Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2022-03-21T12:00:10+00:00 Mark Goddard mark@stackhpc.com 2022-03-21T11:44:38+00:00 urn:sha1:5cc480a617c68ed20c80bffec16321a937f5a32b Adds Cyrus SASL packages necessary for the DIGEST-MD5 and SCRAM-SHA-256 mechanisms. These can be used for libvirt SASL authentication. Follow up to I13e19ca29eeab40cd08fa3afe2cdf7531867f81b. Partial-Bug: #1964013 Change-Id: Ic4b6171789c3d360317599310492771bd78828ec 2021-08-18T09:44:31+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2021-08-18T09:44:31+00:00 urn:sha1:72fcc0f8ef382f4118d6a901d0ef8bba445716a0 This patch switches masakari-monitors image to follow nova-compute and ceilometer-compute images. This will be used and required after [1] merges. Usage of libvirt-python from PyPI has already proven to be problematic on CentOS Stream in our stable branches. [2] With this patch we avoid those issues as well. [1] https://review.opendev.org/c/openstack/masakari-monitors/+/804913 [2] https://review.opendev.org/c/openstack/kolla/+/797102 Depends-On: https://review.opendev.org/c/openstack/masakari-monitors/+/804913 Change-Id: I7d4788f5b63fba24e3b2f9b15c16866ff811d83e 2021-03-29T15:58:39+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-03-29T15:58:39+00:00 urn:sha1:af72472da73cce204f4bdf9a57644e03c50fc7ab Change-Id: I61734318f2ddd81c3a20571f2be844c08a8b2a26 2021-01-25T15:31:55+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2020-12-22T20:19:35+00:00 urn:sha1:1aca9acb2f9c91ee9ccc05c98550167d0edb98a4 Change-Id: I448793566202e672348733b8bbbd6665dc251dfe 2020-07-31T16:51:44+00:00 Mark Goddard mark@stackhpc.com 2020-07-29T09:41:54+00:00 urn:sha1:c20a60e01243f8cffd581b07823a09c6b8e09c17 This is necessary for the host monitor to query pacemaker Change-Id: I41066427169381e2bc57c70f7003bf4d83d9cde7 Partially-Implements: blueprint masakari-hostmonitor 2020-03-12T17:43:54+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2020-02-04T18:18:10+00:00 urn:sha1:92224ccb518c90d7c269158d074d811aee2f05f0 CentOS 8.1 came with HA repo. So we can use it. hacluster-pcs image is disabled as we lack 'crmsh' package for it. Partially-Implements: blueprint centos-rhel-8 Co-Authored-By: Mark Goddard <mark@stackhpc.com> Change-Id: I1c786eda399eca4464c9d68ac040c2965350f775 2020-03-01T17:25:58+00:00 Christian Berendt berendt@betacloud-solutions.de 2020-02-19T21:39:33+00:00 urn:sha1:861f55fbfd7558d56008e6275b0c6f5993346b95 Change-Id: I9692dda817ef134d647247431565e1b58cf9da41