This repository contains melange definitions for building all of the OpenStack services. This repository is used to build the packages that are used in the lightweight Wolfi based images used by Atmosphere.
The package repository is located at https://packages.atmosphere.dev/oss/2024.2 and the signing public key is at https://packages.atmosphere.dev/oss/signing.rsa.pub.
You can easily build a package by running the following command (for example, Barbican). You will
need to have both the make and the melange tools installed.
make package/py3-barbicanThis repository builds all of the Python dependencies needed which are pulled out of the OpenStack upper-constraints in mind, which is not fast moving.
Wolfi is great for it's continuously up-to-date packages, however, some of the packages may move ahead of the ones needed by OpenStack, so we build them here all locally at an older version.
There is a lot of effort involved in being able to support a newer version of a dependency, since that involves making changes that are not upstreamable (because upstream will not change their constraints).
Note
Our customers who have support subscriptions get access to packages that our team works on backporting patches to in order to enable newer version of dependencies to eliminate any potential CVEs.
If you're interested, please contact us for more information.
At the moment, this repository is strictly focused on building tagged versions of the OpenStack services, if you are looking for a fix that has not been released, we suggest asking upstream to tag a new release and it will be built here automatically.
Note
Our customers who have support subscriptions are able to file support tickets with any issues or requesting a backport of a fix to a package that is not yet tagged. After our team vets the fix, we will backport it in the packages we make available to our customers.
If you're interested, please contact us for more information.