Skip to content

[ARO-22145] Bump to Azure Linux 3.0#4766

Draft
rhamitarora wants to merge 15 commits intomasterfrom
rhamitarora/ARO-22145-azure-linux3
Draft

[ARO-22145] Bump to Azure Linux 3.0#4766
rhamitarora wants to merge 15 commits intomasterfrom
rhamitarora/ARO-22145-azure-linux3

Conversation

@rhamitarora
Copy link
Copy Markdown
Collaborator

@rhamitarora rhamitarora commented Apr 13, 2026

Which issue this PR addresses:

Fixes ARO-22145 — Migrate Azure Red Hat OpenShift RP/Gateway VMSS from Azure Linux 2.0 (EOL July 31, 2025) to Azure Linux 3.0.

What this PR does / why we need it:

  • Switching VMSS base images from CBL-Mariner 2.0 to Azure Linux 3.0 FIPS
  • Updating Dockerfiles to use azurelinux base images instead of mariner
  • Adding podman 5.x dependencies (crun, netavark) required on Azure Linux 3
  • Removing the iptables firewalld backend switch (Azure Linux 3 uses nftables natively)
  • Updating fluentbit build for Azure Linux 3 compatibility
  • Bumping e2e and CI pipeline resources to Azure Linux 3
  • Adding the Azure Linux extended repo for additional package availability

Test plan for issue:

Verify RP and Gateway VMSS boot and run successfully on Azure Linux 3 FIPS images

Is there any documentation that needs to be updated for this PR?

How do you know this will function as expected in production?

INT and Canary Testing

hawkowl and others added 14 commits April 13, 2026 07:37
Podman 5.x on Azure Linux 3 requires crun (OCI runtime), netavark
(network stack), and aardvark-dns explicitly installed. Without these,
az acr login fails with "could not find netavark" on RP and gateway VMSS.

Made-with: Cursor
aardvark-dns is not a separate package in Azure Linux 3 repos.
DNS functionality is bundled with netavark on this platform.

Made-with: Cursor
On Azure Linux 3, nftables is the default and native firewall backend.
Forcing iptables causes firewalld to crash with a DBus NoReply error
because the iptables backend is not functional on this platform.

Made-with: Cursor
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Apr 13, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

Made-with: Cursor
@rhamitarora rhamitarora force-pushed the rhamitarora/ARO-22145-azure-linux3 branch from 273c839 to d499bc1 Compare April 13, 2026 02:54
@rhamitarora rhamitarora changed the title azure linux3 [ARO-22145] Bump to Azure Linux 3.0 Apr 13, 2026
@github-actions
Copy link
Copy Markdown

Please rebase pull request.

1 similar comment
@github-actions
Copy link
Copy Markdown

Please rebase pull request.

@github-actions github-actions bot added the needs-rebase branch needs a rebase label Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-rebase branch needs a rebase

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants