devel July 2016

devel@lists.centos.org

36 participants
38 discussions

Feedback needed: ideas for the Vagrant images
by Laurentiu Pancescu 11 Jul '16

11 Jul '16

Hi there, I would appreciate some feedback on a few ideas for our Vagrant images. Our CentOS images for Vagrant are currently not setup according to the upstream recommendations for base boxes, and I'd like to change that. [1] Here's the list of necessary modifications: I. root password should be 'vagrant': already filed by Lalatendu Mohanty as issue #30 on GitHub [2]. I should mention that Karanbir Singh has some reservations related to security. However, the box already has passwordless sudo, and changing the root password is just a "sudo passwd" away (I tried, it warns about a bad password, but it accepts it). Although public key auth is enabled, password-based authentication isn't disabled, and sshd will happily let anyone log in to any public box as vagrant:vagrant. We should probably only allow local password logins (on the console), for both root and vagrant; not sure if the best way to enforce this is sshd_config or PAM. II. use /vagrant as the sync directory: we currently use /home/vagrant/sync, this change is already planned for the release following 1606 III. "UseDNS no" in sshd_config: this would make connections via ssh faster Additional ideas for optimization: IV. disable requiretty in /etc/sudoers: this allows users to enable the pipelining feature of the Ansible provisioner, which significantly increases its speed (it's about 2 times faster in my tests). [3] V. set GRUB_TIMEOUT to 1 or 0: this reduces or eliminates the waiting time before the default kernel is booted (the VM runs generally without a display, so it makes no sense to wait there) Best regards, Laurențiu [1] https://www.vagrantup.com/docs/boxes/base.html [2] https://github.com/CentOS/sig-cloud-instance-build/issues/30 [3] https://docs.ansible.com/ansible/intro_configuration.html#pipelining

5 7

Rebuilding RDO for ppc64le
by Xiandong Meng 11 Jul '16

11 Jul '16

In RDO Austin BOF meeting, I have proposed to rebuild RDO packages for ppc64le. And a few discussions have been carried over since then. Now with the power builders up and running on cbs (http://cbs.centos.org/koji/hosts) I'd like to write to the mailinglist for more broad discussing. The goal is to rebuild RDO packages for ppc64le in CBS. And we will start with Mitaka release as it is a recent stable release. And one of the idea was to 1. create a new tag (cloud7-openstack-mitaka-candidate-ppc64le?) 2. import all 'noarch' builds from cloud7-openstack-mitaka-* tags 3. send all required packages to the builder 4. test resulting packages for installation & function validation (via ci pipeline?) 5. import/merge all of them to propose cloud7-openstack-* tag I think we need to proceed with this work without touching x86 tags until it is ready for merge. I have experience building the packages with local mock build environment, but i may need help to initiate that build work in CBS. Any comments/suggestions are welcome. Regards, Alex Meng <mengxiandong(a)gmail.com> mengxiandong(a)gmail.com

3 2

[cockpit] Broken dependencies in CentOS Extras
by Haïkel 08 Jul '16

08 Jul '16

Hi, while running repoclosure on Cloud SIG repositories, I found out that cockpit had missing dependencies. <snip> Last metadata expiration check: 0:00:02 ago on Wed Jul 6 19:53:59 2016. package: cockpit-ostree-0.108-1.el7.centos.x86_64 from centos-extras unresolved deps: rpm-ostree-client >= 2015.11-1 /usr/libexec/rpm-ostreed package: cockpit-selinux-0.108-1.el7.centos.noarch from centos-extras unresolved deps: setroubleshoot-server >= 3.3.3 </snip> Could be fine, but it's best to check with you guys. Regards, H.

4 3

Re: [CentOS-devel] [rdo-list] [Arm-dev] next steps for altarch with ceph and openstack
by Jim Perrin 08 Jul '16

08 Jul '16

On 07/08/2016 03:35 AM, Alan Pevec wrote: > On Fri, Jul 8, 2016 at 4:00 AM, Haïkel <hguemar(a)fedoraproject.org> wrote: >> 2016-07-07 17:41 GMT+02:00 Jim Perrin <jperrin(a)centos.org>: > ... >>> I might suggest that for now (until we get the mirror bits sorted), we >>> create a centos-release-mitaka-altarch package. This would avoid needing >>> to mess with the existing x86_64 bits. once everything is aligned, then >>> we can obsolete/provides the replacement and use the standard package >>> across all architectures. >> >> Works for me. > > I didn't understand why we need separate release -altarch package. I > understand we do need separate CBS tags but they could be still mapped > into the same per-arch locations under > http://buildlogs.centos.org/centos/7/cloud/ and > http://mirror.centos.org/centos/7/cloud/ so that current OpenStack > CloudSIG .repo [1] which uses $basearch will work. Mappings for > testing repo request (e.g. for RDO Newton [2]) would be: > The problem here is that the aarch64 builds are currently at mirror.centos.org/altarch/ not at /centos/, so either way we'll end up with split repositories for the architecture. I'm only suggesting a second package as a short term solution until we come up with a better way to manage this. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

