58eee09c15
This centralizes all user and group creation into a single source. This will fix any current and furture uid/gid mismatches (such as with nova-libvirt). In the process, we also unify users between the distros in a standard way. The users in the following containers change from thier defaults: Ubuntu: _chrony user is now chrony Ubuntu: memcache user is now memcached All: qemu user is used for ownership and socket permissions All uid and gid numbers are customizable via kolla-build.conf Co-Authored-By: Kris Lindgren <klindgren@godaddy.com> Change-Id: I120f26ab0683dc87d69727c3df8d4707e52a4543 Partially-Implements: blueprint static-uid-gid
83 lines
2.7 KiB
Django/Jinja
83 lines
2.7 KiB
Django/Jinja
FROM {{ namespace }}/{{ image_prefix }}openstack-base:{{ tag }}
|
|
MAINTAINER {{ maintainer }}
|
|
|
|
{% block gnocchi_base_header %}{% endblock %}
|
|
|
|
{% import "macros.j2" as macros with context %}
|
|
|
|
{{ macros.configure_user(name='gnocchi') }}
|
|
|
|
{% if install_type == 'binary' %}
|
|
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
|
|
|
|
{% set gnocchi_base_packages = [
|
|
'openstack-gnocchi-common',
|
|
'python-gnocchiclient',
|
|
'httpd',
|
|
'mod_wsgi',
|
|
'python-ldappool',
|
|
'python-rados'
|
|
] %}
|
|
|
|
{{ macros.install_packages(gnocchi_base_packages | customizable("packages")) }}
|
|
RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf
|
|
{% elif base_distro in ['ubuntu'] %}
|
|
|
|
{% set gnocchi_base_packages = [
|
|
'gnocchi-common',
|
|
'apache2',
|
|
'libapache2-mod-wsgi',
|
|
'python-ldappool',
|
|
'python-rados'
|
|
] %}
|
|
|
|
{{ macros.install_packages(gnocchi_base_packages | customizable("packages")) }}
|
|
RUN truncate -s 0 /etc/apache2/ports.conf
|
|
|
|
{% endif %}
|
|
{% elif install_type == 'source' %}
|
|
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
|
|
|
|
{% set gnocchi_base_packages = [
|
|
'httpd',
|
|
'mod_wsgi',
|
|
'python-ldappool',
|
|
'python-rados'
|
|
] %}
|
|
{{ macros.install_packages(gnocchi_base_packages | customizable("packages")) }}
|
|
RUN mkdir -p /var/www/cgi-bin/gnocchi \
|
|
&& sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf
|
|
{% elif base_distro in ['ubuntu', 'debian'] %}
|
|
|
|
{% set gnocchi_base_packages = [
|
|
'apache2',
|
|
'libapache2-mod-wsgi',
|
|
'python-ldappool',
|
|
'python-rados'
|
|
] %}
|
|
|
|
{{ macros.install_packages(gnocchi_base_packages | customizable("packages")) }}
|
|
RUN truncate -s 0 /etc/apache2/ports.conf
|
|
|
|
{% endif %}
|
|
ADD gnocchi-base-archive /gnocchi-base-source
|
|
|
|
RUN ln -s gnocchi-base-source/* gnocchi \
|
|
&& /var/lib/kolla/venv/bin/pip --no-cache-dir install --upgrade -c requirements/upper-constraints.txt gnocchiclient /gnocchi[keystone,mysql,file,ceph] \
|
|
&& mkdir -p /etc/gnocchi /var/log/kolla/gnocchi \
|
|
&& chown -R gnocchi: /etc/gnocchi /var/log/kolla/gnocchi
|
|
|
|
{% endif %}
|
|
|
|
COPY extend_start.sh /usr/local/bin/kolla_extend_start
|
|
COPY gnocchi_sudoers /etc/sudoers.d/kolla_gnocchi_sudoers
|
|
|
|
RUN mkdir -p /var/lib/gnocchi \
|
|
&& chown -R gnocchi: /var/lib/gnocchi \
|
|
&& chmod 750 /etc/sudoers.d \
|
|
&& chmod 640 /etc/sudoers.d/kolla_gnocchi_sudoers \
|
|
&& touch /usr/local/bin/kolla_gnocchi_extend_start \
|
|
&& chmod 755 /usr/local/bin/kolla_extend_start /usr/local/bin/kolla_gnocchi_extend_start
|
|
|
|
{% block gnocchi_base_footer %}{% endblock %}
|