diskimage-builder/diskimage_builder/elements/redhat-common/package-installs.yaml

# Install any packages in this file that may not be in the base cloud
# image but could reasonably be expected
lsof:
tcpdump:
traceroute:
which:
gettext:
    phase: pre-install.d
ca-certificates:

# selinux-targeted policy and related tools
selinux-policy:
selinux-policy-targeted:
libselinux-python:
policycoreutils:
policycoreutils-python:
rng-tools:
Migrate to new package-installs We have a new package-installs file format. Migrating existing package-installs files to the new format. Change-Id: I57d4a007efee9624e60c41357cefa627d8c7373f 2014-11-26 21:35:36 +00:00			`# Install any packages in this file that may not be in the base cloud`
			`# image but could reasonably be expected`
			`lsof:`
			`tcpdump:`
			`traceroute:`
			`which:`
			`gettext:`
			`phase: pre-install.d`
Install ca-certificate with redhat-common Change-Id: I36d44ca8b4f966476657ec2bb1ecc1458bb524fd 2018-08-03 22:30:49 +00:00			`ca-certificates:`
Move selinux packages to redhat-common Change I008f8bbc9c8414ce948c601e3907e27764e15a52 has shown that we build redhat images without the "semange" tool available, which comes from the policycoreutils-python package (see also I3f9e2c322d042a5dddba33451c0fc21a4d32a88a). I403e7806ae10d5dd96d0727832f4da20e34b94c7 added some of the selinux libraries to yum-minimal for ansible support, but not to others. Given both these changes, it seems that selinux[-targeted], libselinux[-python] and policycoreutils[-python] can reasonably considered part of all base images. Move the selinux related packages into redhat-common. This also adds it explicitly to install_test_deps.sh. It was actually being dragged in by the docker install, but is a required component for building (should be in bindep, but not there with that yet). Change-Id: Idd4ae71ee6deee84604823b6b5dc4a845f316e01 Related-Bug: #1707788 2017-07-31 23:47:50 +00:00
			`# selinux-targeted policy and related tools`
			`selinux-policy:`
			`selinux-policy-targeted:`
			`libselinux-python:`
			`policycoreutils:`
			`policycoreutils-python:`
Install rng-tools in Red Hat family distro images Make sure rngd, a hardware RNG entropy gatherer daemon, is installed on all DIB-built Red Hat family distro images. rngd comes installed by default in a typical base installation as it's proven to help speed things up. Nova attaches the virtio-rng-pci device to VMs. virtio-rng-pci is a device that provides feed random data. However, it is of little to no use if the virtual machine is not configured to make use of given device. That is where rngd can help by facilitating entropy to the pool from virtio-rng-pci. $ openstack image set --property hw_rng_model=virtio [...] $ openstack flavor set --property hw_rng:allowed=True [...] DIB-built minimal images do not come with rngd installed. This patch makes sure the daemon is installed. Its systemd service comes already enabled. Change-Id: I34a989dbfc57d4c98113ac25c81dfb500945ff0a 2019-12-03 19:54:45 +00:00			`rng-tools:`