Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2020-03-01T17:25:58+00:00 Christian Berendt berendt@betacloud-solutions.de 2020-02-19T21:39:33+00:00 urn:sha1:861f55fbfd7558d56008e6275b0c6f5993346b95 Change-Id: I9692dda817ef134d647247431565e1b58cf9da41 2017-06-13T11:44:05+00:00 Eduardo Gonzalez dabarren@gmail.com 2017-06-12T14:56:58+00:00 urn:sha1:e759d4d53964755b261d2236b498e881bd49467b Kuryr need ovs and bridge packages to create local bridges and ports for containers. Creates kuryr user and adds permissions Remove useless bootstrap tasks Closes-Bug: #1697475 Change-Id: I4c08a21df263fdefe1fe991cb7ad41cfee65019d 2017-05-03T02:08:17+00:00 Jawon Choo jawon.choo@sk.com 2017-05-02T07:23:09+00:00 urn:sha1:31259fa595392c25a5e21d03c13e8896648a7695 centos based images have wrong label info, these changes fix own image's name and build-date. Change-Id: I1d13f8f386c8db12b5fbe5f8ecbbf9e3fbb4ba1c Closes-Bug: #1680341 2017-04-20T07:50:05+00:00 Chen dstbtgagt@foxmail.com 2017-04-18T08:20:03+00:00 urn:sha1:8c463a47a9c988df70046f7d343af0441bf29f4d Use LABEL instruction instead of MAINTAINER (deprecated) instruc- tion as suggested by Docker's official dockerfile guide. docs.docker.com/engine/reference/builder/#maintainer-deprecated Closes-Bug: #1683652 Change-Id: Ie87a1ddf31aefcd0b623fd2837d78de420e76898 2017-02-17T11:49:32+00:00 Chao Guo guochao@winhong.com 2017-01-17T08:49:13+00:00 urn:sha1:961224c6cf5ac24fc49fc52ab3c51a87348ee35d 1. Enable customization of pip packages in source branch of most images 2. All pip packages install uniformly through install-pip macro, user can easily customize his own pip command (For example using a mirror) Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com> Change-Id: If09582039f690fa4136e8f33200d5da15e092da7 2017-01-10T08:07:25+00:00 zhubingbing zhu.bingbing@99cloud.net 2017-01-10T05:57:51+00:00 urn:sha1:d459d80b9ef26a13d2be6e761c8a16cd2e02c998 Add log directory,add missing chmod 755 /usr/local/bin/kolla_extend_start Closes-Bug: #1655250 Change-Id: Iaebd5935063a4420d093abd6815d20e704be170b