Merge pull request #1204 from travier/9.2-beta

manifests/9.2: Use RHEL 9.2 repos & cleanups

ci/prow-entrypoint.sh

@@ -83,16 +83,16 @@ prepare_repos() {
     # Fetch the repos corresponding to the release we are building
     case "${rhelver}" in
         92)
-            # 92 doesn't exist in release controller right now
-            if [[ "${rhelver}" == "92" ]]; then rhelver=90; fi
             curl --fail -L "http://base-${ocpver_mut}-rhel${rhelver}.ocp.svc.cluster.local" -o "src/config/ocp.repo"
-            cat src/config/ocp.repo
+            # Work around podman not being built in 4.14
+            curl --fail -L "http://base-4-13-rhel${rhelver}.ocp.svc.cluster.local" -o "src/config/ocp-prev.repo"
+            cat src/config/ocp{,-prev}.repo
             ;;
         *)
             # Assume C9S/SCOS if the version does not match known values for RHEL
             # Temporary workaround until we have all packages for SCOS
-            curl --fail -L "http://base-${ocpver_mut}-rhel90.ocp.svc.cluster.local" -o "src/config/tmp.repo"
-            awk '/rhel-9.0-server-ose-4.13/,/^$/' "src/config/tmp.repo" > "src/config/ocp90.repo"
+            curl --fail -L "http://base-${ocpver_mut}-rhel92.ocp.svc.cluster.local" -o "src/config/tmp.repo"
+            awk '/rhel-9.2-server-ose-4.14/,/^$/' "src/config/tmp.repo" > "src/config/ocp90.repo"
             cat src/config/ocp90.repo
             rm "src/config/tmp.repo"
             ;;

common-el9.yaml

@@ -1,52 +0,0 @@
-# Manifest shared between CentOS Stream 9 and RHEL 9 variants
-
-include:
-  - fedora-coreos-config/manifests/shared-el9.yaml
-
-# EL9 specific overlays
-ostree-layers:
-  - overlay/07el9
-
-postprocess:
-  # Collection of workarounds specific to EL9 variants
-  - |
-     #!/usr/bin/env bash
-     set -xeo pipefail
-
-     # FIXME: Why is this only broken here?  NM isn't removing the link?
-     sed -i '/etc.resolv/d' /usr/lib/tmpfiles.d/etc.conf
-
-     # crio should stop hardcoding things in their config file!
-     # We are apparently somehow pulling in a conmon override in RHCOS
-     # that contains /usr/libexec/crio/conmon - WHY?
-     # sed -i '/conmon.*=/d' /etc/crio/crio.conf
-     # Oh right but the MCO overrides that too so...
-     mkdir -p /usr/libexec/crio
-     ln -sr /usr/bin/conmon /usr/libexec/crio/conmon
-
-     # Enable tmp-on-tmpfs by default because we don't want to have things leak
-     # across reboots, it increases alignment with FCOS, and also fixes the
-     # Live ISO. First, verify that RHEL is still disabling.
-     grep -q '# RHEL-only: Disable /tmp on tmpfs' /usr/lib/systemd/system/basic.target
-     echo '# RHCOS-only: we follow the Fedora/upstream default' >> /usr/lib/systemd/system/basic.target
-     echo 'Wants=tmp.mount' >> /usr/lib/systemd/system/basic.target
-  - |
-     #!/usr/bin/env bash
-     set -xeo pipefail
-     # See https://issues.redhat.com/browse/LOG-3117
-     # Something changed between rhel8 and rhel9 to not generate this by default
-     # but we have containers that expect it to be mounted so for now let's continue
-     # generating it.
-     ln -sr /usr/share/zoneinfo/UTC /etc/localtime
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-    # Backport https://github.com/dracutdevs/dracut/commit/25a92885a9519701cc480298c2b082e2e2bf5ebe
-    s=/usr/lib/dracut/modules.d/95nvmf/nvmf-autoconnect.sh
-    if test -f "$s"; then
-      chmod a+x "$s"
-    fi
-
-# Packages that are only for SCOS & RHCOS 9
-packages:
- - openvswitch3.1

common.yaml

@@ -6,6 +6,7 @@ include:
   - fedora-coreos-config/manifests/system-configuration.yaml
   - fedora-coreos-config/manifests/user-experience.yaml
   - fedora-coreos-config/manifests/shared-workarounds.yaml
+  - fedora-coreos-config/manifests/shared-el9.yaml
   # RHCOS owned packages
   - rhcos-packages.yaml
 
