hack/deploy.sh require sudoers change on Centos Stream 10 latest

[andreiperepiolkin]

CentOS is taken from https://mirrors.centos.org/mirrorlist?path=/10-stream/BaseOS/x86_64/iso/CentOS-Stream-10-latest-x86_64-dvd1.iso&redirect=1&protocol=https

SHA256: B623E219932CF4EC4019B787030ACA37B9D4AC0CEBE6F29676E1F419722A79BF

Installation methodology: clicking yes everywhere + choosing server with gui

Machine is running on esxi host with vcores: 16, ram: 24G, storage: 56G

user@sf-centos:~/sf-operator$ ./hack/deploy.sh
[+] Installing kubectl
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   138  100   138    0     0    847      0 --:--:-- --:--:-- --:--:--   851
100 55.8M  100 55.8M    0     0  20.8M      0  0:00:02  0:00:02 --:--:-- 23.2M
[sudo] password for user:
[+] Deploying minikube
Last metadata expiration check: 2:49:48 ago on Sun 04 Jan 2026 11:09:41 AM CET.
Dependencies resolved.
==============================================================================================================================================================================
 Package                                          Architecture                       Version                                      Repository                             Size
==============================================================================================================================================================================
Installing:
 ansible-core                                     noarch                             1:2.16.15-1.el10                             appstream                             2.9 M
Installing dependencies:
 python3-cffi                                     x86_64                             1.16.0-7.el10                                baseos                                308 k
 python3-cryptography                             x86_64                             43.0.0-4.el10                                baseos                                1.4 M
 python3-jinja2                                   noarch                             3.1.6-1.el10                                 appstream                             327 k
 python3-markupsafe                               x86_64                             2.1.3-6.el10                                 appstream                              32 k
 python3-ply                                      noarch                             3.11-25.el10                                 baseos                                134 k
 python3-pycparser                                noarch                             2.20-16.el10                                 baseos                                158 k
 python3-resolvelib                               noarch                             1.0.1-6.el10                                 appstream                              45 k

Transaction Summary
==============================================================================================================================================================================
Install  8 Packages

Total download size: 5.3 M
Installed size: 20 M
Downloading Packages:
(1/8): python3-ply-3.11-25.el10.noarch.rpm                                                                                                    307 kB/s | 134 kB     00:00
(2/8): python3-cffi-1.16.0-7.el10.x86_64.rpm                                                                                                  608 kB/s | 308 kB     00:00
(3/8): python3-pycparser-2.20-16.el10.noarch.rpm                                                                                              1.1 MB/s | 158 kB     00:00
(4/8): python3-cryptography-43.0.0-4.el10.x86_64.rpm                                                                                          2.1 MB/s | 1.4 MB     00:00
(5/8): python3-markupsafe-2.1.3-6.el10.x86_64.rpm                                                                                             208 kB/s |  32 kB     00:00
(6/8): python3-resolvelib-1.0.1-6.el10.noarch.rpm                                                                                             572 kB/s |  45 kB     00:00
(7/8): python3-jinja2-3.1.6-1.el10.noarch.rpm                                                                                                 1.0 MB/s | 327 kB     00:00
(8/8): ansible-core-2.16.15-1.el10.noarch.rpm                                                                                                 5.8 MB/s | 2.9 MB     00:00
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                         2.6 MB/s | 5.3 MB     00:02
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                      1/1
  Installing       : python3-resolvelib-1.0.1-6.el10.noarch                                                                                                               1/8
  Installing       : python3-markupsafe-2.1.3-6.el10.x86_64                                                                                                               2/8
  Installing       : python3-jinja2-3.1.6-1.el10.noarch                                                                                                                   3/8
  Installing       : python3-ply-3.11-25.el10.noarch                                                                                                                      4/8
  Installing       : python3-pycparser-2.20-16.el10.noarch                                                                                                                5/8
  Installing       : python3-cffi-1.16.0-7.el10.x86_64                                                                                                                    6/8
  Installing       : python3-cryptography-43.0.0-4.el10.x86_64                                                                                                            7/8
  Installing       : ansible-core-1:2.16.15-1.el10.noarch                                                                                                                 8/8
  Running scriptlet: ansible-core-1:2.16.15-1.el10.noarch                                                                                                                 8/8

Installed:
  ansible-core-1:2.16.15-1.el10.noarch       python3-cffi-1.16.0-7.el10.x86_64     python3-cryptography-43.0.0-4.el10.x86_64     python3-jinja2-3.1.6-1.el10.noarch
  python3-markupsafe-2.1.3-6.el10.x86_64     python3-ply-3.11-25.el10.noarch       python3-pycparser-2.20-16.el10.noarch         python3-resolvelib-1.0.1-6.el10.noarch

