Use vault for centos7 and remove centos6 build files

.circleci/test_docker_container.sh

@@ -21,10 +21,6 @@ conda list
 conda install --yes --quiet conda-forge-pinning -c conda-forge
 
 set +e
-conda info | grep "__glibc=2.12"
-exit_code="$?"
-if [[ "$exit_code" == 0 ]]; then
-  /usr/bin/sudo -n yum install -y mesa-libGL mesa-dri-drivers libselinux libXdamage libXxf86vm libXext libXfixes libXinerama libXrandr libXcursor libXcomposite libX11 libXi
-fi
+/usr/bin/sudo -n yum install mesa-libGL mesa-dri-drivers libselinux libXdamage libXxf86vm libXext
 
 touch /home/conda/feedstock_root/build_artifacts/conda-forge-build-done

.github/workflows/ci.yaml

@@ -17,12 +17,6 @@ jobs:
       fail-fast: false
       matrix:
         cfg:
-          - DOCKERIMAGE: linux-anvil-comp7
-            DOCKERTAG: latest
-            DISTRO_NAME: "centos"
-            DISTRO_VER: "6"
-            SHORT_DESCRIPTION: "conda-forge build image for Cent0S 6 on x86_64"
-
           - DOCKERIMAGE: linux-anvil-cos7-x86_64
             DOCKERTAG: latest
             DISTRO_NAME: "centos"

centos7-repos/centos7-aarch64-vault.repo

@@ -0,0 +1,31 @@
+[vault-base]
+name=CentOS-7 - Base
+baseurl=https://vault.centos.org/altarch/7.9.2009/os/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-$basearch
+
+#released updates 
+[vault-updates]
+name=CentOS-7 - Updates
+baseurl=https://vault.centos.org/altarch/7.9.2009/updates/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-$basearch
+
+#additional packages that may be useful
+[vault-extras]
+name=CentOS-7 - Extras
+baseurl=https://vault.centos.org/altarch/7.9.2009/extras/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-$basearch
+
+#additional packages that extend functionality of existing packages
+[vault-centosplus]
+name=CentOS-7 - Plus
+baseurl=https://vault.centos.org/altarch/7.9.2009/centosplus/$basearch/
+gpgcheck=1
+enabled=0
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-$basearch

centos7-repos/centos7-ppc64le-vault.repo

@@ -0,0 +1,31 @@
+[vault-base]
+name=CentOS-7 - Base
+baseurl=https://vault.centos.org/altarch/7.9.2009/os/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-AltArch-7-$basearch
+
+#released updates 
+[vault-updates]
+name=CentOS-7 - Updates
+baseurl=https://vault.centos.org/altarch/7.9.2009/updates/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-AltArch-7-$basearch
+
+#additional packages that may be useful
+[vault-extras]
+name=CentOS-7 - Extras
+baseurl=https://vault.centos.org/altarch/7.9.2009/extras/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-AltArch-7-$basearch
+
+#additional packages that extend functionality of existing packages
+[vault-centosplus]
+name=CentOS-7 - Plus
+baseurl=https://vault.centos.org/altarch/7.9.2009/centosplus/$basearch/
+gpgcheck=1
+enabled=0
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-AltArch-7-$basearch

centos7-repos/centos7-x86_64-vault.repo

@@ -0,0 +1,27 @@
+[vault-base]
+name=CentOS-7 - Base
+baseurl=https://vault.centos.org/7.9.2009/os/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+
+#released updates 
+[vault-updates]
+name=CentOS-7 - Updates
+baseurl=https://vault.centos.org/7.9.2009/updates/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+
+#additional packages that may be useful
+[vault-extras]
+name=CentOS-7 - Extras
+baseurl=https://vault.centos.org/7.9.2009/extras/$basearch/
+gpgcheck=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+
+#additional packages that extend functionality of existing packages
+[vault-centosplus]
+name=CentOS-7 - Plus
+baseurl=https://vault.centos.org/7.9.2009/centosplus/$basearch/
+gpgcheck=1
+enabled=0
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

linux-anvil-aarch64/Dockerfile

@@ -18,13 +18,15 @@ ENV LANGUAGE=en_US.UTF-8
 # bust the docker cache so that we always rerun the installs below
 ADD https://loripsum.net/api /opt/docker/etc/gibberish
 
-# Resolves a nasty NOKEY warning that appears when using yum.
-RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-${DISTRO_VER} && \
-    rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-${DISTRO_VER}-aarch64
-
 # (arm64v8/centos:7 only) Fix language override to get a working en_US.UTF-8 locale; backports:
 # https://github.com/CentOS/sig-cloud-instance-build/commit/2892c17fa8a520e58c3f42cd56587863fe675670
 RUN sed -i 's/override_install_langs=en_US\.UTF-8/override_install_langs=en_US.utf8/' /etc/yum.conf
+
+# Add the archived repo URL and fix RPM imports
+ADD centos7-repos /tmp/centos7-repos
+ADD scripts/fix_rpm /opt/docker/bin/fix_rpm
+RUN /opt/docker/bin/fix_rpm
+
 # Install basic requirements.
 COPY scripts/yum_clean_all /opt/docker/bin/
 RUN yum update -y && \

linux-anvil-cos7-x86_64/Dockerfile

@@ -20,8 +20,10 @@ ADD qemu-s390x-static /usr/bin/qemu-s390x-static
 # bust the docker cache so that we always rerun the installs below
 ADD https://loripsum.net/api /opt/docker/etc/gibberish
 
