Add open-iscsi and nfs-common to ubuntu stemcells

[gberche-orange]

As a bosh release author,
In order to leverage software-defined storage systems such as requested in #87 or longhorn requiring open-iscsi
I need the open-iscsi package to be installed in ubuntu stemcells

This is currently the case in softlayer stemcells but not in bosh-vsphere-esxi-ubuntu-jammy-go_agent (e.g. 1.829)

bosh-linux-stemcell-builder/bosh-stemcell/spec/stemcells/ubuntu_spec.rb

Lines 256 to 270 in 3bcd52a

	context 'installed by system_softlayer_open_iscsi', {
	exclude_on_alicloud: true,
	exclude_on_aws: true,
	exclude_on_cloudstack: true,
	exclude_on_google: true,
	exclude_on_vsphere: true,
	exclude_on_vcloud: true,
	exclude_on_warden: true,
	exclude_on_openstack: true,
	exclude_on_azure: true,
	} do
	describe package('open-iscsi') do
	it { should be_installed }
	end
	end

Bosh releases have to carry the burden of stemcell dependent iscii package compilation. See cloudfoundry/nfs-volume-release#682 and https://github.com/cloudfoundry/nfs-volume-release/commits/develop/packages/nfs-debs/packaging

[beyhan]

Why not install this as a bosh-addon?

[gberche-orange]

@beyhan thanks for your reponse up and sorry for late response.

Why not install this as a bosh-addon?

Sure, however the struggle is not about the bosh deployment manifest (where bosh add-on can help reduce duplication among deployments), but the bosh release authoring, specifically the packaging and compiling with either

• package creation including kernel modules
• package vendoring potentially from https://github.com/cloudfoundry/nfs-volume-release/commits/develop/packages/nfs-debs/packaging

[aramprice]

Hi @gberche-orange - the motivation for removing these is that the packages do not come from Ubuntu's main apt repo, and packages outside of main receive security updates for less time than packages that are in main.

A long term goal is to remove all non-main package apt installations so that security fixes are available during a consistent time-frame packages on the stemcell.

---

As for packaging, it may be feasible to have a bosh release that tracks these upstream packages and provides the Ubuntu versions which they publish compiled for specific kernel versions. Perhaps this is an alternative to compiling?