Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2022-10-10T15:06:05+00:00 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2022-01-20T20:51:22+00:00 Zuul zuul@review.opendev.org 2022-01-20T20:51:22+00:00 urn:sha1:f7ef6c243af0d648e2d32254c52d20e9d0343ed1 2021-10-02T17:41:33+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2021-10-02T09:28:56+00:00 urn:sha1:6b203efde7e60ae6ab63f230b4e9c944eb83c5a2 We are just overinstalling these. PyMySQL is enough nowadays. Change-Id: I074d9d13f52c208c0f3d92ea060b3b9abb6a6b9e 2021-10-02T09:33:42+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2021-10-02T09:33:42+00:00 urn:sha1:8b106493d5ce15f6535f6aa8fb56fcbb927035e5 Spotted while doing MariaDB/MySQL cleanup. This script is no longer useful and may be removed at some point causing the image to fail to build. Change-Id: Iec0dba6ed9f2f8c4c4005fbf203fa5fd243021a1 2020-08-10T17:52:00+00:00 Zuul zuul@review.opendev.org 2020-08-10T17:52:00+00:00 urn:sha1:fd60c657101167b056177ae95aa2c695f14a93d4 2020-08-10T09:51:07+00:00 James Kirsch generalfuzz@gmail.com 2020-07-30T19:36:39+00:00 urn:sha1:5bdf514645e6ba603f813f299c68ff7fb12daa3c Refactor installing and initial setup of httpd and mod wsgi from individual services to base image. Change-Id: I651a55a9ebe258ef403d33de010a4dfb368a4021 2020-08-03T14:45:40+00:00 wu.chunyang wuchunyang@yovole.com 2020-08-03T14:11:04+00:00 urn:sha1:4ec824b0a192d06b6a71dda126e5d1b00b5c3238 remove python3-pymysql from placement since it has added into openstack-base Change-Id: Iae240eae5d3e4a9efa42ec73940728775dfc25fb