Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2021-11-02T11:04:50+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2021-11-01T13:28:19+00:00 urn:sha1:1b41f2e682f15dd5f3eb0fb09d61c35f18607bb8 Project description says: /!DON’T USE IT, but use upstream python-rados, except you really can’t /! Also installing it created errors which are silently ignored. Change-Id: Id24458cd655aeace0e745c512aa7890b3edda51c 2021-05-13T08:06:21+00:00 Mark Goddard mark@stackhpc.com 2021-05-13T08:06:19+00:00 urn:sha1:c29f818696c74fd32b929a763695d244e112a33c The binary images include python3-rados as a dependency, but source images do not. This change fixes that. Change-Id: I2c8cdfcd25856ecdcfd9f302965187b3b62376ad Closes-Bug: #1927756 2021-05-08T09:03:57+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-05-08T09:03:57+00:00 urn:sha1:9bad71d7c3fe3cdd1b128925554c4fdec1420a7f There is no need to install libraries to build Numpy as we have binary wheel provided by numpy upstream. Change-Id: I721001f877f6ec2f9a2e425c088a2e22177d2e5b 2021-01-25T15:43:18+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-01-25T15:43:18+00:00 urn:sha1:ffe08baa72048fdaa6c5f24b67721db7178a5928 We install pip in base image so why repeat? Change-Id: Id903880b121d87d75b7b14084b0961b9ce99deba 2020-09-17T13:50:15+00:00 Gaël THEROND (Fl1nt) gael.therond@bitswalk.com 2020-09-17T12:38:21+00:00 urn:sha1:b93c40a3635fbce72e48dc29120e50484cba36ca * "Use distribution-provided pip" * "Use python's pip module invocation method" * "Install pip earlier in order to avoid multiple installation" * "Remove pip_version variable requirement and call" Change-Id: Id0e738044a1931f9d611a7281a48ea4a593f1cf1 Closes-bug: #1893204