Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2022-03-01T16:59:33+00:00 Michal Nasiadka mnasiadka@gmail.com 2022-02-24T16:00:56+00:00 urn:sha1:8e8a499adc3ae0c4009bacde65cf3a141632ef3c We should use the same Python OVS bindings package version as running OpenvSwitch. See related bug. Closes-Bug: #1961874 Change-Id: Id6968e3ec1093f26f25f3045e2a6d8cc4f41adaa 2022-02-08T07:16:44+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-02-01T12:37:19+00:00 urn:sha1:e1637099d506bb746afd7f05ddef5eed2b7da314 This reverts commit 7de91fd60355104cbd650e0fe6f680b2eb0f2ffa. Reason for revert: Nova dropped pypowervm dependency so we do not need to handle it anymore. Change-Id: I8bb6c4c07c30f108e77fbb8cdc38d634b42b900f 2021-12-01T15:52:08+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-12-01T15:48:51+00:00 urn:sha1:7de91fd60355104cbd650e0fe6f680b2eb0f2ffa Nova depends on pypowervm for POWER architecture support. But it is unmaintained upstream and breaks CentOS builds (wants to install Py2 only 'futures' package). Change-Id: Ife9385c93239e910db2e4405ec4661f667357bc0 2021-05-11T10:45:16+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2021-04-20T16:25:56+00:00 urn:sha1:0506ede84f97159a8156ad51aea395d0868e6141 We do not test support for ppc64le on CI or other systems. In previous cycles it was used by TripleO and now they have own way. Change-Id: Ibd955869a6f9485dfa4d08a8ad2f4b28b7d59c15 2021-04-13T11:21:39+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2021-04-12T12:32:00+00:00 urn:sha1:38fcd184e872bf460a1a65e3342e9806e9b7a05a With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e 2021-03-23T21:08:11+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2021-03-23T21:05:10+00:00 urn:sha1:fb61ba7daccfe8b13eff3b773cc09d69aa0039e7 There are several images installing 'python3-libvirt' package. Which for Debian reside in 'libvirt' repo. So let's enable it where needed. Change-Id: I1c91d27f2578f5ca7c83c4747725b1d9371880b0