openstack/kolla.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2022-10-10	Fix writable rootwrap/privsep config	Radosław Piliszek	1	-1/+0
	Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-04-22	adjust permissions on _extend_start files (part II)	Marcin Juszkiewicz	1	-1/+1
	Tim Shearer started it in 1d96a2bbe1b536b7d7f4cdbf55c6dabae6d058ae. Since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: Ia1797c32fc6a35f9f077c673abf4d8e16e51a760
2022-04-21	flatten images a bit	Marcin Juszkiewicz	1	-5/+4
	As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-11	Adjust permissions on _extend_start files.	Tim Shearer	1	-1/+1
	Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-09	docker: drop binary parts	Marcin Juszkiewicz	3	-23/+0
	Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
2020-03-01	Add block labels to all Dockerfiles	Christian Berendt	3	-0/+6
	Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
2018-07-04	Fix blazar build	Eduardo Gonzalez	1	-1/+0
	Blazar recently implemented policy in code. They removed policy.json Change-Id: I80b1c9d702224dd8d622ec616c745723ab2bb01d
2017-07-07	Implement blazar Docker images	Eduardo Gonzalez	5	-0/+90
	Blazar is a resource reservation service for OpenStack, allows to reserve compute host for tenants. Really usefull for HPC, NFV and Scientific environments. Implements: blueprint blazar-images Change-Id: If42087a791a7f84105c867509e4bbc7b423cb41e