Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla.git/atom?h=zed-eom 2023-10-16T10:43:59+00:00 2023-10-16T10:43:59+00:00 renliang renliang@uniontech.com 2023-06-09T08:25:14+00:00 urn:sha1:2b771157057538498fa3ae79ef2c9a773f4f18d7 In the aarch64 image build, use debian_arch to determine packages of different architectures. Closes-Bug: #2036874 Change-Id: Ic86e6c22840f658bb68387aac688918d4db1f766 (cherry picked from commit 0eed86bb02e87c12098e52359897708e071aa07e) 2022-10-10T15:06:05+00:00 Radosław Piliszek radoslaw.piliszek@gmail.com 2022-08-29T18:13:34+00:00 urn:sha1:2daf4331a648cc2df6982c1a6ec47a705e038255 Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298 2022-04-22T09:34:55+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2022-04-22T09:34:55+00:00 urn:sha1:016c5ed30c0fe6c46004731d13ec0748daa6c70c Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760 2022-04-21T18:53:14+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-21T16:21:42+00:00 urn:sha1:e21aeb5ae955671937055baf57836120af8d4312 As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0 2022-04-11T15:22:24+00:00 Tim Shearer tshearer@advaoptical.com 2022-04-01T20:22:28+00:00 urn:sha1:1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0 2022-04-09T15:44:26+00:00 Marcin Juszkiewicz marcin.juszkiewicz+kolla@linaro.org 2022-04-01T11:41:14+00:00 urn:sha1:1749da2fbf6b395b1a2cd77f349e0bea5d2f4a5e Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3 2022-03-11T12:58:05+00:00 Maksim Malchuk maksim.malchuk@gmail.com 2020-12-16T18:26:56+00:00 urn:sha1:83efe325462e683e2c99d088012cd611d7a0b138 This change adds and unifies an ability to override hardcoded URLs for air-gapped environments via the usual blocks mechanism. Also, this change replaces ENV with ARG instruction for the variables used only in building images, and uses bash variable expansion where it possible. This change is a continuation of the I46b77978926fc2b578a68d1aaa944b2198af0685 Change-Id: I1fbad333b1bc95484e6f4c5145d5936a0e2db84f Signed-off-by: Maksim Malchuk <maksim.malchuk@gmail.com> 2021-04-13T11:21:39+00:00 Marcin Juszkiewicz marcin@juszkiewicz.com.pl 2021-04-12T12:32:00+00:00 urn:sha1:38fcd184e872bf460a1a65e3342e9806e9b7a05a With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e 2021-03-04T14:51:08+00:00 Michal Nasiadka mnasiadka@gmail.com 2021-03-04T14:51:08+00:00 urn:sha1:ec358f4cf7fa3af0b21b08302cf972ee5b307689 This reverts commit 61def281d077f88051d1b1a14dfdbfabac036c8c. Reason for revert: --location was already in curlrc and it was unified in change I46b77978926fc2b578a68d1aaa944b2198af0685 Change-Id: I066d747400ede30037ff324ad55430af7c35dc18 2021-03-02T14:28:59+00:00 Sergei Chekanov chekanovsm@gmail.com 2021-03-02T14:23:23+00:00 urn:sha1:61def281d077f88051d1b1a14dfdbfabac036c8c -L for curl: If the server reports that the requested page has moved to a different location (indicated with a Location: header and a 3XX response code), this option will make curl redo the request on the new place It fixes build error for me: INFO:kolla.common.utils.prometheus-v2-server: ---> Running in 693fd4095c77 INFO:kolla.common.utils.prometheus-v2-server:curl (https://github.com/prometheus/prometheus/releases/download/v2.23.0/prometheus-2.23.0.linux-amd64.tar.gz): response: 302, time: 0.166583, size: 640 INFO:kolla.common.utils.prometheus-v2-server: INFO:kolla.common.utils.prometheus-v2-server:gzip: stdin: not in gzip format INFO:kolla.common.utils.prometheus-v2-server: INFO:kolla.common.utils.prometheus-v2-server:tar: Child returned status 1 INFO:kolla.common.utils.prometheus-v2-server:tar: Error is not recoverable: exiting now Change-Id: I095ca6f34cc7c7bca485e9ec019cc52aeb8e3ff4