Rootless iop#5

Open

pablomh wants to merge 50 commits intomasterfrom

Commits on Feb 27, 2026

Bump actions/upload-artifact from 6 to 7

dependabot[bot]
authored and
evgeni
committed
Bump actions/download-artifact from 7 to 8

dependabot[bot]
authored and
evgeni
committed
Drop unused reference to foreman_development_hammer_git_revision

adamruzicka
authored and
evgeni
committed
Use different way of setting up CRB on RHEL in development

adamruzicka
authored and
evgeni
committed
Update defaults to define 4 generic timers

archanaserver
authored and
evgeni
committed

Commits on Mar 3, 2026

set boxes for each machine individually
evgeni
committed
make it possible to override the base box from env
evgeni
committed
run on el10 too
evgeni
committed
use hammer copr on el10
evgeni
committed
Force vagrant provision
evgeni
committed
Configure smtp as email delivery method

Arvind Jangir
authored and
evgeni
committed
remove migration containers after execution
evgeni
committed
Add rootless user infrastructure and base configuration

pablomh
and
claude
committed
Update certificate generation for rootless deployment

pablomh
and
claude
committed
Add rootless support for PostgreSQL service

pablomh
and
claude
committed
Add rootless support for Redis service

pablomh
and
claude
committed
Add rootless support for Candlepin service

pablomh
and
claude
committed
Add rootless support for Pulp services

pablomh
and
claude
committed
Add rootless support for Foreman service

pablomh
and
claude
committed
Add rootless support for Foreman Proxy service

pablomh
and
claude
committed
Add rootless support for systemd target

pablomh
and
claude
committed
Add migration playbook for rootful to rootless conversion

pablomh
and
claude
committed
Update deployment playbooks for rootless support

pablomh
and
claude
committed
Add fapolicyd rule for Python execution in /var/tmp
pablomh
committed
Update tests for rootless deployment

pablomh
and
claude
committed
Update CI workflow for rootless deployment

pablomh
and
claude
committed
Add netavark, aardvark-dns, and passt for Podman private networks
pablomh
committed
Add tests to verify Podman private network configuration prerequisites
pablomh
committed
Add podman_network role for creating private networks
pablomh
committed
Add tests for podman_network role functionality
pablomh
committed
Add iop_kafka

ehelms
authored and
pablomh
committed
Add iop_ingress

ehelms
authored and
pablomh
committed
Add iop_puptoo

ehelms
authored and
pablomh
committed
Add iop_yuptoo

ehelms
authored and
pablomh
committed
Add iop_engine

ehelms
authored and
pablomh
committed
Add iop_gateway

ehelms
authored and
pablomh
committed
Add iop_inventory

ehelms
authored and
pablomh
committed
Add iop_advisor

ehelms
authored and
pablomh
committed
Add iop_remediation

ehelms
authored and
pablomh
committed
Add iop_vmaas and iop_vulnerability

ehelms
authored and
pablomh
committed
Add frontends for advisor and vulnerability

ehelms
authored and
pablomh
committed
Add iop test github actions

ehelms
authored and
pablomh
committed
Specify explicit volume mount permissions

ehelms
authored and
pablomh
committed
Run all IOP services as a rootless user

pablomh
and
claude
committed
Replace cd /tmp + sudo with runuser in tests

pablomh
and
claude
committed
Add IOP network isolation test

pablomh
and
claude
committed
Fix create user config directories on CentOS 10

pablomh
and
claude
committed
Enable Ansible pipelining to fix become_user on CentOS 10

pablomh
and
claude
committed
Install acl package to fix become_user on CentOS 10

pablomh
and
claude
committed

Commits on Mar 4, 2026

Skip foreman-selinux install on EL10

pablomh
and
claude
committed