When priviledge mode is set, don't add any capabilities as they
are included.
Use 1.6.4 podman because 2.0.5 rootless doesn't work with
systemd [1]
Disable Selinux on host.
[1] https://github.com/containers/podman/issues/8965
Closes-Bug: #1910970
Change-Id: I73ac1c405e8a3539937a5578bb003cba0b935d94
This change moves our one tox-molecule job to simply depending on
the zuul tox job. To ensure we're not depending on the docker
driver at all, docker has been replaced with podman in the
tripleo_redhat_enforce test job.
Change-Id: I590a500b397d22d2e6fd4336f306caadcb690f45
Signed-off-by: Kevin Carter <kecarter@redhat.com>
This change converts our use of CentOS7/88 to UBI8, which should
provide a better test environment which will match that of
production for future releases of TripleO. While this image change
will better match production clouds thanks in large part to TCIB,
it will also remove our use of docker.io (dockerhub) which fraught
with peril due to the ongoing API rate limits saga.
Story: 2006061
Task: 34774
Change-Id: I067046e5fd4d56cd88712f553e25a61db60ced7f
Signed-off-by: Kevin Carter <kecarter@redhat.com>
OSP, the downstream version of tripleo have to enforce some policies
for rhel version and subscribed channel.
This module hosts hoses requirements, so that we prevent update to
wrong rhel release or subscription to wrong channels.
Currently it only implements a basic check to the subscribed rhel
version.
This check has some fail-safe logic to avoid crashing the update on
temporary network issue when running subscription-manager.
We are avoiding the validation framework as this can be easily
disabled and we want this enforcement to be mandatory as this could
lead user to unsupported combination of OSP/RHEL.
For upstream that change is transparent as the tasks are skipped if
the ansible_distribution is not Red Hat.
For Red Hat, there will be a mechanism in THT to avoid the check
altogether, for instance for CI purposes.
For this first check (RHEL/OSP version), downstream patches will add
the required values in vars/redhat.yml.
Change-Id: I2d1ac92ee6ee8407fb156a2718f94ad3e9220bbe
Sagi Shnaidman
Alan Bishop
Kevin Carter
Sofer Athlan-Guyot