Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol 2024-04-30T19:20:28+00:00 2024-04-30T19:20:28+00:00 Sven Kieske kieske@osism.tech 2024-04-19T15:04:22+00:00 urn:sha1:e5d79ba457695ec8799bf613e0eca484813af4b4 Closes-Bug: 2062072 Change-Id: Id6e4bbe0aab2360c4e7e5f74fff6170bcc71080b Signed-off-by: Sven Kieske <kieske@osism.tech> (cherry picked from commit 7766abb4398d13355a3f76bc1b91f6c92d36111b) 2023-11-27T11:55:56+00:00 Takashi Kajinami kajinamit@oss.nttdata.com 2023-11-26T15:11:29+00:00 urn:sha1:aa68a99c2c4a196dd6287e7887094f7189f089d0 Swift does not use oslo.rootwrap. Thus the command and its config file is just useless. Change-Id: If4e346c2db841aad9b2ddac049dbbbc1ba5782ec (cherry picked from commit d7e497ce52cc109c9f7b4a83d85f0bebfa05298e) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2021-11-19T01:20:26+00:00 Stanislav Dmitriev sdmitriev1@gmail.com 2021-04-26T20:06:58+00:00 urn:sha1:ff25b500d23155485dc57d10aed9070a4cba88b4 Swift-recon-cron requires rw access to the lock path specified in in object-server.conf file. Currently it doesn't exist in Swift containers Closes-Bug: #1926203 Change-Id: Id3f824b741a5aa98efc7162fb7d49657e86a2bee 2021-01-03T04:45:34+00:00 likui likui@yovole.com 2021-01-03T04:45:34+00:00 urn:sha1:62b37f04539f861b6b40783a4d8ea5f1dc0197d7 Change-Id: I616ab0d81b961effaa3b4a8639b1d06327473f08 Implements: blueprint remove-unicode 2020-11-24T09:28:03+00:00 Mark Goddard mark@stackhpc.com 2020-11-24T09:27:31+00:00 urn:sha1:aa3208ea0f10889469f864aaccdb593547412d76 The UCA packages seem to be removing the swift user from the kolla group. Explicitly add it after installation. Closes-Bug: #1905279 Change-Id: I51c7c6e2f520a582de0409025eb5d1a6da2952a2 2020-08-07T14:38:02+00:00 Marcin Juszkiewicz marcin.juszkiewicz@linaro.org 2020-06-30T12:24:51+00:00 urn:sha1:d2966452c56c3dee27839a8d277eb069671b51df There is a time once every 2 years when ubuntu team releases new LTS release. And then UCA joins with binary packages for current OpenStack development cycle. It is this time for Ubuntu 20.04 'focal'. Depends-On: https://review.opendev.org/745156 Change-Id: I045aa6b4b4fd83fbe7d1fda89549f0ef1e88ec12