Our group is responsbile for building and testing new OpenStack glance images for the distributions that we support.
We have a scripted process, utilising koji and kickstart files which can be found here: [https://gitlab.cern.ch/linuxsupport/koji-image-build](https://gitlab.cern.ch/linuxsupport/koji-image-build)
## Building a new image
1. Clone the koji-image-build repository
2. Run `./buildimage.sh {5,6,7} {scratch,release}`
3. Download from koji the resulting .raw file after the build has completed
## Testing a newly built image
1. Upload the image to OpenStack as a 'test' image `./upload2openstack.sh {5,6,7,rhel6,rhel7,rhel8} test {x86_64,i686}`
2. Boot a VM from the image in OpenStack (the project is 'IT Linux Support - Images')
3. Confirm that at least the following works:
1.`ssh root@$host` works (cloud-init is functional)
2.`yum upgrade` does not upgrade any packages (the new image should be 100% up to date)
3. openafs kernel module is present
4. ensure that $host has a Kerberos keytab and locmap is configured
1.`klist -k /etc/krb5.keytab` (Note: dependent on DNS, can take ~15 minutes)
2.`locmap --list`
## Sharing the image to the cloud team
The cloud team also need to test certain items that we cannot (such as compability with Ironic bare metal installs). To faciliate this, we need to share the image with the cloud team and await feedback before proceeding.
1. Share the image with the cloud team `openstack image add project $imageid '$cloud-testing-project'`
2. Create a SNOW ticket to 'Cloud infrastructure' asking them to validate the image
## Promoting an image to producton
Assuming that the cloud team have validated the image for their purposes... We can promote it to production:
1. Remove any test VMs in 'IT Linux Support - Images' that were using your test image
2. Update the metadata of the image, ensuring that 'os_edition' is configured as 'Base'
3. Edit the image to ensure that 'Protected' is 'Yes' and 'Visibility' is 'Public' and 'TEST' is removed from the image name.
4. Finally update the koji reference to the latest build in README.md of [https://gitlab.cern.ch/linuxsupport/koji-image-build](https://gitlab.cern.ch/linuxsupport/koji-image-build)