Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2021-04-13T11:21:39+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2021-04-12T12:32:00+00:00 urn:sha1:38fcd184e872bf460a1a65e3342e9806e9b7a05a With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e 2021-02-06T15:14:03+00:00 zhoulinhui df.some@foxmail.com 2021-02-06T07:43:59+00:00 urn:sha1:2305c12c56cb75dcc31ee128ad8b43f4497c34f3 Change-Id: Idfec98f5dee6419dabbd0824b60af60eb0ecd3f2 2020-11-09T14:03:54+00:00 zhoulinhui df.some@foxmail.com 2020-09-29T13:52:29+00:00 urn:sha1:594ff79dc22892111253797cddc2845a04da9a03 heat-all images is used nowhere, this PS to remove it. Change-Id: I78bad7e8dd29f455595a96b52ca187c942c41521 2020-10-04T09:32:20+00:00 Fabian Bermel fabian.bermel@noris.de 2020-03-09T13:42:34+00:00 urn:sha1:5e946cac490077011709c7587dc5e0b06927464f The script should check for heat_user_domain explicitly instead of matching on "heat" Closes-Bug: #1839824 Change-Id: Iac83444487d2aa96a0f90086029f43922d1e7856 2020-09-26T09:15:26+00:00 Michal Nasiadka mnasiadka@gmail.com 2020-09-24T05:35:59+00:00 urn:sha1:d39c3e4a85ff4f3bce028c5a79bccf783512772f heat-engine in V relies on vitrage and zun python client libraries, there is a bug [1] in progress, but let's fix it faster in Kolla - and revert once UCA fixes it on their side. [1]: https://bugs.launchpad.net/cloud-archive/+bug/1893935 Change-Id: I974dfba1b3f939bb5d56e994c080da5673c7953b