OCPBUGS-115309: Re-enable sandboxed-containers extension for 5.0 by aaradhak · Pull Request #1965 · openshift/os

aaradhak · 2026-09-02T21:07:24Z

KATA-4726 made kata-containers available again for RHCOS 9.8 and 10.2. Restore the sandboxed-containers extension in those definitions so 5.0 builds can ship it.

openshift-merge-bot · 2026-09-02T21:07:27Z

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

openshift-ci-robot · 2026-09-02T21:07:31Z

@aaradhak: This pull request references Jira Issue OCPBUGS-115309, which is invalid:

expected the bug to target either version "5.1.0." or "openshift-5.1.0.", but it targets "5.0.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

KATA-4726 made kata-containers available again for RHCOS 9.8 and 10.2. Restore the sandboxed-containers extension in those definitions so 5.0 builds can ship it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

tlbueno · 2026-09-02T21:43:48Z

/lgtm

tlbueno · 2026-09-02T21:44:54Z

/jira refresh

openshift-ci-robot · 2026-09-02T21:44:58Z

@tlbueno: This pull request references Jira Issue OCPBUGS-115309, which is invalid:

expected the bug to target either version "5.1.0." or "openshift-5.1.0.", but it targets "5.0.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

yasminvalim

/LGTM

tlbueno · 2026-09-03T15:17:31Z

/approve

tlbueno · 2026-09-03T15:17:47Z

/test images

openshift-ci · 2026-09-03T15:18:37Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aaradhak, tlbueno, yasminvalim

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [aaradhak,tlbueno,yasminvalim]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

aaradhak · 2026-09-03T18:53:05Z

prow/images failure seems to happening in all PRs , it doesnt seem to be related to the changes done here -

  * could not run steps: step rhel-coreos-extensions failed: error occurred handling build rhel-coreos-extensions-amd64: the build rhel-coreos-extensions-amd64 failed after 13m18s with reason DockerBuildFailed: Dockerfile build strategy has failed. 
INFO[2026-09-03T15:45:00Z] Reporting job state 'failed' with reason 'executing_graph:step_failed:building_project_image'

ngopalak-redhat · 2026-09-04T13:59:48Z

@aaradhak Is the build issue already being tracked?
This PR as you know is a blocker for 5.0 and important for kata containers
I hit the same failure trying to build a cluster with this PR: https://prow.ci.openshift.org/view/gs/test-platform-results/logs/release-openshift-origin-installer-launch-azure-modern/2095864325007740928
We'd like to test kata with 5.0 and would be great to have this merged soon.
cc: @gkurz

tlbueno · 2026-09-04T17:22:26Z

/test images

tlbueno · 2026-09-04T17:45:14Z

looks like the issue is in the repos. kernel package not found:

dnf --repo=rhel-9.8-baseos,rhel-9.8-appstream,rhel-9.8-early-kernel,rhel-9.8-fast-datapath,rhel-9.8-server-ose-5.0,rhel-9.8-highavailability,rhel-9.8-nfv install --assumeyes --nobest --downloadonly --setopt=skip_if_unavailable=True --destdir=/usr/share/rpm-ostree/extensions/ libreswan NetworkManager-libreswan openvswitch3.5-ipsec krb5-workstation libkadm5 kernel kernel-core kernel-modules kernel-modules-core kernel-modules-extra kernel-devel kernel-headers kernel-rt-core kernel-rt-modules kernel-rt-modules-core kernel-rt-modules-extra kernel-rt-devel kata-containers sysstat pacemaker pcs fence-agents-all usbguard
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered with an entitlement server. You can use subscription-manager to register.
rhel-9.8-baseos                                 309 MB/s | 143 MB     00:00    
rhel-9.8-appstream                              237 MB/s | 109 MB     00:00    
rhel-9.8-nfv                                    221 MB/s | 123 MB     00:00    
rhel-9.8-highavailability                        22 MB/s | 3.4 MB     00:00    
rhel-9.8-fast-datapath                          4.1 MB/s | 700 kB     00:00    
rhel-9.8-server-ose-5.0                          17 MB/s | 6.4 MB     00:00    
rhel-9.8-early-kernel                           190 MB/s | 6.4 MB     00:00    
Package kernel-5.14.0-687.45.1.el9_8.x86_64 is already installed.
Package kernel-core-5.14.0-687.45.1.el9_8.x86_64 is already installed.
Package kernel-modules-5.14.0-687.45.1.el9_8.x86_64 is already installed.
Package kernel-modules-core-5.14.0-687.45.1.el9_8.x86_64 is already installed.
Package kernel-modules-extra-5.14.0-687.45.1.el9_8.x86_64 is already installed.
All matches were filtered out by exclude filtering for argument: kernel-devel
All matches were filtered out by exclude filtering for argument: kernel-headers
All matches were filtered out by exclude filtering for argument: kernel-rt-core
All matches were filtered out by exclude filtering for argument: kernel-rt-devel
Error: Unable to find a match: kernel-devel kernel-headers kernel-rt-core kernel-rt-devel

