[draft] RockyLinux 9.7

.github/workflows/stackhpc-all-in-one.yml

@@ -314,6 +314,26 @@ jobs:
         env:
           KAYOBE_AUTOMATION_SSH_PRIVATE_KEY: ${{ steps.ssh_key.outputs.ssh_key }}
 
+      - name: Pull container images
+        run: |
+          # Try up to 3 times to pull container images.
+          for attempt in $(seq 3); do
+              docker run -t --rm \
+                -v $(pwd):/stack/kayobe-automation-env/src/kayobe-config \
+                -e KAYOBE_ENVIRONMENT -e KAYOBE_VAULT_PASSWORD -e KAYOBE_AUTOMATION_SSH_PRIVATE_KEY \
+                ${{ steps.kayobe_image.outputs.kayobe_image }} \
+                /stack/kayobe-automation-env/src/kayobe-config/.automation/pipeline/overcloud-container-image-pull.sh
+              if [ "$?" = "0" ]; then
+                  echo "Pulled container images on attempt $attempt"
+                  exit 0
+              fi
+              echo "Failed to pull container images on attempt $attempt"
+          done
+          echo "Failed to pull container imagers after $attempt attempts"
+          exit 1
+        env:
+          KAYOBE_AUTOMATION_SSH_PRIVATE_KEY: ${{ steps.ssh_key.outputs.ssh_key }}
+
       - name: Service deploy
         run: |
           docker run -t --rm \

.github/workflows/stackhpc-multinode-periodic.yml

@@ -7,6 +7,7 @@ name: Multinode periodic
   schedule:
     # Runs nightly at 2:42 AM.
     - cron: "42 2 * * *"
+  workflow_dispatch:
 jobs:
   generate-inputs:
     name: Generate inputs
@@ -33,7 +34,10 @@ jobs:
 
       - name: Display generated inputs
         run: |
-          echo '${{ toJSON(steps.generate-inputs.outputs) }}'
+          echo '## generated inputs:' > "$GITHUB_STEP_SUMMARY"
+          echo '```' >> "$GITHUB_STEP_SUMMARY"
+          echo '${{ toJSON(steps.generate-inputs.outputs) }}' | tee -a "$GITHUB_STEP_SUMMARY"
+          echo '```' >> "$GITHUB_STEP_SUMMARY"
   multinode:
     name: Multinode periodic
     needs:

etc/kayobe/kolla-image-tags.yml

@@ -4,25 +4,25 @@
 # where the key is the OS distro and the value is the tag to deploy.
 kolla_image_tags:
   openstack:
-    rocky-9: 2025.1-rocky-9-20250730T105631
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20250730T105631
   iscsid:
-    rocky-9: 2025.1-rocky-9-20251013T135156
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20251013T135156
   keystone:
-    rocky-9: 2025.1-rocky-9-20251031T094539
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20251031T094539
   kolla_toolbox:
-    rocky-9: 2025.1-rocky-9-20250905T151507
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20250905T151507
   magnum:
-    rocky-9: 2025.1-rocky-9-20251016T073648
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20251016T073648
   ovn:
-    rocky-9: 2025.1-rocky-9-20250915T100822
+    rocky-9: 2025.1-rocky-9-20251208T092405
   prometheus_libvirt_exporter:
-    rocky-9: 2025.1-rocky-9-20250822T151934
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20250822T151934
   rabbitmq:
-    rocky-9: 2025.1-rocky-9-20250905T151507
+    rocky-9: 2025.1-rocky-9-20251208T092405
     ubuntu-noble: 2025.1-ubuntu-noble-20250905T151507

etc/kayobe/kolla.yml

@@ -23,6 +23,11 @@ kolla_source_version: "{{ stackhpc_kolla_source_version }}"
 # Path in which to generate kolla configuration.
 #kolla_build_config_path:
 
