This removes trusty from the repo and thus from OpenDev.
Afterwards the AFS volume mirror.wheel.trustyx64 can be deleted.
Depends-On: https://review.opendev.org/702771
Depends-On: https://review.opendev.org/702818
Change-Id: I3fa4c26b0c8aeacf1af76f9046ea98edb2fcdbd0
In openSUSE Tumbleweed, the SuSEfirewall2 package was removed in favor
of firewalld[1]. This commit updates the openSUSE nodeset to use plain
iptables rather than injecting iptables rules into the SuSEfirewall2
service. This will work on both Tumbleweed and Leap nodesets.
openSUSE provides no iptables-service package the way the RHEL family
does, so we can't fall back to that. Rather than try to convert iptables
rules to firewalld syntax, this change leverages init.d to ensure
iptables rules are loaded at boot. The 89-unbound script has been
coopted for this purpose since it already creates
/etc/init.d/boot.local. Switched from `dd` to `cat` which makes
conditionally composing the file more natural.
[1] https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
Change-Id: Ia2b72e25078efa68019f1bf7c7a0b77e6ff702fd
Add rhel7 distrib in unbound and iptables script for nodepool-base, and
add haveged installation for infra-package-needs to ensure users could
use these elements to build rhel based image.
Change-Id: Ib0ad877369bafab64a1fd25cc331363d771d5753
We now only have afs-slug.sh in jenkins/scripts/ and it is only
used by nodepool/scripts/configure_mirror.sh. Move the file into the
nodepool/scripts directory and adjust paths.
Remove copying of jenkins/scripts from nodepool, the directory does not
exist anymore.
Remove 89-jenkins-scripts, we don't need it anymore.
Depends-On: https://review.openstack.org/548393
Change-Id: I13cac791d70a2e5bcb0de1ba0adcd79e1b0aee9f
Remove using old location, we can switch now to the new location
everywhere.
Note: We can only merge this after new images are build with the new
location build in.
This needs a recheck once change 1 is in since project-config is
not self-testing. So, we can remove jenkins/data/bindep-fallback.txt in
this change.
Change-Id: I08f23e96defb152946ade1490628f37f0215300d
Depends-On: https://review.openstack.org/543141
Depends-On: https://review.openstack.org/543142
Let's get rid of jenkins in the name and use a new place to place
bindep-fallback.txt in.
Create new nodepool element to copy the file over.
This is a first of two changes for this repo, we also need to update
the few users in bindep and openstack-zuul-jobs before we can remove the
old location.
We can remove jenkins/data/bindep-fallback.txt only in the followup
change since project-config is not self-testing.
Change-Id: I5c94dcbbca25db7dd998bfbccfbb25c1c4342a2b
openSUSE Leap uses its own firewall manager called SuSEfirewall2, which
is capable of loading custom iptables rules. This patch adds the
necessary configuration to tell SuSEfirewall2 where to look for custom
firewall rules so that we can manage openSUSE firewall rules in the same
way we manage firewall rules for other images.
Change-Id: Ifaebda6c7775244668710340831e12aabf9e86bc
Instead of managing firewall rules with puppet we can statically copy
them into the image at build time.
Change-Id: I3ee306e46747b77499ff8975cd3d842b09ec2937
Because we also check sudoers files in our zuul-worker element, we
need to make sure our permissions are set in install.d not
postinstall.d.
This was also not an issue locally, since our puppet master seems to
chmod 0755 our elements directory on nodepool-builders.
Change-Id: Ibcfd2741263889ef2dce8e04237537a6d83de301
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
I incorrectly left the sudo extension on our jenkin sudo files.
This causes issues when using the sudo command.
Change-Id: I1b1bdc8622c945a75751cedc96f6b78bcf94122d
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Change Ie344c9f9f8cc39b102f0147ecffa189e1b83da1e set the permissions of
all executed files in jenkins/scripts, so we do not need to change
permissions anymore jenkins/* - the other directories do not contain
executable content at all.
Thus, remove the extra chmod.
Change-Id: Ib8990c5069a3a05c52aef9741a65ee3e8333ee44
As we remove our dependency from puppet, we now need to do more things
within DIB.
Change-Id: Iba227cfeb6e7abc2702c12f9186d6f8906d0fe49
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Neil Hanlon