From db9c063d6cf6643bbc11cb42e3e66635bf489bd7 Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Fri, 26 Jun 2026 11:38:26 +0200 Subject: [PATCH 1/3] Add Rocky Linux 9.8 repositories --- etc/kayobe/pulp-repo-versions.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/etc/kayobe/pulp-repo-versions.yml b/etc/kayobe/pulp-repo-versions.yml index 79263e712..812352ec2 100644 --- a/etc/kayobe/pulp-repo-versions.yml +++ b/etc/kayobe/pulp-repo-versions.yml @@ -154,6 +154,24 @@ stackhpc_pulp_repo_rocky_9_7_highavailability_version: 20260514T220209 stackhpc_pulp_repo_rocky_9_7_security_aarch64_version: 20260519T222921 stackhpc_pulp_repo_rocky_9_7_security_source_version: 20260520T222157 stackhpc_pulp_repo_rocky_9_7_security_version: 20260520T215442 +stackhpc_pulp_repo_rocky_9_8_appstream_aarch64_version: 20260625T233838 +stackhpc_pulp_repo_rocky_9_8_appstream_source_version: 20260625T235829 +stackhpc_pulp_repo_rocky_9_8_appstream_version: 20260625T232331 +stackhpc_pulp_repo_rocky_9_8_baseos_aarch64_version: 20260625T233838 +stackhpc_pulp_repo_rocky_9_8_baseos_source_version: 20260625T235829 +stackhpc_pulp_repo_rocky_9_8_baseos_version: 20260626T000246 +stackhpc_pulp_repo_rocky_9_8_crb_aarch64_version: 20260625T233838 +stackhpc_pulp_repo_rocky_9_8_crb_source_version: 20260531T220752 +stackhpc_pulp_repo_rocky_9_8_crb_version: 20260625T232331 +stackhpc_pulp_repo_rocky_9_8_extras_aarch64_version: 20260528T223707 +stackhpc_pulp_repo_rocky_9_8_extras_source_version: 20260528T220844 +stackhpc_pulp_repo_rocky_9_8_extras_version: 20260528T220059 +stackhpc_pulp_repo_rocky_9_8_highavailability_aarch64_version: 20260624T225110 +stackhpc_pulp_repo_rocky_9_8_highavailability_source_version: 20260624T223310 +stackhpc_pulp_repo_rocky_9_8_highavailability_version: 20260624T215731 +stackhpc_pulp_repo_rocky_9_8_security_aarch64_version: 20260605T230645 +stackhpc_pulp_repo_rocky_9_8_security_source_version: 20260605T225017 +stackhpc_pulp_repo_rocky_9_8_security_version: 20260606T214954 stackhpc_pulp_repo_rocky_9_sig_security_common_aarch64_version: 20260305T225932 stackhpc_pulp_repo_rocky_9_sig_security_common_source_version: 20260305T224636 stackhpc_pulp_repo_rocky_9_sig_security_common_version: 20260305T222525 From 6c766b58e2b307f056b6f753c42db44365e3702c Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Fri, 26 Jun 2026 22:13:38 +0200 Subject: [PATCH 2/3] Bump Rocky Linux to 9.8 --- etc/kayobe/pulp.yml | 4 ++-- .../notes/rl9.8-8deda6361c5ecba0.yaml | 21 +++++++++++++++++++ 2 files changed, 23 insertions(+), 2 deletions(-) create mode 100644 releasenotes/notes/rl9.8-8deda6361c5ecba0.yaml diff --git a/etc/kayobe/pulp.yml b/etc/kayobe/pulp.yml index 8b2441fa4..5ca119cc1 100644 --- a/etc/kayobe/pulp.yml +++ b/etc/kayobe/pulp.yml @@ -208,8 +208,8 @@ stackhpc_pulp_distribution_deb_production: >- # Whether to sync Rocky Linux 9 packages. stackhpc_pulp_sync_rocky_9: "{{ os_distribution == 'rocky' and os_release == '9' }}" -# Rocky 9 minor version number. Supported values: 6, 7. Default is 7 -stackhpc_pulp_repo_rocky_9_minor_version: '7' +# Rocky 9 minor version number. Supported values: 6, 7, 8. Default is 8. +stackhpc_pulp_repo_rocky_9_minor_version: '8' # Rocky 9 Snapshot versions. The defaults use the appropriate version from # pulp-repo-versions.yml for the selected minor release. diff --git a/releasenotes/notes/rl9.8-8deda6361c5ecba0.yaml b/releasenotes/notes/rl9.8-8deda6361c5ecba0.yaml new file mode 100644 index 000000000..cf2fab381 --- /dev/null +++ b/releasenotes/notes/rl9.8-8deda6361c5ecba0.yaml @@ -0,0 +1,21 @@ +--- +features: + - | + Adds support for Rocky Linux 9.8 host packages. + - | + 9.8 is now the default release for Rocky Linux 9. +issues: + - | + DOCA OFED is not yet supported in Rocky Linux 9.8. Consider setting + ``stackhpc_pulp_repo_rocky_9_minor_version`` to ``'7'`` if using OFED is + mandatory. +security: + - | + Rocky Linux 9.8 addresses many recent Linux vulnerabilities: + + * CVE-2026-31431 (Copy Fail) + * CVE-2026-43284 (Dirty Frag) + * CVE-2026-46331 (pedit COW) + * CVE-2026-46333 (ptrace flaw) + * CVE-2026-23111 (nf_tables bug) + * CVE-2026-46243 (CIFSwitch) From 809c318532a4deadda8347c245ee34f7d8a39f03 Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Fri, 26 Jun 2026 23:45:44 +0200 Subject: [PATCH 3/3] Bump overcloud host image tags for Rocky Linux 9.8 --- etc/kayobe/pulp-host-image-versions.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/kayobe/pulp-host-image-versions.yml b/etc/kayobe/pulp-host-image-versions.yml index e0b67fe50..b2b925fbf 100644 --- a/etc/kayobe/pulp-host-image-versions.yml +++ b/etc/kayobe/pulp-host-image-versions.yml @@ -1,8 +1,8 @@ --- # Overcloud host image versioning tags # These images must be in SMS, since they are used by our AIO CI runners -stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260618T132327 -stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260420T162634 +stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260626T202339 +stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260626T202339 stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260618T132327 stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260617T085955 stackhpc_ubuntu_noble_overcloud_host_image_version: 2025.1-20260618T132327