+# View debug logs, like source downloads, during image build.
+kolla_build_extra_config: |
+  [DEFAULT]
+  debug = True
+
 ###############################################################################
 # Kolla-ansible installation.
 

etc/kayobe/kolla/kolla-build.conf

@@ -29,3 +29,8 @@ sha256 = amd64:1fd60b1fd59c239bed22719a5de402cb745d1f933540cb1ec196e2c03e6e8882,
 [magnum-conductor-plugin-helm]
 version = v3.18.2
 sha256 = amd64:c5deada86fe609deefdf40e9cbbe3da2f8cf3f6a4551a0ebe7886dc8fcf98bce,arm64:03181a494a0916b370a100a5b2536104963b095be53fb23d1e29b2afb1c7de8d
+
+# TODO: move to kolla_sources in kolla.yml once https://review.opendev.org/c/openstack/kayobe/+/970268 is available
+[prometheus-cadvisor]
+version = 0.54.1
+sha256 = amd64:21be8d2797433048474e676d37c215c28fb171509448ef9b1c4648a564e39595,arm64:21f7bac786f6c53a8091964b4d3ff2486a0c460e5a410000b59a9a565b4183a9

etc/kayobe/ofed.yml

@@ -3,7 +3,10 @@
 
 ###############################################################################
 # DOCA host version
-stackhpc_pulp_doca_version: "{{ '2.9.3' if stackhpc_pulp_repo_rocky_9_minor_version == '6' else '2.9.1' }}"
+stackhpc_pulp_doca_version_matrix:
+    "6": 2.9.3
+    "7": 3.2.0
+stackhpc_pulp_doca_version: "{{ stackhpc_pulp_doca_version_matrix[stackhpc_pulp_repo_rocky_9_minor_version] | default('2.9.1') }}"
 
 ###############################################################################
 # Pulp configuration for DOCA OFED

etc/kayobe/pulp-host-image-versions.yml

@@ -1,5 +1,5 @@
 ---
 # Overcloud host image versioning tags
 # These images must be in SMS, since they are used by our AIO CI runners
-stackhpc_rocky_9_overcloud_host_image_version: "2025.1-20251216T122459"
+stackhpc_rocky_9_overcloud_host_image_version: "2025.1-20251209T112113"
 stackhpc_ubuntu_noble_overcloud_host_image_version: "2025.1-20250930T144255"