sdodson · 2026-09-10T15:17:06Z

/test images

sdodson · 2026-09-10T15:17:49Z

/jira refresh

openshift-ci-robot · 2026-09-10T15:17:54Z

@sdodson: This pull request references Jira Issue OCPBUGS-115309, which is invalid:

expected the bug to be in one of the following states: NEW, ASSIGNED, POST, but it is ON_QA instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

sdodson · 2026-09-10T15:43:44Z

@tlbueno New error

Error: Unknown repo: 'rhel-10.2-server-ose-5.1'
error: build error: building at STEP "RUN --mount=type=bind,target=/run/src --mount=type=secret,id=yumrepos,target=/run/src/secret.repo /run/src/build-node-image.sh": while running runtime: exit status 1

Same for rhel-9.8-server-ose-5.1.

aaradhak · 2026-09-10T20:47:19Z

ci/prow/images is failing in the shared rhel-coreos-extensions image build, not because of the changes in this PR. Recent failures show both missing kernel-devel packages due to exclude filtering and most recently - Unknown repo: rhel-10.2-server-ose-5.1 / rhel-9.8-server-ose-5.1. This appears to be a shared yum repository/image-build configuration issue affecting multiple PRs.

aaradhak · 2026-09-10T21:00:48Z

@sdodson can we override the CI failure if the error is not related to the changes made here?

aaradhak · 2026-09-10T21:10:58Z

/jira refresh

openshift-ci-robot · 2026-09-10T21:11:02Z

@aaradhak: This pull request references Jira Issue OCPBUGS-115309, which is invalid:

expected the bug to be in one of the following states: NEW, ASSIGNED, POST, but it is ON_QA instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

Details

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

openshift-ci-robot · 2026-09-10T21:13:25Z

@aaradhak: This pull request references Jira Issue OCPBUGS-115309, which is invalid:

expected the bug to target either version "5.0.0." or "openshift-5.0.0.", but it targets "5.1.0" instead
expected the bug to be in one of the following states: NEW, ASSIGNED, POST, but it is ON_QA instead
release note text must be set and not match the template OR release note type must be set to "Release Note Not Required". For more information you can reference the OpenShift Bug Process.
expected Jira Issue OCPBUGS-115309 to depend on a bug targeting a version in 5.1.0 and in one of the following states: MODIFIED, ON_QA, VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA), but no dependents were found

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

Details

In response to this:

KATA-4726 made kata-containers available again for RHCOS 9.8 and 10.2. Restore the sandboxed-containers extension in those definitions so 5.0 builds can ship it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

aaradhak · 2026-09-10T21:13:30Z

/test images

marmijo · 2026-09-10T21:34:51Z

I updated CI to use the rhel-10.2-server-ose-5.1 and rhel-9.8-server-ose-5.1 repos in openshift/release#84660.

