From 00cd3feb427fd7dc3ce983ea2518016b11dd1ea0 Mon Sep 17 00:00:00 2001
From: Dmitriy Rabotyagov <dmitriy.rabotyagov@cleura.com>
Date: Tue, 3 Jun 2025 20:06:49 +0200
Subject: [PATCH] Add support for EL10

This patch implements support for deployment on EL10. As of today
LXC is not present in EPEL, so we use Neil's COPR repository right now.

Once EPEL will add LXC package, we should replace COPR with it.

Change-Id: Iac16f239805f391a4a93caa3737f65280a0bbf46
---
 templates/lxc-openstack.conf.j2          |  2 +
 templates/prep-scripts/redhat_prep.sh.j2 |  1 +
 vars/redhat-10-host.yml                  | 61 ++++++++++++++++++++++++
 vars/redhat-host.yml                     |  2 +-
 vars/redhat.yml                          |  5 ++
 5 files changed, 70 insertions(+), 1 deletion(-)
 create mode 100644 vars/redhat-10-host.yml

diff --git a/templates/lxc-openstack.conf.j2 b/templates/lxc-openstack.conf.j2
index 4fd83c86..f9a9fd9f 100644
--- a/templates/lxc-openstack.conf.j2
+++ b/templates/lxc-openstack.conf.j2
@@ -1,7 +1,9 @@
 # {{ ansible_managed }}
 
+{% if ansible_facts['os_family'] | lower == 'debian' %}
 lxc.apparmor.profile = generated
 lxc.apparmor.allow_nesting = 1
+{% endif %}
 lxc.start.auto = 1
 lxc.start.delay = 15
 lxc.group = onboot
diff --git a/templates/prep-scripts/redhat_prep.sh.j2 b/templates/prep-scripts/redhat_prep.sh.j2
index 76798932..965a6d7d 100644
--- a/templates/prep-scripts/redhat_prep.sh.j2
+++ b/templates/prep-scripts/redhat_prep.sh.j2
@@ -11,6 +11,7 @@ fi
 
 # The containers do not need the LXC repository (only hosts need it).
 rm -f /etc/yum.repos.d/thm-lxc3.0*
+rm -f /etc/yum.repos.d/epel-lxc_hosts.repo
 # This repo should be installed from package, so requires extra vars to work properly
 rm -f /etc/yum.repos.d/CentOS-NFV-OpenvSwitch.repo
 
diff --git a/vars/redhat-10-host.yml b/vars/redhat-10-host.yml
new file mode 100644
index 00000000..946d4c96
--- /dev/null
+++ b/vars/redhat-10-host.yml
@@ -0,0 +1,61 @@
+---
+# Copyright 2016, Rackspace US, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+system_config_dir: "/etc/sysconfig"
+systemd_utils_prefix: "/lib/systemd"
+
+_lxc_hosts_epel_packages:
+  - lxc*
+  - python3-lxc
+
+lxc_centos_repo_keys:
+  - key: "/etc/pki/rpm-gpg/neil-lxc4.0.gpg"
+    url: "https://download.copr.fedorainfracloud.org/results/neil/lxc4.0/pubkey.gpg"
+    state: present
+
+lxc_centos_repos:
+  - name: epel-lxc_hosts
+    description: Copr repo for lxc4.0 owned by neil
+    baseurl: https://download.copr.fedorainfracloud.org/results/neil/lxc4.0/epel-10-$basearch/
+    gpgcheck: true
+    gpgkey: "file:///etc/pki/rpm-gpg/neil-lxc4.0.gpg"
+    enabled: true
+    state: present
+    includepkgs: "{{ _lxc_hosts_epel_packages }}"
+
+# Required rpm packages.
+_lxc_hosts_distro_packages:
+  - dbus
+  - dnsmasq
+  - e2fsprogs
+  - git-core
+  - iptables
+  - "kernel-modules-extra-{{ ansible_facts['kernel'] }}" # required by iptables/ebtables to avoid kernel upgrade
+  - libseccomp
+  - lxc
+  - lxc-devel
+  - lxc-libs
+  - lxc-templates
+  - policycoreutils-python-utils
+  - procps
+  - python3-lxc
+  - systemd-container
+  - tar
+  - unzip
+  - xz
+
+lxc_ssh_service_name: sshd
+
+lxc_xz_bin: xz
diff --git a/vars/redhat-host.yml b/vars/redhat-host.yml
index a119c860..f04872d7 100644
--- a/vars/redhat-host.yml
+++ b/vars/redhat-host.yml
@@ -40,7 +40,7 @@ _lxc_hosts_distro_packages:
   - dbus
   - dnsmasq
   - e2fsprogs
-  - git
+  - git-core
   - iptables
   - libseccomp
   - lxc
diff --git a/vars/redhat.yml b/vars/redhat.yml
index 347ead21..015baa46 100644
--- a/vars/redhat.yml
+++ b/vars/redhat.yml
@@ -39,6 +39,7 @@ _lxc_cache_prep_template: "prep-scripts/redhat_prep.sh.j2"
 _lxc_cache_distro_packages:
   - ca-certificates
   - git-core # needed everywhere when wheel_build=false
+  - gnupg2
   - iputils
   - iproute
   - libxml2
@@ -46,6 +47,10 @@ _lxc_cache_distro_packages:
   - procps
   - python3
   - python3-libs
+  - python3-setuptools
   - setup
   - sudo
+  - systemd
+  - systemd-networkd
+  - systemd-resolved
   - tzdata