etc/kayobe/pulp-repo-versions.yml

@@ -18,6 +18,7 @@ stackhpc_pulp_repo_doca_2_9_1_rhel9_5_version: 20241211T171301
 stackhpc_pulp_repo_doca_2_9_1_rhel9_5_modules_version: 20250115T150314
 stackhpc_pulp_repo_doca_2_9_3_rhel9_6_version: 20250703T135021
 stackhpc_pulp_repo_doca_2_9_3_rhel9_6_modules_version: 20250714T141841
+stackhpc_pulp_repo_doca_3_2_0_rhel9_version: 20251204T124815
 stackhpc_pulp_repo_docker_ce_ubuntu_noble_version: 20250616T155742
 stackhpc_pulp_repo_elrepo_9_version: 20250610T235426
 stackhpc_pulp_repo_elrepo_9_aarch64_version: 20250408T030629
@@ -76,8 +77,24 @@ stackhpc_pulp_repo_rocky_9_6_extras_version: 20250726T040613
 stackhpc_pulp_repo_rocky_9_6_extras_aarch64_version: 20250726T045704
 stackhpc_pulp_repo_rocky_9_6_highavailability_version: 20250605T150141
 stackhpc_pulp_repo_rocky_9_6_highavailability_aarch64_version: 20250605T150141
-stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20250222T040303
-stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20250222T044743
+stackhpc_pulp_repo_rocky_9_7_appstream_version: 20251214T205707
+stackhpc_pulp_repo_rocky_9_7_appstream_aarch64_version: 20251214T205707
+stackhpc_pulp_repo_rocky_9_7_appstream_source_version: 20251214T205707
+stackhpc_pulp_repo_rocky_9_7_baseos_version: 20251214T212636
+stackhpc_pulp_repo_rocky_9_7_baseos_aarch64_version: 20251214T212636
+stackhpc_pulp_repo_rocky_9_7_baseos_source_version: 20251214T212636
+stackhpc_pulp_repo_rocky_9_7_crb_version: 20251214T205707
+stackhpc_pulp_repo_rocky_9_7_crb_aarch64_version: 20251214T205707
+stackhpc_pulp_repo_rocky_9_7_crb_source_version: 20251214T205707
+stackhpc_pulp_repo_rocky_9_7_extras_version: 20251203T103807
+stackhpc_pulp_repo_rocky_9_7_extras_aarch64_version: 20251203T103807
+stackhpc_pulp_repo_rocky_9_7_extras_source_version: 20251203T103807
+stackhpc_pulp_repo_rocky_9_7_highavailability_version: 20251206T205608
+stackhpc_pulp_repo_rocky_9_7_highavailability_aarch64_version: 20251206T205608
+stackhpc_pulp_repo_rocky_9_7_highavailability_source_version: 20251206T205608
+stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20251108T211425
+stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20251108T211425
+stackhpc_pulp_repo_rocky_9_sig_security_common_source_version: 20251108T211425
 stackhpc_pulp_repo_ubuntu_cloud_archive_version: 20250620T063939
 stackhpc_pulp_repo_ubuntu_noble_security_version: 20250620T113028
 stackhpc_pulp_repo_ubuntu_noble_version: 20250620T113028

etc/kayobe/pulp.yml

@@ -200,8 +200,8 @@ stackhpc_pulp_distribution_deb_production: >-
 
 # Whether to sync Rocky Linux 9 packages.
 stackhpc_pulp_sync_rocky_9: "{{ os_distribution == 'rocky' }}"
-# Rocky 9 minor version number. Supported values: 6. Default is 6
-stackhpc_pulp_repo_rocky_9_minor_version: '6'
+# Rocky 9 minor version number. Supported values: 7. Default is 7
+stackhpc_pulp_repo_rocky_9_minor_version: '7'
 # Rocky 9 Snapshot versions. The defaults use the appropriate version from
 # pulp-repo-versions.yml for the selected minor release.
 

etc/kayobe/trivy/allowed-vulnerabilities.yml

@@ -20,7 +20,10 @@ influxdb_allowed_vulnerabilities:
   - CVE-2024-45337
 magnum_conductor_allowed_vulnerabilities:
   - CVE-2024-45337
+opensearch_dashboards_allowed_vulnerabilities:
+  - CVE-2025-7783
 prometheus_blackbox_exporter_allowed_vulnerabilities:
+  - CVE-2024-24790
   - CVE-2024-45337
 prometheus_memcached_exporter_allowed_vulnerabilities:
   - CVE-2024-45337
@@ -31,7 +34,10 @@ prometheus_elasticsearch_exporter_allowed_vulnerabilities:
 prometheus_node_exporter_allowed_vulnerabilities:
   - CVE-2024-45337
 prometheus_openstack_exporter_allowed_vulnerabilities:
+  - CVE-2024-24790
   - CVE-2024-45337
+prometheus_ovn_exporter_allowed_vulnerabilities:
+  - CVE-2024-24790
 prometheus_libvirt_exporter_allowed_vulnerabilities:
   - CVE-2024-45337
 prometheus_cadvisor_allowed_vulnerabilities:

releasenotes/notes/rl9.7-c8d033f11097b76b.yaml

@@ -0,0 +1,9 @@
+---
+features:
+  - |
+    Added support for Rocky Linux 9.7, including host packages and a full
+    container image refresh.
+    XXXX PENDING CONTAINER BUILD
+upgrade:
+  - |
+    9.7 is now the default release for Rocky Linux.