Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2022-01-12T12:01:52+00:00 Michal Nasiadka mnasiadka@gmail.com 2022-01-12T10:17:06+00:00 urn:sha1:0a536f47a8e077d37ccff3b3201512c2b793b0ab Closes-Bug: #1957159 Change-Id: I042da2234d0a06f1b7ddcac9eb6db8b86f13d205 2021-07-28T16:04:21+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-04-09T07:33:15+00:00 urn:sha1:bd90b02708d8c6b88692ec7308a41229fdcdaf22 As a project we never built RHEL based images so support for them was not tested. Change-Id: I27dfe34ade088228d71f6857ec4f3ab28ee63915 2020-03-01T17:25:58+00:00 Christian Berendt berendt@betacloud-solutions.de 2020-02-19T21:39:33+00:00 urn:sha1:861f55fbfd7558d56008e6275b0c6f5993346b95 Change-Id: I9692dda817ef134d647247431565e1b58cf9da41 2019-01-18T16:39:49+00:00 Alex Schultz aschultz@redhat.com 2019-01-18T15:50:30+00:00 urn:sha1:d78144fbdbcdd10829214452a27097cc7ec760c6 RHEL currently doesn't support magnum, so let's throw an error if it is built on rhel. Change-Id: Idfb94fd66e5eb841fb81ec4eeeaf13b7c5a3cede 2019-01-17T15:23:41+00:00 Alex Schultz aschultz@redhat.com 2019-01-15T23:58:25+00:00 urn:sha1:ae1322ec10861678abe1137f3013030b34335bc7 This change updates the docker files to use base_package_type instead of doing specific distro checks for the rhel/deb generic cases. The base_distro is still available and is used when a specific distro needs a customization but if the differences are purely rpm vs deb, then the base_package_type can be used. Change-Id: I8d720bb185df65a0178061ccf20b1ab2265da2c5 2017-06-21T09:44:34+00:00 Mark Goddard mark@stackhpc.com 2017-05-02T14:49:16+00:00 urn:sha1:48c4d923c6053c72ff4b4399eca882b15e148062 Change-Id: I60c64f0933c0c690f888134956eb3fece1fe0ab7 Closes-Bug: #1699462