Reviewed:  https://review.opendev.org/716162
Committed: https://git.openstack.org/cgit/starlingx/integ/commit/?id=246f33226dbb50a4c5e86d497df745120ca9e0e4
Submitter: Zuul
Branch:    f/centos8

commit a745a5b6f8a02b74f69f828f14960e97a758853c
Author: Jim Somerville <email address hidden>
Date:   Fri Mar 20 10:36:14 2020 -0400

    Kernel: Workaround broken bios affecting iommu
    
    Problem:
    Broken bios creates inaccurate DMAR tables,
    reporting some bridges as having endpoint types.
    This causes IOMMU initialization to bail
    out early with an error code, the result of
    which is vfio not working correctly.
    This is seen on some Skylake based Wolfpass
    server platforms with up-to-date bios installed.
    
    Solution:
    Instead of just bailing out of IOMMU
    initialization when such a condition is found,
    we report it and continue.  The IOMMU ends
    up successfully initialized anyway.  We do this
    only on platforms that have the Skylake bridges
    where this issue has been seen.
    
    This change is inspired by a similar one posted by
    Lu Baolu of Intel Corp to lkml
    
    https://lkml.org/lkml/2019/12/24/15
    
    Change-Id: Ief2df7099b6118eab7f99d5531616926a7a3eb27
    Closes-Bug: 1847335
    Signed-off-by: Jim Somerville <email address hidden>

commit 1435fe178ab88aa2b77970a3c07e8a907477a654
Author: Jim Somerville <email address hidden>
Date:   Mon Mar 16 16:16:20 2020 -0400

    Build mpt2sas and mpt3sas drivers as modules
    
    History:
    Back in the day, we didn't have an initramfs
    to allow us to load disk drivers as modules.  All
    disk drivers had to be built-in.  In CentOS 7.3,
    the mpt2sas and mpt3sas driver code was reorganized
    to allow for a common code base.  But along with that,
    those drivers would only now build as modules.  We
    created a patch which involved taking a snapshot of
    mpt driver code, and massaged it all into building
    as built-in drivers.
    
    Problem:
    That old code snapshot along with the fact
    that those two drivers initialize without their
    associated hardware being present (they are built-in),
    seems to cause interference with some other LSI raid
    controllers, namely Harpoon in AVAGO MR9460-8i via a
    Huawei enclosure.
    
    Solution:
    Simply revert to building those two mptsas drivers as
    modules, the way CentOS intended.  They will reside
    on initramfs and be loaded automatically if the
    appropriate hardware is present. With these drivers now
    out of the way, the problematic raid controller works
    fine, driven by the megaraid_sas driver.
    
    Change-Id: I054c2396df4e659c324e70bffcf3940ad93c9354
    Closes-Bug: 1866293
    Signed-off-by: Jim Somerville <email address hidden>

commit bed7388b678b9eda0d06b4d16fb00711741f9ef0
Author: Paul Vaduva <email address hidden>
Date:   Tue Mar 10 12:05:31 2020 -0400

    Release FDs  when stuck peering recovery
    
    During stuck peering recovery if file descriptors are
    not released the state machine does not advance to
    OPERATIONAL state
    
    Partial-bug: 1856064
    
    Change-Id: I3fba7be661ebf223eac63608574323ad98d33b75
    Signed-off-by: Paul Vaduva <email address hidden>

commit f80a248eda3990bb7788e80d102cc5f831551ee5
Author: Stefan Dinescu <email address hidden>
Date:   Tue Mar 3 09:09:54 2020 +0000

    Integrate the Netapp Trident installer in build
    
    The Netapp Trident installer comes in the form of
    a tarball. That tarball includes an example folder,
    an extras folder and the tridentctl installer itself.
    
    From this tarball all we need is the installer itself,
    so we only include it into an RPM to be installed.
    
    Change-Id: I91c6be915b097c934569469c9e0a7a16ab3e8177
    Story: 2007391
    Task: 38986
    Signed-off-by: Stefan Dinescu <email address hidden>

commit eeaaaf5796f3a028b9712065d01f249fd20f2e02
Author: albailey <email address hidden>
Date:   Wed Mar 4 17:02:35 2020 -0600

    Fix build break for python-html5lib and python-webencodings
    
    The lst files which stage the downloaded tarballs were altering the
    internal directory structure during the mirror download phase, which
    meant the %setup commands in the spec files were failing.
    
    This change adapts the spec files to the files downloaded from
    the mirror.
    
    Change-Id: I8031c8af0f424a8e19bee062a4df6ddf3383f38d
    Closes-Bug: 1866133
    Signed-off-by: albailey <email address hidden>

commit fdaa4c4a9dd03d705c47f6ecc7069b10fe9be9f8
Author: Teresa Ho <email address hidden>
Date:   Mon Mar 2 22:29:15 2020 -0500

    Add dependency required by oidc-auth
    
    The oidc-auth CLI requires the libraries python-mechanize,
    python-html5lib and python-webencodings.
    These libraries do not have RPMs available therefore they
    need to be packaged here.
    
    Story: 2006711
    Task: 38919
    Depends-On: https://review.opendev.org/#/c/710991/
    
    Change-Id: Ife8719a70388bc9a0e96149059fd5cc2c1fb232a
    Signed-off-by: Teresa Ho <email address hidden>

commit 4761e4f3fa00e33dc3c74dbb76bf9d3f24aea502
Author: Scott Little <email address hidden>
Date:   Wed Oct 16 15:18:19 2019 -0400

    Secure boot no longer working
    
    Secure Boot's hasn't been tested since July 2018
    
    The principle players in the Secure Boot chain of trust are Shim,
    Grub, and the Linux kernel.  All three components have seen multiple
    upgrades since the last test.
    
