Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=master 2024-04-16T12:22:41+00:00 2024-04-16T12:22:41+00:00 Michal Nasiadka mnasiadka@gmail.com 2024-04-15T13:25:54+00:00 urn:sha1:c69284fd8b6a44a8c1f24771d28d8d510a0855b4 It's inactive and hasn't produced a 2024.1 release [1]. There are some efforts to restore Freezer, but let's remove it for now. [1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects Change-Id: If2d034789d8c1128597c9072b4e82d14f72492e0 2023-08-24T08:45:31+00:00 howardlee lihongweibj@inspur.com 2023-08-24T07:03:33+00:00 urn:sha1:709d27ba3706ac15cefa76172ee4c7317d1d63aa Commit [1] deletes the relevant operation permission of the /etc/freezer directory, causing the freezer-scheduler to have no permission when creating the jobs_dir directory in the /etc/freezer directory. This patch creates partent dir of jobs_dir for freezer-scheduler, so that, freezer-scheduler process can startup successfully. [1] https://review.opendev.org/c/openstack/kolla/+/722102 Related-Bug: #2031953 Change-Id: I9c7fea3e0f70ff2e15394e99e26d21c548b95b16 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2020-12-16T00:25:53+00:00 Zuul zuul@review.opendev.org 2020-12-16T00:25:53+00:00 urn:sha1:02e76e77aa095b3afe8f75676cb460e2452b5331 2020-12-14T11:29:52+00:00 wuchunyang wuchunyang@yovole.com 2020-12-06T07:41:20+00:00 urn:sha1:91cb6166129be975afbd2adc3b43e27931788910 freezer scheduler runs with root privilege which is needless Change-Id: I9345a123838dd5ff5a4f4c5d37f40ac233807104 2020-12-11T12:56:04+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2020-12-07T19:30:47+00:00 urn:sha1:b42cadd9ebbe21672e8f6d793fb12ed6c1e7f06b There is no 'trickle' package in EPEL8 so enabling it is useless. Change-Id: I916faee02f1387d08d786f2a74699bd613904280