From 69b487c67ff7e18293d9a326a2df15b5acaa7301 Mon Sep 17 00:00:00 2001 From: Michael Still Date: Thu, 2 Apr 2026 07:21:11 +1100 Subject: [PATCH 1/3] Re-enable SPICE support on Ubuntu Noble. The move to Ubuntu Noble for Kolla 2025.1 onwards accidentally broke SPICE consoles for Nova (both Horizon and spice-direct). This is because Debian and Ubuntu now package the SPICE support in a separate package. Without this package, an attempt to start an instance in Nova requiring SPICE will result in messages like this in the nova-libvirt logs: libvirt.libvirtError: unsupported configuration: spice graphics are not supported with this QEMU And the instance will enter an error state. The fix is to install the `qemu-system-modules-spice` package as well in the nova-libvirt image. Closes-Bug: #2138186 Change-Id: Ib4ced4a04353b9c11c6f0abb7cfa91001b239e53 Signed-off-by: Michael Still --- docker/nova/nova-libvirt/Dockerfile.j2 | 6 ++++++ .../notes/ubuntu-noble-spice-814929ed1efbcad1.yaml | 8 ++++++++ 2 files changed, 14 insertions(+) create mode 100644 releasenotes/notes/ubuntu-noble-spice-814929ed1efbcad1.yaml diff --git a/docker/nova/nova-libvirt/Dockerfile.j2 b/docker/nova/nova-libvirt/Dockerfile.j2 index be76af1843..c363fc65cb 100644 --- a/docker/nova/nova-libvirt/Dockerfile.j2 +++ b/docker/nova/nova-libvirt/Dockerfile.j2 @@ -90,6 +90,12 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build 'usermode' ] %} {% endif %} + + {% if base_distro in ['ubuntu'] %} + {% set nova_libvirt_packages = nova_libvirt_packages + [ + 'qemu-system-modules-spice' + ] %} + {% endif %} {% endif %} {{ macros.install_packages(nova_libvirt_packages | customizable("packages")) }} diff --git a/releasenotes/notes/ubuntu-noble-spice-814929ed1efbcad1.yaml b/releasenotes/notes/ubuntu-noble-spice-814929ed1efbcad1.yaml new file mode 100644 index 0000000000..beb3f5430d --- /dev/null +++ b/releasenotes/notes/ubuntu-noble-spice-814929ed1efbcad1.yaml @@ -0,0 +1,8 @@ +--- +fixes: + - | + Ubuntu Noble container images require the additional + qemu-system-modules-spice operating system package for SPICE consoles + to function correctly. This package has therefore been added + to the nova-libvirt container build. Further details are available in + the bug report at `LP#2138186 `__. From 8aff64986d9bffd815d583ebec3837bb2e1f7503 Mon Sep 17 00:00:00 2001 From: Michal Nasiadka Date: Tue, 7 Apr 2026 09:51:19 +0200 Subject: [PATCH 2/3] CI: Drop changing visibility using uri It has not been working and leaks secret Related-Bug: #2147406 Change-Id: If5c1905a096d776811ce932cb040e20f5dfebf82 Signed-off-by: Michal Nasiadka (cherry picked from commit 8745919e6ce5b9648776ab8f8a9d8947b4d1f252) --- .zuul.d/base.yaml | 15 --------------- .zuul.d/debian.yaml | 4 ---- .zuul.d/rocky.yaml | 4 ---- .zuul.d/ubuntu.yaml | 2 -- tests/playbooks/publish.yml | 10 ---------- 5 files changed, 35 deletions(-) diff --git a/.zuul.d/base.yaml b/.zuul.d/base.yaml index b3e96ea1f9..222c2b7c6d 100644 --- a/.zuul.d/base.yaml +++ b/.zuul.d/base.yaml @@ -28,21 +28,6 @@ D+ujFoYgbSO9PguPuGFMwHtt2GHSd/gkqoypz/9mLYeY83dcW6YsrpnEQRIJYyeGr54ko 0obnRaoKKlJ9O6am06D01lNhiiG8NhreNONZTbY7h8nvJXyMfYTo0zqHTJhHiY= -- secret: - name: kolla_quay_io_api_jan_2026 - data: - token: !encrypted/pkcs1-oaep - - I11kiXYFewlPo2Wujs/t8dcMMuqS52rb30WizTQBuJOi4sghsHASzgY3k5li/dwW/EYos - TmdyEfWyjrgv5y9Wi7TVYtXrXVpE5ya9ggdgMhOz1HXr3GybePlvzTqJo4kVcza3dMpIC - 6UchgV88d2DwTbCY+iropdEfh+DEZPA3nf8WQigoJM5ENTS2Fq017WjBQ5WEBDCUMkp2d - ZbNn4M1yJnfusxFKjY5BuZazVN2DNrnLA+JiaCu9+jitr1QumGN1N/6DPv4c3dr/JiBuT - 3Dd68CRJKlavfHllkGhOnzoSz9Kabo36QAyxuHd9MC2DBdIaXq2sopAv8adPq8J1uoGJ6 - GaTrlVUMhUMZIXtnO3PwvrFp10K0pia9IM7II6CdKFi9BHfiNI0G8DWqnG2JqvYBEiQWs - f22IDPoqAPGdx02U1j3DxjYJzjOl+7KDOFlRXoGs5b3Fhy8sRtpXI6vCs9oCMXZYPq8kg - aj9/tCe/QulQ6v5MQpsweaUkDVThE8oki3vhN1BQg6Ft74l+MuDMTJdDSSObXJThbmLEg - Pe47ijg8lK5Vo14pLBqUVr2lKlv4H4DgBtz8h76Cr5S2CJ7n0VoYLojWgB/KoI+A/w/7u - Eck+aULrPnRwIMaA7PU8y0vigUgP62tQh/osB9TmGpi5jDFB/mB00YUnHtJBp4= - - nodeset: name: kolla-centos-9-stream nodes: diff --git a/.zuul.d/debian.yaml b/.zuul.d/debian.yaml index 287c3d0d1c..12ced367da 100644 --- a/.zuul.d/debian.yaml +++ b/.zuul.d/debian.yaml @@ -61,8 +61,6 @@ secrets: - name: kolla_quay_io_creds secret: kolla_quay_io_creds_jan_2026 - - name: kolla_quay_io_api - secret: kolla_quay_io_api_jan_2026 - job: name: kolla-publish-debian-aarch64-quay @@ -75,8 +73,6 @@ secrets: - name: kolla_quay_io_creds secret: kolla_quay_io_creds_jan_2026 - - name: kolla_quay_io_api - secret: kolla_quay_io_api_jan_2026 - job: name: kolla-build-no-infra-wheels-debian diff --git a/.zuul.d/rocky.yaml b/.zuul.d/rocky.yaml index fc01807d87..49c1c4c240 100644 --- a/.zuul.d/rocky.yaml +++ b/.zuul.d/rocky.yaml @@ -99,8 +99,6 @@ secrets: - name: kolla_quay_io_creds secret: kolla_quay_io_creds_jan_2026 - - name: kolla_quay_io_api - secret: kolla_quay_io_api_jan_2026 - job: name: kolla-build-rocky10 @@ -148,5 +146,3 @@ secrets: - name: kolla_quay_io_creds secret: kolla_quay_io_creds_jan_2026 - - name: kolla_quay_io_api - secret: kolla_quay_io_api_jan_2026 diff --git a/.zuul.d/ubuntu.yaml b/.zuul.d/ubuntu.yaml index 9e4e53f7b2..fab198e47f 100644 --- a/.zuul.d/ubuntu.yaml +++ b/.zuul.d/ubuntu.yaml @@ -84,8 +84,6 @@ secrets: - name: kolla_quay_io_creds secret: kolla_quay_io_creds_jan_2026 - - name: kolla_quay_io_api - secret: kolla_quay_io_api_jan_2026 - job: name: kolla-build-no-infra-wheels-ubuntu diff --git a/tests/playbooks/publish.yml b/tests/playbooks/publish.yml index fd9124cd57..bdd40bc23e 100644 --- a/tests/playbooks/publish.yml +++ b/tests/playbooks/publish.yml @@ -49,13 +49,3 @@ register: push_status until: push_status.failed is false retries: 5 - - - name: Ensure repository visibility is public - ansible.builtin.uri: - url: "https://quay.io/api/v1/repository/{{ item.RepoTags.0 }}/changevisibility" - method: POST - headers: - Authorization: "Bearer {{ kolla_quay_io_api.token | trim }}" - body: '{"visibility": "public"}' - body_format: json - loop: "{{ docker_host_info.images }}" From 73f84010c61b5561d11938037a3c2c98587bc4f9 Mon Sep 17 00:00:00 2001 From: Bartosz Bezak Date: Thu, 9 Apr 2026 16:58:29 +0200 Subject: [PATCH 3/3] [stable-2025.1-only] valkey: enable CS9 and RL9 builds RPMs are there. It will be useful for migration testing. Change-Id: I6e1f712f5a5aa09f7970581d97507f48fdaf4451 Signed-off-by: Bartosz Bezak --- kolla/image/unbuildable.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/kolla/image/unbuildable.py b/kolla/image/unbuildable.py index 17a7ea7c6b..4141770e33 100644 --- a/kolla/image/unbuildable.py +++ b/kolla/image/unbuildable.py @@ -29,7 +29,6 @@ }, 'centos+stream9': { - "valkey-base" # Not supported on Stream 9 }, 'centos+stream10': { @@ -52,7 +51,6 @@ }, 'rocky+9': { - "valkey-base" # Not supported on Rocky 9 }, 'rocky+10': {