1e1301ff8a
When building rockylinux images, DIB install the Minimal Install group
which pulls firewalld. By default it allows only SSH traffic, so we
would need specific rules for the management and tenant traffic, but as
we are using security groups, it's safe to remove firewalld.
Change-Id: I87a26faf6c72640d8916bc3452123a9b5a74d39f
(cherry picked from commit e8fd3b7843)
92 lines
1.5 KiB
YAML
92 lines
1.5 KiB
YAML
amphora-agent:
|
|
installtype: package
|
|
|
|
# Note: Uninstall of this does not remove all of the development packages.
|
|
# So some are called out here explicitly to be removed.
|
|
build-essential:
|
|
build-only: True
|
|
gcc:
|
|
uninstall: True
|
|
gcc-11:
|
|
uninstall: True
|
|
when:
|
|
- DISTRO_NAME = ubuntu
|
|
gcc-12:
|
|
uninstall: True
|
|
when:
|
|
- DISTRO_NAME = ubuntu
|
|
git-man:
|
|
uninstall: True
|
|
perl:
|
|
uninstall: True
|
|
# diskimage-builder installs firewalld in rockylinux, it's not needed as it
|
|
# blocks management and tenant traffic by default and we use security groups
|
|
firewalld:
|
|
uninstall: True
|
|
|
|
libffi-dev:
|
|
build-only: True
|
|
libssl-dev:
|
|
build-only: True
|
|
python3-dev:
|
|
build-only: True
|
|
installtype: source
|
|
python3-pip:
|
|
installtype: source
|
|
python3:
|
|
python3-venv:
|
|
installtype: source
|
|
|
|
acl:
|
|
# Note: Red Hat family does not currently ship acpid for ppc64le.
|
|
# This sets up a pkg-map to exclude it for Red Hat family ppc64le arch
|
|
acpid-ppc64le:
|
|
arch: ppc64le, ppc64el
|
|
acpid:
|
|
arch: amd64, aarch64, arm64, s390x
|
|
apparmor:
|
|
apt-transport-https:
|
|
at:
|
|
bash-completion:
|
|
cloud-guest-utils:
|
|
cloud-init:
|
|
cron:
|
|
curl:
|
|
dbus:
|
|
dkms:
|
|
dmeventd:
|
|
ethtool:
|
|
gawk:
|
|
ifenslave:
|
|
ifupdown:
|
|
iptables:
|
|
iputils-tracepath:
|
|
irqbalance:
|
|
isc-dhcp-client:
|
|
less:
|
|
logrotate:
|
|
lsof:
|
|
net-tools:
|
|
netbase:
|
|
netcat-openbsd:
|
|
network-scripts:
|
|
open-vm-tools:
|
|
arch: amd64
|
|
openssh-client:
|
|
openssh-server:
|
|
pollinate:
|
|
ppc64-diag:
|
|
arch: ppc64le, ppc64el
|
|
psmisc:
|
|
rsyslog:
|
|
screen:
|
|
socat:
|
|
tcpdump:
|
|
ubuntu-cloudimage-keyring:
|
|
uuid-runtime:
|
|
vim-tiny:
|
|
vlan:
|
|
|
|
nftables:
|
|
when: DIB_OCTAVIA_AMP_USE_NFTABLES = True
|