Complete!
[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'

PLAY [localhost] *************************************************************************************************************************************************************

TASK [Gathering Facts] *******************************************************************************************************************************************************
ok: [localhost]

TASK [Create ramdisk folder] *************************************************************************************************************************************************
skipping: [localhost]

TASK [Installing packages] ***************************************************************************************************************************************************
ok: [localhost]

TASK [Set pids_limit in containers.conf] *************************************************************************************************************************************
changed: [localhost]

TASK [Installing Minikube] ***************************************************************************************************************************************************
changed: [localhost]

TASK [Start minikube] ********************************************************************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": true, "cmd": ["minikube", "start", "--kubernetes-version=v1.32", "--embed-certs", "--container-runtime=cri-o", "--addons", "ingress,ingress-dns", "--cpus", "no-limit", "--memory", "no-limit", "--delete-on-failure=true", "--disable-metrics=true"], "delta": "0:00:00.126016", "end": "2026-01-04 13:59:47.205047", "msg": "non-zero return code", "rc": 55, "start": "2026-01-04 13:59:47.079031", "stderr": "X Exiting due to DRV_NOT_HEALTHY: Found driver(s) but none were healthy. See above for suggestions how to fix installed drivers.", "stderr_lines": ["X Exiting due to DRV_NOT_HEALTHY: Found driver(s) but none were healthy. See above for suggestions how to fix installed drivers."], "stdout": "* minikube v1.36.0 on Centos 10\n  Using Kubernetes 1.32.5 since patch version was unspecified\n* Unable to pick a default driver. Here is what was considered, in preference order:\n  - podman: Not healthy: \"sudo -n -k podman version --format {{.Version}}\" exit status 1: sudo: a password is required\n  - podman: Suggestion: Add your user to the 'sudoers' file: 'user ALL=(ALL) NOPASSWD: /usr/bin/podman' , or run 'minikube config set rootless true' <https://podman.io>\n* Alternatively you could install one of these drivers:\n  - docker: Not installed: exec: \"docker\": executable file not found in $PATH\n  - kvm2: Not installed: exec: \"virsh\": executable file not found in $PATH\n  - qemu2: Not installed: exec: \"qemu-system-x86_64\": executable file not found in $PATH\n  - virtualbox: Not installed: unable to find VBoxManage in $PATH", "stdout_lines": ["* minikube v1.36.0 on Centos 10", "  Using Kubernetes 1.32.5 since patch version was unspecified", "* Unable to pick a default driver. Here is what was considered, in preference order:", "  - podman: Not healthy: \"sudo -n -k podman version --format {{.Version}}\" exit status 1: sudo: a password is required", "  - podman: Suggestion: Add your user to the 'sudoers' file: 'user ALL=(ALL) NOPASSWD: /usr/bin/podman' , or run 'minikube config set rootless true' <https://podman.io>", "* Alternatively you could install one of these drivers:", "  - docker: Not installed: exec: \"docker\": executable file not found in $PATH", "  - kvm2: Not installed: exec: \"virsh\": executable file not found in $PATH", "  - qemu2: Not installed: exec: \"qemu-system-x86_64\": executable file not found in $PATH", "  - virtualbox: Not installed: unable to find VBoxManage in $PATH"]}

PLAY RECAP *******************************************************************************************************************************************************************
localhost                  : ok=4    changed=2    unreachable=0    failed=1    skipped=1    rescued=0    ignored=0

ERROR: Installation of Minikube failed1

So Ive added user ALL=(ALL) NOPASSWD: /usr/bin/podman to the end of /etc/sudoers.

Should this be added to documentation?

• installing git-review require enabling epel repository

[mhuin]

Regarding git review, we could simply link the doc to openstack's documentation: https://docs.opendev.org/opendev/infra-manual/latest/gettingstarted.html#install-the-git-review-utility

Technically gerrit is not necessary to use software factory so installing git-review should be left to the end user depending on their needs; but incorrect or misleading documentation pertaining to the tool should be then removed.

[mhuin]

Re: the OS image you used, this is a regular install image whereas the documentation assumes a "cloud image" is deployed instead.

This is important because most "cloud images" come with a default user account ("cloud-user" for CentOS, for example) that is preconfigured to be a sudoer, so you can use such images immediately on a cloud provider.

If any fix should be proposed to the doc, it'd be to specify that the user you intend to run deploy.sh with should be a sudoer.