I'm trying to land #1964 so master tracks OCP 5.1 now, but I'm seeing a CI failure there that was seen in this PR as well.

openshift-ci-robot · 2026-09-10T22:03:05Z

@aaradhak: This pull request references Jira Issue OCPBUGS-115309, which is invalid:

expected the bug to target either version "5.1.0." or "openshift-5.1.0.", but it targets "5.0.0" instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

Details

In response to this:

KATA-4726 made kata-containers available again for RHCOS 9.8 and 10.2. Restore the sandboxed-containers extension in those definitions so 5.0 builds can ship it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

The master CI config now tracks OCP 5.1 (openshift/release#84660), so the master-images variant test injects server-ose-5.1 repo names. Fetch from both base-5-0 and base-5-1 mirrors so both CI variants (release-5.0 and master) find the repos they need. Co-authored-by: Cursor <cursoragent@cursor.com>

openshift-ci · 2026-09-10T22:03:57Z

New changes are detected. LGTM label has been removed.

openshift-ci · 2026-09-10T22:51:09Z

@aaradhak: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/images	`e17b57a`	link	true	`/test images`
ci/prow/images	`da2f18d`	link	true	`/test images`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

aaradhak · 2026-09-10T23:05:19Z

I updated CI to use the rhel-10.2-server-ose-5.1 and rhel-9.8-server-ose-5.1 repos in openshift/release#84660.

I'm trying to land #1964 so master tracks OCP 5.1 now, but I'm seeing a CI failure there that was seen in this PR as well.

If #1964 lands, then master becomes 5.1, so I might have to target this PR to release-5.0 branch

Yes, the CI error is affecting all the PRs in this repo

OCPBUGS-115309: Re-enable sandboxed-containers extension for 5.0

e17b57a

KATA-4726 made kata-containers available again for RHCOS 9.8 and 10.2. Restore the sandboxed-containers extension in those definitions so 5.0 builds can ship it.

openshift-ci Bot requested review from Rolv-Apneseth and jlebon September 2, 2026 21:07

openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 2, 2026

openshift-ci Bot assigned tlbueno Sep 2, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Sep 2, 2026

yasminvalim approved these changes Sep 3, 2026

View reviewed changes

openshift-ci Bot assigned yasminvalim Sep 3, 2026

aaradhak changed the base branch from master to release-5.0 September 10, 2026 21:13

aaradhak changed the base branch from release-5.0 to master September 10, 2026 22:03

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Sep 10, 2026

Uh oh!

Conversation

aaradhak commented Sep 2, 2026 • edited by openshift-ci Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-merge-bot Bot commented Sep 2, 2026

Uh oh!

openshift-ci-robot commented Sep 2, 2026 • edited by openshift-ci Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tlbueno commented Sep 2, 2026

Uh oh!

tlbueno commented Sep 2, 2026

Uh oh!

openshift-ci-robot commented Sep 2, 2026

Uh oh!

yasminvalim left a comment

Choose a reason for hiding this comment

Uh oh!

tlbueno commented Sep 3, 2026

Uh oh!

tlbueno commented Sep 3, 2026

Uh oh!

openshift-ci Bot commented Sep 3, 2026

Uh oh!

aaradhak commented Sep 3, 2026

Uh oh!

ngopalak-redhat commented Sep 4, 2026

Uh oh!

tlbueno commented Sep 4, 2026

Uh oh!

tlbueno commented Sep 4, 2026

Uh oh!

sdodson commented Sep 10, 2026

Uh oh!

sdodson commented Sep 10, 2026

Uh oh!

openshift-ci-robot commented Sep 10, 2026

Uh oh!

sdodson commented Sep 10, 2026

Uh oh!

aaradhak commented Sep 10, 2026

Uh oh!

aaradhak commented Sep 10, 2026

Uh oh!

aaradhak commented Sep 10, 2026

Uh oh!

openshift-ci-robot commented Sep 10, 2026

Uh oh!

openshift-ci-robot commented Sep 10, 2026

Uh oh!

aaradhak commented Sep 10, 2026

Uh oh!

marmijo commented Sep 10, 2026

Uh oh!

openshift-ci-robot commented Sep 10, 2026

Uh oh!

openshift-ci Bot commented Sep 10, 2026

Uh oh!

openshift-ci Bot commented Sep 10, 2026

Uh oh!

aaradhak commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

aaradhak commented Sep 2, 2026 •

edited by openshift-ci Bot

Loading

openshift-ci-robot commented Sep 2, 2026 •

edited by openshift-ci Bot

Loading

aaradhak commented Sep 10, 2026 •

edited

Loading