summaryrefslogtreecommitdiff
path: root/docker/kuryr
AgeCommit message (Collapse)AuthorFilesLines
2022-10-10Fix writable rootwrap/privsep configRadosław Piliszek1-1/+0
Fixes a hypothetical security issue related to privilege escalation via rootwrap/privsep. A potential vulnerable service could previously allow writes to its rootwrap/privsep config and thus allow for more commands to be run with root privileges via rootwrap/privsep. For a succesful attack, this would also require the service to allow to run arbitrary commands via rootwrap/privsep. Thus far, no such vulnerabilities have been reported and thus this fix is simply strengthening the container images against such an issue in the future. Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a Closes-Bug: #1874298
2022-04-21flatten images a bitMarcin Juszkiewicz1-4/+4
As we have one type of images now some RUN calls could be merged so we will have less layers in resulting images. Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
2022-04-11Adjust permissions on _extend_start files.Tim Shearer1-1/+1
Explicitly set the permissions on the kolla-toolbox kolla_extend_start file. Also, since all extend_start files are sourced rather than executed, the executable bits are now cleared throughout the project. Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
2022-04-09docker: drop binary partsMarcin Juszkiewicz2-26/+10
Big patch drops all mentions of binary images support. Suggestions are welcome how to split it into parts or handle better. Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
2021-04-13centos: enable repos where neededMarcin Juszkiewicz1-0/+2
With RDO use we did not disabled some repositories. This patch disable them and enable where needed. Change-Id: Ia9d537fe9c1ad54789d2bfb4027254fbb3defe7e
2020-04-15Remove support for CentOS 7Marcin Juszkiewicz1-5/+0
With the move to RHEL/CentOS 8 we no longer have Python 2 in our images so there is no need for checking which Python version (2.x or 3.x) is used inside of containers. We also no longer have to support yum as a value for distro_package_manager. Partially-Implements: blueprint centos-rhel-8 Change-Id: Ie45cf3465fedddbde7856961527421883ba3d5c9
2020-03-01Add block labels to all DockerfilesChristian Berendt2-0/+4
Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
2020-01-29CentOS 8: Update packages in imagesMark Goddard1-1/+5
* Some further changes for python2 vs python3 packages * Allow rabbitmq 3.7.*, since a newer erlang is available * Switch from qemu-img-ev to qemu-img on CentOS 8 * bridge-utils no longer available on CentOS 8 * libvirt-daemon-driver-lxc no longer available on CentOS 8 * Mark some more images buildable for CentOS 8 Change-Id: Iaf5b68ff6d944ae730ca0b1d5832172c106a6c08 Partially-Implements: blueprint centos-rhel-8 Partially-Implements: blueprint centos-rhel-python-3
2019-01-17Use base_package_typeAlex Schultz1-2/+2
This change updates the docker files to use base_package_type instead of doing specific distro checks for the rhel/deb generic cases. The base_distro is still available and is used when a specific distro needs a customization but if the differences are purely rpm vs deb, then the base_package_type can be used. Change-Id: I8d720bb185df65a0178061ccf20b1ab2265da2c5
2017-06-13Fix kuryr docker imagesEduardo Gonzalez3-5/+24
Kuryr need ovs and bridge packages to create local bridges and ports for containers. Creates kuryr user and adds permissions Remove useless bootstrap tasks Closes-Bug: #1697475 Change-Id: I4c08a21df263fdefe1fe991cb7ad41cfee65019d
2017-05-03Override image's meta info.Jawon Choo2-2/+2
centos based images have wrong label info, these changes fix own image's name and build-date. Change-Id: I1d13f8f386c8db12b5fbe5f8ecbbf9e3fbb4ba1c Closes-Bug: #1680341
2017-04-20Use LABEL instead of MAINTAINER (deprecated) in all Dockerfile.j2Chen2-2/+2
Use LABEL instruction instead of MAINTAINER (deprecated) instruc- tion as suggested by Docker's official dockerfile guide. docs.docker.com/engine/reference/builder/#maintainer-deprecated Closes-Bug: #1683652 Change-Id: Ie87a1ddf31aefcd0b623fd2837d78de420e76898
2017-02-17Use install-pip macro in most source imagesChao Guo2-2/+16
1. Enable customization of pip packages in source branch of most images 2. All pip packages install uniformly through install-pip macro, user can easily customize his own pip command (For example using a mirror) Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com> Change-Id: If09582039f690fa4136e8f33200d5da15e092da7
2017-02-05Remove include_header and include_footer in all DockerfilesJeffrey Zhang1-1/+0
include_header and include_footer parameter is already removed, remove them in all Dockerfiles. Add missing footer block. Change-Id: I90da03eb9f95a3827361d5f5ede65fde7d6be2b3
2017-01-10Fix kuryr containerzhubingbing2-0/+10
Add log directory,add missing chmod 755 /usr/local/bin/kolla_extend_start Closes-Bug: #1655250 Change-Id: Iaebd5935063a4420d093abd6815d20e704be170b
2016-11-05Add header blocks to Dockerfilescaowei2-0/+4
TrivialFix Change-Id: I73da488b3d147c03e113772a32af8401daf1583a
2016-10-24Remove kuryr-lib in upper-constraints.txt file when install master kuryrJeffrey Zhang1-0/+3
kuryr add itself to upper-constrains.txt file with kuryr-lib===0.1.0 . then installing master kuryr which is > 0.1.0 with constraints will raises an error. There is nothing we can do unless removing the kuryr-lib line in upper-constrains.txt file. TrivialFix Change-Id: Iec7d8a3bc9e00b2d08665329e2f3c2c5ccc43818
2016-09-14Add kuryr-libnetwork DockerfileHui Kang3-8/+23
Kuryr repo has been split to kuryr and kuryr-libnetwork Change-Id: I6d05adf1de89611e2cb0f8469ed42ca1401ace56 Co-authored-by: Mohammad Banikazemi <mb@us.ibm.com> Partially-implements: bp kuryr-docker-plugin
2016-09-13Add header blocks to all DockerfilesPaul Bourke1-0/+2
Change needed to add header blocks to all Dockerfiles, similar to the base. Use case is to easily run something before packages are installed, e.g. to COPY a local rpm in that can be added to the package list. Change-Id: I1bbfdf0b762da0a392aa8bf47781315b45377bee Closes-Bug: 1618969
2016-08-12Customizations for KuryrShaun Smekel1-0/+2
This patchset contains customization of Dockerfile of the Kuryr container. Change-Id: I254befb427530949284f645c9d61c54331aba53a Partially-implements: blueprint third-party-plugin-support
2016-06-21Add Kuryr Docker containerHui Kang2-0/+25
Co-authored-by: Mohammad Banikazemi <mb@us.ibm.com> Partially-implements: bp kuryr-docker-plugin Change-Id: Ife54f71984ff6c9825769e81fd39e3444c6fe310
generated by cgit v1.2.3 (git 2.39.1) at 2026-11-05 18:23:37 +0000