1 0

New CentOS Atomic Host release available for download
by Jason Brooks 08 Jul '16

08 Jul '16

An updated version of CentOS Atomic Host (tree version 7.20160707) is now available for download[1], featuring updated versions of docker (1.10.3) and the atomic run tool (1.10.5). CentOS Atomic Host is a lean operating system designed to run Docker containers, built from standard CentOS 7 RPMs, and tracking the component versions included in Red Hat Enterprise Linux Atomic Host. [1] https://wiki.centos.org/SpecialInterestGroup/Atomic/Download CentOS Atomic Host is available as a VirtualBox or libvirt-formatted Vagrant box, or as an installable ISO, qcow2 or Amazon Machine image. These images are available for download at cloud.centos.org. The backing ostree repo is published to mirror.centos.org. CentOS Atomic Host includes these core component versions: - docker-1.10.3-44.el7.centos.x86_64 - kubernetes-1.2.0-0.12.gita4463d9.el7.x86_64 - kernel-3.10.0-327.22.2.el7.x86_64 - atomic-1.10.5-5.el7.x86_64 - flannel-0.5.3-9.el7.x86_64 - ostree-2016.5-3.atomic.el7.x86_64 - etcd-2.2.5-2.el7.0.1.x86_64 - cloud-init-0.7.5-10.el7.centos.1.x86_64 Upgrading If you're running a previous version of CentOS Atomic Host, you can upgrade to the current image by running the following command: $ sudo atomic host upgrade Images Vagrant CentOS-Atomic-Host-7-Vagrant-Libvirt.box (467 MB) and CentOS-Atomic-Host-7-Vagrant-Virtualbox.box (477 MB) are Vagrant boxes for Libvirt and Virtualbox providers. The easiest way to consume these images is via the Atlas / Vagrant Cloud setup (see https://atlas.hashicorp.com/centos/boxes/atomic-host) For example, getting the VirtualBox instance up would involve running the following two commands on a machine with vagrant installed: $ vagrant init centos/atomic-host && vagrant up --provider virtualbox ISO The installer ISO (751 MB) can be used via regular install methods (PXE, CD, USB image, etc.) and uses the Anaconda installer to deliver the CentOS Atomic Host. This image allows users to control the install using kickstarts and to define custom storage, networking and user accounts. This is the recommended option for getting CentOS Atomic Host onto bare metal machines, or for generating your own image sets for custom environments. QCOW2 The CentOS-Atomic-Host-7-GenericCloud.qcow2 (1.1 GB) image is suitable for use in on-premise and local virtualized environments. We test this on OpenStack, AWS and local Libvirt installs. If your virtualization platform does not provide its own cloud-init metadata source, you can create your own NoCloud iso image. Amazon Machine Images Region Image ID us-east-1 ami-956fe882 us-west-2 ami-17569677 us-west-1 ami-191e5879 eu-west-1 ami-a06601d3 eu-central-1 ami-c431dbab ap-southeast-1 ami-9638e5f5 ap-northeast-1 ami-fc867b9d ap-southeast-2 ami-6fab800c ap-northeast-2 ami-aca369c2 sa-east-1 ami-30f96d5c SHA Sums 0eb6fe98706c72635d2f156d3f9cbc4447db3234dafd792ed2b966a562695dcf CentOS-Atomic-Host-7.1606-GenericCloud.qcow2 3af5dba377f31f52817820f8b940d0490da11d74d01edd70182171f21382fc65 CentOS-Atomic-Host-7.1606-GenericCloud.qcow2.gz d28b3f21de85c6c072e277bf873d1657364f6b82f08c91b05ed001ceadb07b79 CentOS-Atomic-Host-7.1606-GenericCloud.qcow2.xz ee98acb5a50288e03dc052d4ae5cf0ccbab518f2f15f35500217c90d8088d627 CentOS-Atomic-Host-7.1606-Installer.iso 43ca397be511a32b3c750a73474039f965d6cc5c7dcfb74846e66366f5d758db CentOS-Atomic-Host-7.1606-Vagrant-Libvirt.box d458714f89b1ee3d4e4b7b097877cec9ceec5e651fec9374b4457e5a6c172f3d CentOS-Atomic-Host-7.1606-Vagrant-Virtualbox.box Release Cycle The CentOS Atomic Host image follows the upstream Red Hat Enterprise Linux Atomic Host cadence. After sources are released, they're rebuilt and included in new images. After the images are tested by the SIG and deemed ready, we announce them. Getting Involved CentOS Atomic Host is produced by the CentOS Atomic SIG, based on upstream work from Project Atomic. If you'd like to work on testing images, help with packaging, documentation -- join us! The SIG meets weekly on Thursdays at 16:00 UTC in the #centos-devel channel, and you'll often find us in #atomic and/or #centos-devel if you have questions. You can also join the atomic-devel mailing list if you'd like to discuss the direction of Project Atomic, its components, or have other questions. Getting Help If you run into any problems with the images or components, feel free to ask on the centos-devel mailing list. Have questions about using Atomic? See the atomic mailing list or find us in the #atomic channel on Freenode.

