[m-c-s][PATCH 0/4] - Cleanup builds for master

[m-c-s][PATCH 0/4] - Cleanup builds for master

[Mark Asselstine]

Attempted an openstack build last week and found several issues. The
following 4 patches addresses the main ones allowing for
openstack-image-controller to be buildable again.

Mark

[m-c-s][PATCH 1/4] meta-openstack/README: drop meta-ruby

[Mark Asselstine]

meta-openembedded commit 6E7C9636D276 [meta-ruby: remove this now
pretty empty layer] removed the meta-ruby layer from existence. We can
therefor drop this layer dependency. Builds continue to work as the
various ruby recipes exist, they have just been moved out of the
'language layer'.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
---
 meta-openstack/README | 1 -
 1 file changed, 1 deletion(-)

diff --git a/meta-openstack/README b/meta-openstack/README
index 1b136fa..9d240e4 100644
--- a/meta-openstack/README
+++ b/meta-openstack/README
@@ -19,7 +19,6 @@ URI: git://git.openembedded.org/meta-openembedded
 revision: HEAD
 layers: meta-oe
 	meta-networking
-        meta-ruby
         meta-filesystems
         meta-webserver
         meta-python
-- 
2.7.4

[m-c-s][PATCH 2/4] rabbitmq-server: add missing depends on coreutils-native

[Mark Asselstine]

With the move to RSS this missing dependency became a build issue,
previously hidden by some other package fullfilling the dependency
before this package was built. With RSS we need to ensure all first
level dependencies are listed to avoid build failures. The build
requires the 'fold' command which is provided by coreutils-native.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
---
 .../recipes-extended/rabbitmq/rabbitmq-server_3.2.4.bb        | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/meta-openstack/recipes-extended/rabbitmq/rabbitmq-server_3.2.4.bb b/meta-openstack/recipes-extended/rabbitmq/rabbitmq-server_3.2.4.bb
index 8e4be5f..7f003fd 100644
--- a/meta-openstack/recipes-extended/rabbitmq/rabbitmq-server_3.2.4.bb
+++ b/meta-openstack/recipes-extended/rabbitmq/rabbitmq-server_3.2.4.bb
@@ -3,7 +3,6 @@ HOMEPAGE = "http://www.rabbitmq.com/"
 LICENSE = "MPL-1.1"
 LIC_FILES_CHKSUM = "file://LICENSE-MPL-RabbitMQ;md5=b651d0a6feaaf2bf5eb9d36b2495c510"
 SECTION = "network"
-DEPENDS = "erlang-native libxslt python-simplejson zip-native unzip-native libxslt-native"
 PR = "r2"
 
 SRC_URI = "http://www.rabbitmq.com/releases/rabbitmq-server/v${PV}/${PN}-${PV}.tar.gz \
@@ -17,6 +16,16 @@ SRC_URI = "http://www.rabbitmq.com/releases/rabbitmq-server/v${PV}/${PN}-${PV}.t
 SRC_URI[md5sum] = "09d1af64c005bc680d6790b90655d021"
 SRC_URI[sha256sum] = "a930f92b362df2f292ec5f0281aa2011eb0c668faf6e24c4653a9fc53ec43b9f"
 
+DEPENDS = " \
+    erlang-native \
+    libxslt \
+    python-simplejson \
+    zip-native \
+    unzip-native \
+    libxslt-native \
+    coreutils-native\
+"
+
 RDEPENDS_${PN} = "erlang erlang-modules"
 
 do_compile() {
-- 
2.7.4

[m-c-s][PATCH 3/4] python-nova: sudoers.d match dir ownership/perms

[Mark Asselstine]

The sudoers.d directory is for all intents and purposes created and
owned by the sudo package. We must therefor ensure we match the
ownership and perms which sudo used to install this
directory. Currently we don't so this results in an error when
assembling the filesystem:

  file /etc/sudoers.d conflicts between attempted installs of \
   nova-common-12.0.0+git0+6df6ad3ff3-r0.core2_64 and \
   sudo-1.8.20p2-r0.core2_64

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
---
 meta-openstack/recipes-devtools/python/python-nova_git.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-openstack/recipes-devtools/python/python-nova_git.bb b/meta-openstack/recipes-devtools/python/python-nova_git.bb
index c1f4de1..f3a6b86 100644
--- a/meta-openstack/recipes-devtools/python/python-nova_git.bb
+++ b/meta-openstack/recipes-devtools/python/python-nova_git.bb
@@ -88,7 +88,7 @@ do_install_append() {
     chown root:root $NOVA_CONF_DIR/rootwrap.conf
 
     # Set up the rootwrap sudoers for nova
-    install -d ${D}${sysconfdir}/sudoers.d
+    install -d -m 750 ${D}${sysconfdir}/sudoers.d
     touch ${D}${sysconfdir}/sudoers.d/nova-rootwrap
     chmod 0440 ${D}${sysconfdir}/sudoers.d/nova-rootwrap
     chown root:root ${D}${sysconfdir}/sudoers.d/nova-rootwrap
-- 
2.7.4

[m-c-s][PATCH 4/4] python-keystone: remove use of the 'users' group

[Mark Asselstine]

The use of the 'users' group was associated with the addition of
apache vhost support. See commit bf51fa4f053a [python-keystone: Add
apache vhost server.]. The directories and files needed to be readable
by the same user running apache. Since the use of RSS, definiing a
common group used by multiple recipes (apache and keystone in this
case) becomes more involved and we need to use FILESYSTEM_PERMS_TABLES
to accomplish this. Remove the use of the 'users' group until we can
evaluate if this is still required and if so we have a proper
FILESYSTEM_PERMS_TABLES solution in place. This will solve build
failures for 'unknown group "users"' in the interim.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
---
 meta-openstack/recipes-devtools/python/python-keystone_git.bb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/meta-openstack/recipes-devtools/python/python-keystone_git.bb b/meta-openstack/recipes-devtools/python/python-keystone_git.bb
index 49aa530..6dfdc93 100644
--- a/meta-openstack/recipes-devtools/python/python-keystone_git.bb
+++ b/meta-openstack/recipes-devtools/python/python-keystone_git.bb
@@ -74,8 +74,8 @@ do_install_append() {
     install -m 755 -d ${APACHE_CONF_DIR}
 
     install -d ${D}${localstatedir}/log/${SRCNAME}
-    install -g users -m 755 -d ${KEYSTONE_CGI_DIR}
-    install -g users -m 755 -d ${KEYSTONE_PY_DIR}
+    install -m 755 -d ${KEYSTONE_CGI_DIR}
+    install -m 755 -d ${KEYSTONE_PY_DIR}
 
     # Apache needs to read the keystone.conf
     install -m 644 ${WORKDIR}/keystone.conf ${KEYSTONE_CONF_DIR}/
-- 
2.7.4

Re: [m-c-s][PATCH 0/4] - Cleanup builds for master

[Bruce Ashfield]

On 11/06/2017 12:02 PM, Mark Asselstine wrote:
> Attempted an openstack build last week and found several issues. The
> following 4 patches addresses the main ones allowing for
> openstack-image-controller to be buildable again.


merged.

Bruce

> 
> Mark
>