    A new build option has been added to shim, (ENABLE_SHIM_CERT) that
    enables/disables the support for an embedded shim key. It defaults
    to disabled.  It also controls the generation of a random shim key,
    and the build time signing of fallback and MokManager components.
    Since we don't want a random shim key (reproducable builds), and we do
    signing as a post build step, leaving it disabled seemed like the correct
    setting initially... until it's function to disable shim keys entirely
    was discovered.
    
    This update reworks the shim patch so that we can embed a prebuilt
    shim key, and still have shim key functionality active.
    
    Closes-Bug: 1864245
    Change-Id: Ibcb6bcfe3060ce0b3e2c2f3c23908bb7127b0ccd
    Signed-off-by: Scott Little <email address hidden>

commit f466dc94e721311ac922474a3bd0080776e3cf9a
Author: Chris Friesen <email address hidden>
Date:   Tue Feb 18 22:32:54 2020 -0500

    Create Docker image for running Intel N3000 FPGA tools
    
    This creates a Docker image for the purpose of running the tools needed
    for programming the N3000 FPGA and querying information from it.
    
    The expectation is that this will be run from sysinv, similar to how the
    airship-armada tools are run.
    
    The basic usage of these tools are covered in the following document
    from Intel:
    https://www.intel.com/content/dam/www/programmable/us/en/pdfs/literature/ug/ug-ias-n3000.pdf
    
    Change-Id: I94a7fb9fe6b348ced014666b37849691f72766e8
    Story: 2006740
    Task:  38829
    Signed-off-by: Chris Friesen <email address hidden>

commit 357b18cacc372b56112e1a4b33b6881a89293406
Author: Jim Somerville <email address hidden>
Date:   Thu Jan 16 16:37:25 2020 -0500

    Upgrade opae fpga module to version 2.0.1-6
    
    We do not build the regmap_mmio module portion of it
    as that functionality is already in the kernel.
    
    Change-Id: Ia5c33ae9f72d3a7cdf7b771f353551ae664ccc76
    Story: 2006740
    Task: 38837
    Signed-off-by: Jim Somerville <email address hidden>

commit e326f7dac81955c43ed2aeb20f30e4bca211be88
Author: Jim Somerville <email address hidden>
Date:   Fri Feb 14 17:04:11 2020 -0500

    Upgrade i40e driver to 2.10.19.82
    
    Advised by Intel to move to this version for
    proper supported N3000 fpga behavior.
    
    Change-Id: Ice87cdcdec80c2533a5d01fd5fcac54ee91f6723
    Story: 2006740
    Task: 38760
    Signed-off-by: Jim Somerville <email address hidden>

commit 0e1ad4bbcdc8806ae283669e22a06e5833982baf
Author: Shuicheng Lin <email address hidden>
Date:   Wed Feb 12 09:10:52 2020 +0800

    Fix containerd cannot pull image with old registry-token-server
    
    registry-token-server has been updated to support POST method.
    But for upgrade case(stx3.0 upgrade to stx4.0), containerd need
    talk with old registry-token-server which doesn't support POST
    method, and 400 error code will be returned. For this case,
    containerd still need fallback to GET method.
    
    Story: 2006145
    Task: 38763
    Change-Id: I9834d1afae406c7e1f80bea6034931d854d4e868
    Signed-off-by: Shuicheng Lin <email address hidden>

commit 8856c3f2b25ed8570205f955bcd8ac21185e9f26
Author: Jim Somerville <email address hidden>
Date:   Mon Jan 13 16:19:03 2020 -0500

    Enable REGMAP_MMIO in kernel
    
    The newer versions of the opae fpga driver requires
    it.  As it is a hidden config option, we get it
    enabled indirectly by setting MFD_SYSCON.
    
    Change-Id: I9d97ab642ffffc2dff43ff1c1a591b0a52ad9c41
    Story: 2006740
    Task: 38742
    Signed-off-by: Jim Somerville <email address hidden>

commit 2821c9c6d4d15ae7c491e9110a6d857b63852855
Author: Don Penney <email address hidden>
Date:   Mon Feb 10 17:44:52 2020 -0500

    Add support for IPv6 and https to anaconda-preexec
    
    The anaconda-preexec script runs ahead of Anaconda to cache the IP
    address of the network boot server in the /etc/hosts file, to avoid
    further DNS queries during installation.
    
    This update extends the checks to add support for IPv6 and to allow
    for https network access.
    
    Change-Id: Iadc86cbf971d6ecb0c478a2a16d5040d18a82ef0
    Story: 2006980
    Task: 38728
    Signed-off-by: Don Penney <email address hidden>

commit 4f388e940d2a33a9bb9e7b64fc6beb16b62255c5
Author: Bin Qian <email address hidden>
Date:   Thu Feb 6 10:49:58 2020 -0500

    Adding job to upload commits to GitHub
    
    Add job to publish integ repo to GitHub
    
    Change-Id: I052a271a91d836ec4f644750517d0e12d352ac1b
    Story: 2007252
    Task: 38681
    Signed-off-by: Bin Qian <email address hidden>

commit 53914fc55cfc62ee15793f32e626ed7322008d93
Author: Kristal Dale <email address hidden>
Date:   Fri Jan 17 14:10:55 2020 -0800

    Update landing pages for docs and release notes:
    
    - Use updated project name in titles/text
    - Correct text for link to Storyboard (docs)
    - Correct capitalization in section headings
    - Correct formatting for section headings
    - Update project name in link to release notes, api-ref
    - Update project name in config for docs/releasenotes/api-ref
    
    Story:2007193
    Task:38350
    
    Change-Id: I3c44012bc67136aed1e12c63037c822db7cdc4a6
    Signed-off-by: Kristal Dale <email address hidden>