<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/docker/sahara, branch master</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=master</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2024-04-15T16:55:14+00:00</updated>
<entry>
<title>Drop Sahara</title>
<updated>2024-04-15T16:55:14+00:00</updated>
<author>
<name>Michal Nasiadka</name>
<email>mnasiadka@gmail.com</email>
</author>
<published>2024-04-15T13:04:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=4d9379ecc8d3c66902763aca0ae14643350a8976'/>
<id>urn:sha1:4d9379ecc8d3c66902763aca0ae14643350a8976</id>
<content type='text'>
It's inactive and hasn't produced a 2024.1 release [1].

[1]: https://governance.openstack.org/tc/reference/emerging-technology-and-inactive-projects.html#current-inactive-projects

Change-Id: I7b5b032a4175c5390c9b7ff3fbd4c672adcb5325
</content>
</entry>
<entry>
<title>sahara: install netcat-openbsd on Debian/Ubuntu</title>
<updated>2023-01-20T18:09:08+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz+kolla@linaro.org</email>
</author>
<published>2023-01-20T18:07:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=42cf9c34ac6f6a242e8336ca37bdce7ecfcc00c5'/>
<id>urn:sha1:42cf9c34ac6f6a242e8336ca37bdce7ecfcc00c5</id>
<content type='text'>
By default in both Debian:11 and Ubuntu:22.04 'netcat' means
'netcat-openbsd'.

Debian 'bookworm' 12 will not have such default. So let install proper
package.

Change-Id: I9795fca15aa3e9d59eb686ff749245bf618639cf
</content>
</entry>
<entry>
<title>Fix writable rootwrap/privsep config</title>
<updated>2022-10-10T15:06:05+00:00</updated>
<author>
<name>Radosław Piliszek</name>
<email>radoslaw.piliszek@gmail.com</email>
</author>
<published>2022-08-29T18:13:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=2daf4331a648cc2df6982c1a6ec47a705e038255'/>
<id>urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255</id>
<content type='text'>
Fixes a hypothetical security issue related to privilege escalation via
rootwrap/privsep. A potential vulnerable service could previously allow
writes to its rootwrap/privsep config and thus allow for more commands
to be run with root privileges via rootwrap/privsep. For a succesful
attack, this would also require the service to allow to run arbitrary
commands via rootwrap/privsep. Thus far, no such vulnerabilities have
been reported and thus this fix is simply strengthening the container
images against such an issue in the future.

Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a
Closes-Bug: #1874298
</content>
</entry>
<entry>
<title>adjust permissions on _extend_start files (part II)</title>
<updated>2022-04-22T09:34:55+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin@juszkiewicz.com.pl</email>
</author>
<published>2022-04-22T09:34:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=016c5ed30c0fe6c46004731d13ec0748daa6c70c'/>
<id>urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c</id>
<content type='text'>
Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae.

Since all extend_start files are sourced rather than executed, the executable
bits are now cleared throughout the project.

Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760
</content>
</entry>
<entry>
<title>flatten images a bit</title>
<updated>2022-04-21T18:53:14+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz+kolla@linaro.org</email>
</author>
<published>2022-04-21T16:21:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=e21aeb5ae955671937055baf57836120af8d4312'/>
<id>urn:sha1:e21aeb5ae955671937055baf57836120af8d4312</id>
<content type='text'>
As we have one type of images now some RUN calls could be merged so we
will have less layers in resulting images.

Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
</content>
</entry>
<entry>
<title>Adjust permissions on _extend_start files.</title>
<updated>2022-04-11T15:22:24+00:00</updated>
<author>
<name>Tim Shearer</name>
<email>tshearer@advaoptical.com</email>
</author>
<published>2022-04-01T20:22:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae'/>
<id>urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae</id>
<content type='text'>
Explicitly set the permissions on the kolla-toolbox kolla_extend_start
file. Also, since all extend_start files are sourced rather than
executed, the executable bits are now cleared throughout the project.

Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
</content>
</entry>
<entry>
<title>docker: drop binary parts</title>
<updated>2022-04-09T15:44:26+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz+kolla@linaro.org</email>
</author>
<published>2022-04-01T11:41:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e'/>
<id>urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e</id>
<content type='text'>
Big patch drops all mentions of binary images support. Suggestions are
welcome how to split it into parts or handle better.

Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
</content>
</entry>
<entry>
<title>Remove support for CentOS 7</title>
<updated>2020-04-15T09:32:06+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz@linaro.org</email>
</author>
<published>2020-03-09T16:44:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=53443c5c712f4ec23b859105e94bcd90abc27762'/>
<id>urn:sha1:53443c5c712f4ec23b859105e94bcd90abc27762</id>
<content type='text'>
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images
so there is no need for checking which Python version (2.x or 3.x) is
used inside of containers.

We also no longer have to support yum as a value for
distro_package_manager.

Partially-Implements: blueprint centos-rhel-8

Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
</content>
</entry>
<entry>
<title>Add block labels to all Dockerfiles</title>
<updated>2020-03-01T17:25:58+00:00</updated>
<author>
<name>Christian Berendt</name>
<email>berendt@betacloud-solutions.de</email>
</author>
<published>2020-02-19T21:39:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=861f55fbfd7558d56008e6275b0c6f5993346b95'/>
<id>urn:sha1:861f55fbfd7558d56008e6275b0c6f5993346b95</id>
<content type='text'>
Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
</content>
</entry>
<entry>
<title>Sahara: install also the split plugins</title>
<updated>2019-03-18T22:55:46+00:00</updated>
<author>
<name>Luigi Toscano</name>
<email>ltoscano@redhat.com</email>
</author>
<published>2019-03-18T17:44:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=c0a2ac1ee2dc275eabcceae92a0d21811fc10f48'/>
<id>urn:sha1:c0a2ac1ee2dc275eabcceae92a0d21811fc10f48</id>
<content type='text'>
The code of Sahara plugins has been extracted during the Stein cycle.
Add support for:
- the source-based deployment method (a beta release of
  the plugins is available on pypi) and
- the RPM-based method (RDO contains the packages for the plugins.)

This change is required also for the RPM method. Even if
the RPM packages of the plugins are linked through weak dependencies
to the sahara-api and sahara-engine packages (Supplements),
weak dependencies are currently disabled here.

Change-Id: I5241d84aa1ca2830cfdb60c1a3ff4e958a21b345
</content>
</entry>
</feed>
