openstack/kolla.git/kolla/tests/test_build.py, branch stable/2026.1

kolla-build: Use SandboxedEnvironment to prevent SSTI

2026-06-11T19:36:25+00:00

Switch from jinja2.Environment to jinja2.sandbox.SandboxedEnvironment to block Server-Side Template Injection attacks. Closes-Bug: #2146056 Change-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8 Signed-off-by: Michal Nasiadka (cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)

send empty X-Registry-Auth for anonymous pushes

2025-08-06T09:50:39+00:00

Since Docker 28.3.3 the daemon rejects a push that carries no `X-Registry-Auth` header [1]. The SDK already sets this header when it finds credentials, so the breakage happens only on anonymous pushes. During `PushTask.push_image()` we now check whether the SDK can resolve credentials for the target registry; if it cannot, we inject `auth_config={}`, causing the SDK to send the minimal "{}" header that satisfies the daemon while leaving authenticated pushes unchanged. Drop this addition when [2] is fixed. [1] https://github.com/moby/moby/pull/50371 [2] https://github.com/docker/docker-py/issues/3348 Closes-Bug: #2119619 Change-Id: I7a2f3fce223afd74741b40bf62836b325fca5b19 Signed-off-by: Bartosz Bezak

tests: Add cross-arch test for etcd

2025-03-21T17:06:48+00:00

Ensure that when building etcd with --base-arch aarch64, Kolla uses the arm64 tarball instead of amd64. Related-Bug: #2103810 Change-Id: I6248cb6646b2b0c7af1c29f9a0a244cef1c4cf05

Switch to Dynamic Python Version Detection

2024-09-19T10:22:16+00:00

This commit removes the hardcoded KOLLA_DISTRO_PYTHON_VERSION and replaces it with dynamic Python version detection during container images build. Dockerfiles and scripts now use general python3 references, simplifying maintenance and ensuring compatibility with future Python versions. Test cases relying on distro_python_version were also cleaned up. Change-Id: I891749598247a5e951ed4a873b16acfd0566f59c

Merge "add: cross-compile support"

2024-03-28T16:29:14+00:00

Move curl sources to sources.py

2024-02-21T08:26:52+00:00

Move most curl sources to sources.py, so it can be automatically updated in future. This also makes overriding the versions/locations/sha256 easier. Change-Id: Ib3497fe96162ae190e5c113cacaaa3ef8334f590

add: cross-compile support

2024-02-08T00:16:05+00:00

The main goal is to be able to build ARM images on standard x86 hardware. Add simple functions supported by python-py and podman-py to enable creation of container images on emulated architectures. Change-Id: I1526b460f6e271c2ec63ab3a3b1dc348d742e96d

Merge "Summary JSON file"

2023-12-21T15:45:11+00:00

Add podman for image building

2023-09-21T09:01:21+00:00

Add podman as an option to choose for container engine for kolla-build (--engine podman) Signed-off-by: Konstantin Yarovoy Co-Authored-By: Michal Arbet Change-Id: I068c906df97745e397408d8c3ef6af47ee037638

Transition to DockerClient

2023-08-28T13:56:30+00:00

Change to use docker.DockerClient instead of the low level docker.APIClient. Signed-off-by: Konstantin Yarovoy Change-Id: I88842c17d8e6ddbe89b984c7b5e0367ed356fa50