1 0

Re: [CentOS-devel] [Arm-dev] next steps for altarch with ceph and openstack
by Marcin Juszkiewicz 07 Jul '16

07 Jul '16

W dniu 05.07.2016 o 18:38, George Dunlap pisze: > On 05/07/16 16:49, Marcin Juszkiewicz wrote: >> W dniu 05.07.2016 o 16:28, Jim Perrin pisze: >>> With the work that Marcin has done for openstack on aarch64, as well >>> as the ceph builds, we need to begin working a plan for publishing >>> these builds to a mirror. I'd like to identify the steps needed, and >>> the ownership for those steps. >>> >>> Thomas please correct/update these as needed >> >> Added few people to Cc: from pre-RH summit threads. >> >>> 1. new tag in cbs for aarch64 build, with modified dist for mitaka. >>> Will ceph need this as well? >> >>> 2. If we wish to re-use the centos-release-openstack-mitaka noarch, >>> dependencies of centos-release-ceph-hammer, centos-release-qemu-ev, >>> centos-release-storage-common, and centos-release-virt-common need >>> to be addressed. >> >> It would be good to populate all those repositories. I opened bugs for >> all tags: >> >> https://bugs.centos.org/view.php?id=11084 (openstack) >> https://bugs.centos.org/view.php?id=11085 (ceph) >> https://bugs.centos.org/view.php?id=11086 (virt/kvm-common) > > I looked at this bug, but I couldn't tell exactly what packages you > wanted in here, and why the existing KVM packages weren't sufficient. > Could you just sketch out a brief summary? You are right. I am sometimes still lost in CentOS repository structure. What is in x86-64 virt/kvm-common repository is present in os/ one for aarch64 already. Only qemu-kvm-ev update (2.7.1 -> 2.10.1) would be nice to have. So we can kill that dependency from centos-release-openstack-mitaka package. Added note to the bug (I lack permissions to close it as notabug).

2 1

CentOS PaaS SIG meeting (2016-07-06)
by Troy Dawson 07 Jul '16

07 Jul '16

Hello, It's time for our weekly PaaS SIG sync-up meeting Time: 1700 UTC - Wedensdays Date: Today Wedensday, 6 July 2016 Where: IRC- Freenode - #centos-devel Agenda: - OpenShift Current Status -- rpms --- openshift-ansible -- Automated testing -- Documentation -- Automated rpm building -- images / image building --- KB will walk us through image building - Open Floor

2 2

CBS users : x509 user certificates expiring policy
by Fabian Arrotin 06 Jul '16

06 Jul '16

Due to some reports in #centos-devel on irc.freenode.net, we thought it would be good to send a reminder at least on this list about the x509 cert/policy for cbs.centos.org : If you have an account on https://accounts.centos.org and are an active builder/developer using https://cbs.centos.org to build pkgs for one or multiple SIGs, it's worth knowing that initially we had the ~6 months validity period for certificates generated through ACO. We documented the "Expired Certificate" error on the dedicated wiki page (see https://wiki.centos.org/HowTos/CommunityBuildSystem?#head-e81bf95796a59cbfd…) but it seems some people forgot about it. So this is just a reminder that you'd have to check if your cert is still valid if you're using cbs.centos.org. On our side, we're working on an automated email reminder that would be sent to people having their certs expired or near expiring date. That way you'll know that you just have to use centos-cert (https://wiki.centos.org/HowTos/CentosPackager) to recreate a new cert (and that step will automatically revoke the previous one) If you have any questions, feel free to discuss this here or in #centos-devel on irc.freenode.net -- Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab

2 3

python-centos-0.1.1-1 Released, centos-packager built for f24 certificate expiration
by Brian Stinson 05 Jul '16

05 Jul '16

Hi Folks, I've released an update to python-centos that fixes an issue when running `centos-cert -v`. The tool will now check the expiration date of your accounts.centos.org user certificate and report it invalid if it's expired. You should find python-centos-0.1.1-1 in CentOS-Extras shortly. I also used this opportunity to publish builds for the centos-packager suite in COPR for Fedora 24, you can find those here: https://copr.fedorainfracloud.org/coprs/bstinson/centos-packager/ If you have any feedback or questions, let us know here. Cheers! -- Brian

1 0

next steps for altarch with ceph and openstack
by Jim Perrin 05 Jul '16

05 Jul '16

With the work that Marcin has done for openstack on aarch64, as well as the ceph builds, we need to begin working a plan for publishing these builds to a mirror. I'd like to identify the steps needed, and the ownership for those steps. Thomas please correct/update these as needed 1. new tag in cbs for aarch64 build, with modified dist for mitaka. Will ceph need this as well? 2. If we wish to re-use the centos-release-openstack-mitaka noarch, dependencies of centos-release-ceph-hammer, centos-release-qemu-ev, centos-release-storage-common, and centos-release-virt-common need to be addressed. Alternately we could create a centos-release-openstack-mitaka-experimental for now if it can work stand-alone. 3. Mirror locations on buildlogs and mirrors need to be created and tested. Possible adjustments to existing -release files due to the /altarch/ vs centos path differences. 4. Package signing. This should already work with existing infra, but need to test and validate. -- Jim Perrin The CentOS Project | http://www.centos.org twitter: @BitIntegrity | GPG Key: FA09AD77

3 2

Git.centos.org
by Karanbir Singh 04 Jul '16

04 Jul '16

Hi Guys, Working on git.centos.org over the next few days, start at midnight 4th / 5th night and going to midnight 6th /7th night, July 2016 UTC. There should not be any real downtime, but there will be some periods of slow response rates. If anyone notices any form of oddities, please reach out either here on the list, or on #centos-devel on irc.freenode.net regards -- Karanbir Singh, Project Lead, The CentOS Project +44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS GnuPG Key : http://www.karan.org/publickey.asc

1 0

Update on status of CentOS Community Container Pipeline
by Mohammed Ahmed 04 Jul '16

04 Jul '16

Hi all, Here is the update in for the work done recently, for the CentOS Community Container Pipeline. - There was an issue where the entry point of the container was running, instead of the build / test / delivery scripts specified by the user. We solved this by overriding entry point in all the stages. - Setup a basic framework for running test suits, such as scans against containers. This currently runs a check for updates and reports the same, but the target is to get a scanner to to be fit into the framework. - Solved the problem of some repositories using specific dockerfiles (such as Dockerfile.centos7), by allowing the user to specify a custom dockerfile name as target. - Verified sclo (Software Collections) containers in preparation for adding them to the pipeline. The status of the same can be currently viewed in a document[1]. - Had a knowledge sharing session, so as to get the entire team on the same page. In the coming days, we will be focusing on: - Getting sclo containers through the pipeline. - Coming up with a contribution documentation to instruct new contributors on how to setup an environment and start contributing. - Updating the origin dockerfiles and getting CentOS Dockerfiles, through the pipeline - Getting the test suites planned and setup, especially the scanners [1] https://docs.google.com/spreadsheets/d/1Ex41eOSe5XlHcu5U8bWmCLtupjG4JNG9abZ… -- Cheers, *Mohammed Zeeshan Ahmed* Associate Software Engineer, Redhat Developers Team (Devtools) IRC : mzee1000 mohammedzee1000.wordpress.com RED HAT | DIFFERENT FOR THE SAKE OF BETTER TECHNOLOGY Find out why every airline, telecom, commercial bank, healthcare, and financial data services company in the Fortune 500 relies on Red Hat. Trusted | Red Hat <https://mojo.redhat.com/external-link.jspa?url=http%3A%2F%2Fwww.redhat.com%…> Old PGP Public Key : http://pgp.mit.edu/pks/lookup?op=get&search=0x726A119E62847E37 (REVOKED) New PGP Public Key : https://pgp.mit.edu/pks/lookup?op=get&search=0x147A8569AFC5E9ED

1 0

How to build maven packages in CBS?
by Rich Megginson 04 Jul '16

04 Jul '16

Are there any instructions/examples about how to use `cbs maven-build/maven-chain`?

8 19

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

devel July 2016