contains the Dockerfile which will perform the modification, for example:

# This will be replaced in the file Dockerfile.modified
FROM centos-binary-nova-api

# switch to root to install packages
USER root

# install packages
RUN curl "https://bootstrap.pypa.io/get-pip.py" -o "/tmp/get-pip.py"
RUN python /tmp/get-pip.py

# switch the container back to the default user
USER nova

Yum update

The following playbook will produce a modified image with the tag :latest-updated which will do a yum update using the host's /etc/yum.repos.d. Only file repositories will be used (with baseurl=file://...). In this playbook the tasks_from is set as a variable instead of an import_role parameter.

- hosts: localhost
  tasks:
  - name: include ansible-role-tripleo-modify-image
    import_role:
      name: ansible-role-tripleo-modify-image
    vars:
      tasks_from: yum_update.yml
      source_image: docker.io/tripleomaster/centos-binary-nova-api:latest
      yum_repos_dir_path: /etc/yum.repos.d
      modified_append_tag: updated
      container_build_tool: buildah # or docker
      yum_cache: /tmp/containers-updater/yum_cache
      rpms_path: /home/stack/rpms
- hosts: localhost
  tasks:
  - name: include ansible-role-tripleo-modify-image
    import_role:
      name: ansible-role-tripleo-modify-image
    vars:
      tasks_from: yum_update.yml
      source_image: docker.io/tripleomaster/centos-binary-nova-api:latest
      modified_append_tag: updated
      container_build_tool: docker # or buildah
      rpms_path: /home/stack/rpms/

Note, if you have a locally installed gating repo, you can add update_repo: gating-repo. This may be the case for the consequent in-place deployments, like those performed with the CI reproducer script.

Yum install

The following playbook will produce a modified image with the tag :latest-updated which will do a yum install of the requested packages using the host's /etc/yum.repos.d. In this playbook the tasks_from is set as a variable instead of an import_role parameter.

- hosts: localhost
  tasks:
  - name: include ansible-role-tripleo-modify-image
    import_role:
      name: ansible-role-tripleo-modify-image
    vars:
      tasks_from: yum_install.yml
      source_image: docker.io/tripleomaster/centos-binary-nova-api:latest
      yum_repos_dir_path: /etc/yum.repos.d
      yum_packages: ['foobar-nova-plugin', 'fizzbuzz-nova-plugin']
      container_build_tool: docker # or buildah

RPM install

The following playbook will produce a modified image with RPMs from the specified rpms_path on the local filesystem installed as a new layer for the container. The new container tag is appened with the '-hotfix' suffix. Useful for creating adhoc hotfix containers with local RPMs with no network connectivity.

- hosts: localhost
  tasks:
  - name: include ansible-role-tripleo-modify-image
    import_role:
      name: ansible-role-tripleo-modify-image
    vars:
      tasks_from: rpm_install.yml
      source_image: docker.io/tripleomaster/centos-binary-nova-api:latest
      rpms_path: /home/stack/rpms
      modified_append_tag: -hotfix

Dev install

The following playbook will produce a modified image with Python source code installed via pip. To minimize dependencies within the container we generate the sdist locally and then copy it into the resulting container image as an sdist tarball to run pip install locally.

It can be used to pull a review from OpenDev Gerrit:

- hosts: localhost
  connection: local
  tasks:
  - name: dev install heat-api
    import_role:
      name: ansible-role-tripleo-modify-image
    vars:
      tasks_from: dev_install.yml
      source_image: docker.io/tripleomaster/centos-binary-heat-api:current-tripleo
      refspecs:
        -
          project: heat
          refspec: refs/changes/12/1234/3
      modified_append_tag: -devel

or it can be used to build an image from a local Python directory:

- hosts: localhost
  connection: local
  tasks:
  - name: dev install heat-api
    import_role:
      name: ansible-role-tripleo-modify-image
    vars:
      tasks_from: dev_install.yml
      source_image: docker.io/tripleomaster/centos-binary-heat-api:current-tripleo
      modified_append_tag: -devel
      python_dir:
        - /home/joe/git/openstack/heat

License

Apache 2.0