We need to specify doc requirements in doc/requirements.txt
to avoid problems with the pip resolver for the release team.
Removed specific doc requirements from test-requirements.txt
Change-Id: Ibeb6253046787a7a0768879067facaaeb0137cdb
Adds logic to loop through the path debian uses to remove excess
firmware binaries that are un-needed for the agent to operate.
Change-Id: I95a12215b8c5b2d52f52145f79b5f245138ebfde
This change let user to explicitly set ELEMENTS_PATH to custom DIB
elements while running the script or use already set as environment
variable. It will prepend path to 'ironic-python-agent-builder' instead
of overwriting it.
Change-Id: I7ec6c222e9678d7dbb3f4f50c3a2de0a9c9a5793
Story: 2007309
Task: 38809
Removed additional firmware, largely Wi-Fi and embedded
SoC firmware, from the ramdisk as these devices are unlikely
to be needed in the process of the use of a deployment ramdisk.
Change-Id: Ia63c4d5d6c00c7fa64e7c2d570645b8a16aaf0c3
With only 270MiB in size, the Debian images are likely candidates
for our future default images. Given that CentOS Stream 8 images
are nearly 500MiB in size, Debian may be our only path forward.
Enable installing firmware on Debian images to make them suitable
for bare metal installations.
Do not try to install biosdevname on non-RH systems.
Change-Id: I2c2a71c4afd0cd534961317b7fe9d3fb5d007d24
This reverts commit
0d16bee11b.
It is being reverted as the centos stream images
contain extra, un-necessary libraries and packages
installed which swells the ramdisk size up substantially
and is causing failures in CI as the compressed image size
expanded by about 100MB, and uncompressed the stream images
are 1.1GB.
Change-Id: I71eed30c27c109ac03d41e6ec46067148eb9b007
Regular CentOS 8 is deprecated and is planned to reach EOL in 2021.
Use CentOS Stream which will also give us access to bug fixes and
features earlier.
Change-Id: I485271ade7594f7c4d17ed81aa677679ef4fb49e
Starting from pip 20.2 the --install-option doesn't work anymore,
and we knew it was going to stop working since a while.
Trying to work around that removing the option and just linking the
scripts to the final destination.
Change-Id: Ie24cb597ac6d64dda78284ef522418dd0ccd055f
Remove duplicate items from pkg-map and uninstall build-time
dependencies after building the image.
Uninstall cloud-init, tuned and teamd in post-install since they
may get pulled by other elements.
Uninstall GObject components and mozjs which seem to be included.
Remove non-existing cronie.
Change-Id: I656c7524d8f543056194207fab371c6e313f9548
Since the migration to CentOS 8 we have been using 'centos' in
the published image names intead of 'centos8'. Fix that.
Change-Id: I65236379e93516c0fc447ce4d4edc89194e682b1
The Fedora based ramdisk is outright broken with SELinux enforcing.
TripleO actually ships its ramdisks with selinux-permissive, let's
do the same.
Change-Id: Icfec4b8109a0ddefeb0f200c3fd1f1e2de104839
Versions of hacking from 3.1.0 until 4.0.0 NOT included are supposed
to require a safe version of flake8, so besides normale issues related
to minor version upgrades, we can safely use those versions.
Also forcing pycodestyle versions to be compatible with flake8 installed
by hacking.
Change-Id: If790ffa7980f90426ec91e2bd2d862541ecbc061
DIB images support /etc/ironic-python-agent.d configuration directory,
make tinyIPA support the same.
Change-Id: I4c9c02c7450ec2300e6aa23b38bad979b8937caa
Using centos element to build centos8 based image with dib.
The centos-minimal element can't be used on ubuntu focal at the
moment because of missing components (e.g. yum-utils) used by
diskimage-builder to bootstrap the image.
Change-Id: I074abf442280eaee5616b95401fa84bb6fff99ea
We should take advantage of the latest tinycore image version to
build ipa ramdisks, just to be able to use kernel from series 5.x
Depends-On: https://review.opendev.org/739448
Depends-On: https://review.opendev.org/756353
Story: 2007855
Task: 40158
Change-Id: I852aeac090bb38dbb20f8484e191ba76b42c9dd9
Requires returning EPEL support because of some dependencies.
Co-Authored-By: Mark Goddard <mark@stackhpc.com>
Co-Authored-By: Will Szumski <will@stackhpc.com>
Change-Id: I8da33dabda34e626baf6e7895fc450973d0a8fef
Before this change, Ironic was required to send
`ipa-advertise-protocol=https` with pxe parameters to make this
code work.
Instead, ensure we *always* advertise https, via static ramdisk
configuration, when TLS is enabled.
Change-Id: I1c0bc85aefe592a2a614f60112a8982e0f03fcf7
Without this spelled properly, DIB does not run the pre
finalization script, rendering the feature nonfunctional.
Change-Id: Ided93ad85f6a71c2b7679a329404a575b9d90d61
agent.cacert.pem is copied into /etc/ironic-python-agent.d, not
/etc/ironic-python-agent
Change to using a variable for that path, so it can't happen again
Change-Id: I530a97bab0883f875fd5103846ebc4dd356d5c5b
In trying to do a UEFI partition image, we need dosfstools
and our tinycore image doesn't have it present.
Ultimately this raises an exception along the lines of:
prepare_image, error: Failed to create a file system.
File system vfat is not supported.:
ironic_lib.exception.FileSystemNotSupported:
Failed to create a file system. File system vfat is not
supported.
Which is rooted in the mkfs.vfat binary not being
present.
mkfs: failed to execute mkfs.vfat: No such file or directory
I confirmed the tinycore-master image does indeed lack
the dosfstools package. As such adding it to the final
requirements list should enable tinycore to support UEFI
partition image deployments.
Change-Id: I7df395bd2dcc5613a54a21d4aaa14b1e5862e7c3
- Fixed a syntax error, and an ordering issue in DIB TLS element
- Removed unneeded deps, since openssl runs on build machine now
Change-Id: Idcdaefdb3aa80fd651ca6de35d18d3581ffe5116
First, this change preconfigures IPA to use a configdir. This will
permit deployers to add or modify IPA configuration in elements.
This change was a prerequisite to adding additional DIB elements
which require configuration.
Additionally, this adds a DIB element to configure TLS support for
IPA's API. If added to a ramdisk build with no configuration, it
will create a self-signed certificate and configure IPA to use it.
It also exposes various environment variables to allow deployers
to use preexisting certificates or CA files.
Change-Id: Ibf88937766fa32f72b90ca81f9e8fba3515b6e33