Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2020-12-16T00:25:53+00:00 Zuul zuul@review.opendev.org 2020-12-16T00:25:53+00:00 urn:sha1:02e76e77aa095b3afe8f75676cb460e2452b5331 2020-12-14T11:29:52+00:00 wuchunyang wuchunyang@yovole.com 2020-12-06T07:41:20+00:00 urn:sha1:91cb6166129be975afbd2adc3b43e27931788910 freezer scheduler runs with root privilege which is needless Change-Id: I9345a123838dd5ff5a4f4c5d37f40ac233807104 2020-12-11T12:56:04+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2020-12-07T19:30:47+00:00 urn:sha1:b42cadd9ebbe21672e8f6d793fb12ed6c1e7f06b There is no 'trickle' package in EPEL8 so enabling it is useless. Change-Id: I916faee02f1387d08d786f2a74699bd613904280 2020-10-05T11:03:39+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2020-10-04T09:26:41+00:00 urn:sha1:032804e5a0ddf89f7726880d1b57dd492d7d5c07 Make start.sh run with pipefail and nounset to avoid common errors in the start scripts and detect them early. Httpd code had to be patched to allow it to pass on Debuntu. Also fix the two missed applications of httpd to make sure all its path are covered. And also fix Horizon's ENABLE_ZAQAR - K-A does not use Zaqar. Yet another - Horizon's settings_bundle. :-) Finally, fix Neutron for Debuntu (KOLLA_LEGACY_IPTABLES). Change-Id: I39b8d78f6758df1f92b8b0d2c06ea99b038b843b Depends-On: https://review.opendev.org/711923 2020-08-10T09:51:07+00:00 James Kirsch generalfuzz@gmail.com 2020-07-30T19:36:39+00:00 urn:sha1:5bdf514645e6ba603f813f299c68ff7fb12daa3c Refactor installing and initial setup of httpd and mod wsgi from individual services to base image. Change-Id: I651a55a9ebe258ef403d33de010a4dfb368a4021