@@ -14,6 +15,7 @@ ostree-layers:
   - overlay/01fcos
   - overlay/02fcos-nouveau
   - overlay/05rhcos
+  - overlay/07el9
   - overlay/06gcp-routes
   - overlay/15rhcos-networkmanager-dispatcher
   - overlay/15rhcos-tuned-bits
@@ -165,6 +167,43 @@ postprocess:
             done
         done
     done
+  - |
+     #!/usr/bin/env bash
+     set -xeo pipefail
+
+     # FIXME: Why is this only broken here?  NM isn't removing the link?
+     sed -i '/etc.resolv/d' /usr/lib/tmpfiles.d/etc.conf
+
+     # crio should stop hardcoding things in their config file!
+     # We are apparently somehow pulling in a conmon override in RHCOS
+     # that contains /usr/libexec/crio/conmon - WHY?
+     # sed -i '/conmon.*=/d' /etc/crio/crio.conf
+     # Oh right but the MCO overrides that too so...
+     mkdir -p /usr/libexec/crio
+     ln -sr /usr/bin/conmon /usr/libexec/crio/conmon
+
+     # Enable tmp-on-tmpfs by default because we don't want to have things leak
+     # across reboots, it increases alignment with FCOS, and also fixes the
+     # Live ISO. First, verify that RHEL is still disabling.
+     grep -q '# RHEL-only: Disable /tmp on tmpfs' /usr/lib/systemd/system/basic.target
+     echo '# RHCOS-only: we follow the Fedora/upstream default' >> /usr/lib/systemd/system/basic.target
+     echo 'Wants=tmp.mount' >> /usr/lib/systemd/system/basic.target
+  - |
+     #!/usr/bin/env bash
+     set -xeo pipefail
+     # See https://issues.redhat.com/browse/LOG-3117
+     # Something changed between rhel8 and rhel9 to not generate this by default
+     # but we have containers that expect it to be mounted so for now let's continue
+     # generating it.
+     ln -sr /usr/share/zoneinfo/UTC /etc/localtime
+  - |
+    #!/usr/bin/env bash
+    set -xeuo pipefail
+    # Backport https://github.com/dracutdevs/dracut/commit/25a92885a9519701cc480298c2b082e2e2bf5ebe
+    s=/usr/lib/dracut/modules.d/95nvmf/nvmf-autoconnect.sh
+    if test -f "$s"; then
+      chmod a+x "$s"
+    fi
 
 remove-files:
   # We don't ship man(1) or info(1)
@@ -229,6 +268,7 @@ packages:
  - nfs-utils
  - dnsmasq
  - NetworkManager-ovs
+ - openvswitch3.1
  # needed for rpm-ostree today
  - polkit
  # Extra runtime

extensions-rhel-9.2.yaml

@@ -38,7 +38,7 @@ extensions:
     architectures:
       - x86_64
     repos:
-      - nfv
+      - rhel-9.2-nfv
     packages:
       - kernel-rt-core
       - kernel-rt-kvm
@@ -53,7 +53,6 @@ extensions:
     architectures:
       - x86_64
     repos:
-      # - rhel-9.0-appstream
-      - sig-virtualization
+      - rhel-9.2-appstream
     packages:
       - kata-containers

manifest-c9s.yaml

@@ -12,7 +12,6 @@ variables:
 # common to RHEL 9 & C9S variants
 include:
   - common.yaml
-  - common-el9.yaml
 
 # Starting from here, everything should be specific to SCOS
 
@@ -27,14 +26,14 @@ repos:
   - okd-copr
   - podman-next-copr
   # Include RHCOS 9 repo for oc, hyperkube and conmon-rs
-  - rhel-9.0-server-ose-4.13
+  - rhel-9.2-server-ose-4.14
 
 # We include hours/minutes to avoid version number reuse
-automatic-version-prefix: "413.9.<date:%Y%m%d%H%M>"
+automatic-version-prefix: "414.9.<date:%Y%m%d%H%M>"
 # This ensures we're semver-compatible which OpenShift wants
 automatic-version-suffix: "-"
 # Keep this is sync with the version in postprocess
-mutate-os-release: "4.13"
+mutate-os-release: "4.14"
 
 postprocess:
   - |
@@ -43,7 +42,7 @@ postprocess:
 
      # Tweak /usr/lib/os-release
      grep -v "OSTREE_VERSION" /etc/os-release > /usr/lib/os-release.stream
-     OCP_RELEASE="4.13"
+     OCP_RELEASE="4.14"
      (
      . /etc/os-release
      cat > /usr/lib/os-release <<EOF
@@ -112,6 +111,13 @@ postprocess:
 
      ---
      EOF
+  - |
+     #!/usr/bin/env bash
+     set -xeo pipefail
+     # We need to work in disconnected environments by default, and default-enabled
+     # repos will be attempted to be fetched by rpm-ostree when doing node-local
+     # kernel overrides today for e.g. kernel-rt.
+     for x in /etc/yum.repos.d/*.repo; do sed -i -e s,enabled=1,enabled=0, $x; done
 
 # Packages that are only in SCOS and not in RHCOS or that have special
 # constraints that do not apply to RHCOS