
Known missing packages: - mod_auth_mellon - missing SAML support in Keystone/Horizon - built in Kolla COPR - glusterfs-fuse in manila-share - built in Kolla COPR - collectd/telegraf - no opstools repository - redis - needs a switch to valkey - python3-ethtool - not required for neutron-mlnx-agent since 6 years [1] Building packages in Kolla COPR is a temporary solution until these show up in EPEL10. [1]: Id2cae3ac9ff049e9fc8225551f99e1e99a87fc65 Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/951751 Change-Id: I7074fabcf95184fcfd2561648ae1e05acfb0bc11 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
87 lines
2.6 KiB
Django/Jinja
87 lines
2.6 KiB
Django/Jinja
FROM {{ namespace }}/{{ image_prefix }}mariadb-base:{{ tag }}
|
|
{% block labels %}
|
|
LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build_date }}"
|
|
{% endblock %}
|
|
|
|
{% block mariadb_header %}{% endblock %}
|
|
|
|
{% import "macros.j2" as macros with context %}
|
|
|
|
{{ macros.configure_user(name='mysql') }}
|
|
|
|
{# NOTE(mgoddard): EPEL required for pv package #}
|
|
{# NOTE(mnasiadka): Use AppStream version of MariaDB for now in CentOS #}
|
|
{{ macros.enable_extra_repos(['epel']) }}
|
|
|
|
{% if base_package_type == 'rpm' %}
|
|
{% set mariadb_packages = [
|
|
'expect',
|
|
'mariadb-backup',
|
|
'mariadb-server',
|
|
'mariadb-server-galera',
|
|
'pv',
|
|
'rsync',
|
|
'tar'
|
|
] %}
|
|
|
|
{# NOTE(yoctozepto): this is to ensure Kolla Ansible can configure MariaDB to find it #}
|
|
RUN ln -s /usr/lib64/galera-4 /usr/lib64/galera
|
|
|
|
{% elif base_package_type == 'deb' %}
|
|
{{ macros.enable_extra_repos(['mariadb']) }}
|
|
{% set mariadb_packages = [
|
|
'expect',
|
|
'mariadb-backup',
|
|
'mariadb-server'
|
|
] %}
|
|
{% endif %}
|
|
|
|
{{ macros.install_packages(mariadb_packages | customizable("packages")) }}
|
|
|
|
COPY mariadb_sudoers /etc/sudoers.d/kolla_mariadb_sudoers
|
|
COPY extend_start.sh /usr/local/bin/kolla_extend_start
|
|
COPY security_reset.expect /usr/local/bin/kolla_security_reset
|
|
COPY backup.sh /usr/local/bin/kolla_mariadb_backup.sh
|
|
COPY backup_replica.sh /usr/local/bin/kolla_mariadb_backup_replica.sh
|
|
|
|
RUN chmod 644 /usr/local/bin/kolla_extend_start \
|
|
&& chmod 755 /usr/local/bin/kolla_security_reset \
|
|
/usr/local/bin/kolla_mariadb_backup.sh \
|
|
/usr/local/bin/kolla_mariadb_backup_replica.sh \
|
|
&& chmod 750 /etc/sudoers.d \
|
|
&& chmod 440 /etc/sudoers.d/kolla_mariadb_sudoers \
|
|
&& rm -rf /var/lib/mysql/*
|
|
|
|
{% if base_package_type == 'deb' %}
|
|
RUN mkdir -p /var/run/mysqld && chown mysql /var/run/mysqld && chmod 755 /var/run/mysqld
|
|
{% endif %}
|
|
|
|
{% if docker_healthchecks %}
|
|
{% block healthcheck_installation %}
|
|
|
|
COPY healthcheck_mariadb /usr/local/bin/healthcheck_mariadb
|
|
RUN chmod 755 /usr/local/bin/healthcheck_mariadb
|
|
|
|
{% endblock %}
|
|
{% endif %}
|
|
|
|
{% if use_dumb_init %}
|
|
{% block mariadb_entrypoint %}
|
|
# NOTE(mgoddard): Override the dumb-init arguments to avoid passing
|
|
# --single-child. This does not play well with mysqld_safe, which ignores
|
|
# SIGTERM, meaning Docker needs to forcibly kill the container to stop it.
|
|
# Without --single-child, the TERM signal is sent to all subprocesses,
|
|
# including mysqld.
|
|
|
|
ENTRYPOINT ["dumb-init", "--"]
|
|
CMD ["kolla_start"]
|
|
{% endblock %}
|
|
{% endif %}
|
|
|
|
{{ macros.kolla_patch_sources() }}
|
|
|
|
{% block mariadb_footer %}{% endblock %}
|
|
{% block footer %}{% endblock %}
|
|
|
|
USER mysql
|