Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2023-11-27T11:55:56+00:00 2023-11-27T11:55:56+00:00 Takashi Kajinami kajinamit@oss.nttdata.com 2023-11-26T15:11:29+00:00 urn:sha1:aa68a99c2c4a196dd6287e7887094f7189f089d0 Swift does not use oslo.rootwrap. Thus the command and its config file is just useless. Change-Id: If4e346c2db841aad9b2ddac049dbbbc1ba5782ec (cherry picked from commit d7e497ce52cc109c9f7b4a83d85f0bebfa05298e) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2021-11-19T01:20:26+00:00 Stanislav Dmitriev sdmitriev1@gmail.com 2021-04-26T20:06:58+00:00 urn:sha1:ff25b500d23155485dc57d10aed9070a4cba88b4 Swift-recon-cron requires rw access to the lock path specified in in object-server.conf file. Currently it doesn't exist in Swift containers Closes-Bug: #1926203 Change-Id: Id3f824b741a5aa98efc7162fb7d49657e86a2bee 2021-01-03T04:45:34+00:00 likui likui@yovole.com 2021-01-03T04:45:34+00:00 urn:sha1:62b37f04539f861b6b40783a4d8ea5f1dc0197d7 Change-Id: I616ab0d81b961effaa3b4a8639b1d06327473f08 Implements: blueprint remove-unicode 2020-11-24T09:28:03+00:00 Mark Goddard mark@stackhpc.com 2020-11-24T09:27:31+00:00 urn:sha1:aa3208ea0f10889469f864aaccdb593547412d76 The UCA packages seem to be removing the swift user from the kolla group. Explicitly add it after installation. Closes-Bug: #1905279 Change-Id: I51c7c6e2f520a582de0409025eb5d1a6da2952a2 2020-04-08T21:08:27+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2020-04-08T16:21:58+00:00 urn:sha1:6f7f241d940f5e8cf51f4b30837f2dbe91035695 We no longer ship Python2 in images so use Python 3 in scripts. Change-Id: I428099d66715d6156a891d6f682f52e49f1b7753 2020-03-01T17:25:58+00:00 Christian Berendt berendt@betacloud-solutions.de 2020-02-19T21:39:33+00:00 urn:sha1:861f55fbfd7558d56008e6275b0c6f5993346b95 Change-Id: I9692dda817ef134d647247431565e1b58cf9da41 2020-02-19T19:54:06+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2020-02-19T19:54:06+00:00 urn:sha1:faec906090ec5f59f6e4fc8b9c4f64e14a0025ce Change-Id: I5514c53002a9e772b96e767b10fddf6342c7eb1d