-# Resolves a nasty NOKEY warning that appears when using yum.
-RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-${DISTRO_VER}
+# Add the archived repo URL and fix RPM imports
+ADD centos7-repos /tmp/centos7-repos
+ADD scripts/fix_rpm /opt/docker/bin/fix_rpm
+RUN /opt/docker/bin/fix_rpm
 
 # Install basic requirements.
 COPY scripts/yum_clean_all /opt/docker/bin/

linux-anvil-cuda/Dockerfile

@@ -19,13 +19,6 @@ ENV LANG en_US.UTF-8
 # Set path to CUDA install (this is a symlink to /usr/local/cuda-${CUDA_VER})
 ENV CUDA_HOME /usr/local/cuda
 
-# Remove outdated repo URLs
-RUN if [[ "$DISTRO_VER" == "6" ]]; then rm -rf /etc/yum.repos.d/CentOS-*; fi
-# Add the archived centos6 repo URL
-ADD centos6-vault.repo /tmp/vault.repo
-RUN if [[ "$DISTRO_VER" == "6" ]]; then cp /tmp/vault.repo /etc/yum.repos.d/vault.repo; fi
-RUN rm /tmp/vault.repo
-
 # we want to persist a path in ldconfig (to avoid having to always set LD_LIBRARY_PATH), but *after* the existing entries;
 # since entries in ld.so.conf.d have precedence before the preconfigured directories, we first add the latter to the former
 RUN ldconfig -v 2>/dev/null | grep -v ^$'\t' | cut -f1 -d":" >> /etc/ld.so.conf.d/cuda-$CUDA_VER.conf \
@@ -50,8 +43,10 @@ RUN ldconfig -v 2>/dev/null | grep -v ^$'\t' | cut -f1 -d":" >> /etc/ld.so.conf.
 # bust the docker cache so that we always rerun the installs below
 ADD https://loripsum.net/api /opt/docker/etc/gibberish
 
-# Resolves a nasty NOKEY warning that appears when using yum.
-RUN find /etc/pki/rpm-gpg/ -type f | xargs -I {} rpm --import "{}"
+# Add the archived repo URL and fix RPM imports
+ADD centos7-repos /tmp/centos7-repos
+ADD scripts/fix_rpm /opt/docker/bin/fix_rpm
+RUN /opt/docker/bin/fix_rpm
 
 # Install basic requirements.
 COPY scripts/yum_clean_all /opt/docker/bin/

linux-anvil-ppc64le/Dockerfile

@@ -20,9 +20,10 @@ ENV LANGUAGE=en_US.UTF-8
 # bust the docker cache so that we always rerun the installs below
 ADD https://loripsum.net/api /opt/docker/etc/gibberish
 
-# Resolves a nasty NOKEY warning that appears when using yum.
-RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-${DISTRO_VER} && \
-    rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-AltArch-${DISTRO_VER}-ppc64le
+# Add the archived repo URL and fix RPM imports
+ADD centos7-repos /tmp/centos7-repos
+ADD scripts/fix_rpm /opt/docker/bin/fix_rpm
+RUN /opt/docker/bin/fix_rpm
 
 # Install basic requirements.
 COPY scripts/yum_clean_all /opt/docker/bin/

scripts/fix_rpm

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -exo pipefail
+
+if [[ "${DISTRO_NAME}${DISTRO_VER}" == "centos7" ]]; then
+  # Disable outdated repos; use vault instead
+  sed -i '/^enabled=/d; /^\[/a\enabled=0' /etc/yum.repos.d/CentOS-Base.repo
+  cp "/tmp/centos7-repos/centos7-$(uname -m)-vault.repo" /etc/yum.repos.d/vault.repo
+
+  # Resolves a nasty NOKEY warning that appears when using yum.
+  rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
+  if [[ "$(uname -m)" == "ppc64le" ]]; then
+    rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-AltArch-7-ppc64le
+  elif [[ "$(uname -m)" == "aarch64" ]]; then
+    rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7-aarch64
+  fi
+fi
+
+rm -rf "/tmp/centos7-repos"

scripts/yum_clean_all

@@ -1,12 +1,4 @@
 #! /bin/sh -eu
 
-# (centos:6 only) If glibc-common is updated, we have to manually purge non-en_US locales.
-if grep -F 'CentOS release 6' /etc/centos-release ; then
-    if locale -a | grep nds_DE ; then
-        cp /usr/lib/locale/locale-archive /usr/lib/locale/locale-archive.tmpl
-        localedef -i en_US -f UTF-8 en_US.UTF-8
-        : > /usr/lib/locale/locale-archive.tmpl
-    fi
-fi
 yum clean all
 rm -rf /var/cache/yum/*