zuul-jobs/test-playbooks/registry/buildset-registry-pre.yaml
Radosław Piliszek bae449c42c Reenable buildset-registry jobs
As a followup to I4d05f9b187f9e40c3dcb2597e08c5bb50c261b17

We switch buildset-registry jobs to debian bookworm which has new enough
golang to build the latest skopeo version. Latest skopeo is used in
order to get api version negotiation behavior which is necessary for
talking to modern docker (version 25 or newer).

Change-Id: Ie673ef6724b0a40e3cfb2ba83e90d566e1f1837c
Co-Authored-By: Clark Boylan <cboylan@sapwetik.org>
2024-03-21 21:09:01 +00:00

36 lines
1023 B
YAML

- hosts: all
roles:
- ensure-docker
- role: ensure-skopeo
vars:
# Needs to be new enough skopeo to negotiate docker api versions
ensure_skopeo_install_from_upstream: true
tasks:
# This happens in the pre-playbook of the
# opendev-buildset-registry job. Since we're testing these roles
# in opendev, and we're running a second buildset registry, we
# need to do the same here for it.
- name: Open the IPv4 port for the second buildset registry
become: true
iptables:
action: insert
chain: openstack-INPUT
destination_port: '9000'
jump: ACCEPT
match: tcp
ctstate: NEW
protocol: tcp
ip_version: ipv4
- name: Open the IPv6 port for the second buildset registry
become: true
iptables:
action: insert
chain: openstack-INPUT
destination_port: '9000'
jump: ACCEPT
match: tcp
ctstate: NEW
protocol: tcp
ip_version: ipv6