<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/docker/venus/venus-base, branch zed-eol</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eol'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2022-10-10T15:06:05+00:00</updated>
<entry>
<title>Fix writable rootwrap/privsep config</title>
<updated>2022-10-10T15:06:05+00:00</updated>
<author>
<name>Radosław Piliszek</name>
<email>radoslaw.piliszek@gmail.com</email>
</author>
<published>2022-08-29T18:13:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=2daf4331a648cc2df6982c1a6ec47a705e038255'/>
<id>urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255</id>
<content type='text'>
Fixes a hypothetical security issue related to privilege escalation via
rootwrap/privsep. A potential vulnerable service could previously allow
writes to its rootwrap/privsep config and thus allow for more commands
to be run with root privileges via rootwrap/privsep. For a succesful
attack, this would also require the service to allow to run arbitrary
commands via rootwrap/privsep. Thus far, no such vulnerabilities have
been reported and thus this fix is simply strengthening the container
images against such an issue in the future.

Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a
Closes-Bug: #1874298
</content>
</entry>
<entry>
<title>flatten images a bit</title>
<updated>2022-04-21T18:53:14+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz+kolla@linaro.org</email>
</author>
<published>2022-04-21T16:21:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=e21aeb5ae955671937055baf57836120af8d4312'/>
<id>urn:sha1:e21aeb5ae955671937055baf57836120af8d4312</id>
<content type='text'>
As we have one type of images now some RUN calls could be merged so we
will have less layers in resulting images.

Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
</content>
</entry>
<entry>
<title>Adjust permissions on _extend_start files.</title>
<updated>2022-04-11T15:22:24+00:00</updated>
<author>
<name>Tim Shearer</name>
<email>tshearer@advaoptical.com</email>
</author>
<published>2022-04-01T20:22:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae'/>
<id>urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae</id>
<content type='text'>
Explicitly set the permissions on the kolla-toolbox kolla_extend_start
file. Also, since all extend_start files are sourced rather than
executed, the executable bits are now cleared throughout the project.

Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
</content>
</entry>
<entry>
<title>venus: add log management system</title>
<updated>2022-03-16T14:48:50+00:00</updated>
<author>
<name>jinyuanliu</name>
<email>jayonlau@gmail.com</email>
</author>
<published>2022-03-11T02:25:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=3d51f064646940ce5034489238120ab2a6752879'/>
<id>urn:sha1:3d51f064646940ce5034489238120ab2a6752879</id>
<content type='text'>
This project provides a one-stop solution to log collection, cleaning, indexing, analysis, alarm, visualization, report generation and other needs.
Which involves helping operator or maintainer to quickly solve retrieve problems, grasp the operational health of the platform, and improve the level of platform management.

https://wiki.openstack.org/wiki/Venus

Change-Id: I051fb0f17d97134d89da0b6668879a9b36de10d1
</content>
</entry>
</feed>
