| Age | Commit message (Collapse) | Author | Files | Lines |
|
Fixes a hypothetical security issue related to privilege escalation via
rootwrap/privsep. A potential vulnerable service could previously allow
writes to its rootwrap/privsep config and thus allow for more commands
to be run with root privileges via rootwrap/privsep. For a succesful
attack, this would also require the service to allow to run arbitrary
commands via rootwrap/privsep. Thus far, no such vulnerabilities have
been reported and thus this fix is simply strengthening the container
images against such an issue in the future.
Change-Id: I92c81c77e6a16570a108cde8031f7977930fb02a
Closes-Bug: #1874298
|
|
As we have one type of images now some RUN calls could be merged so we
will have less layers in resulting images.
Change-Id: I5178c58fbd8c65efe825dc249c0f1368ef0fe8e0
|
|
Explicitly set the permissions on the kolla-toolbox kolla_extend_start
file. Also, since all extend_start files are sourced rather than
executed, the executable bits are now cleared throughout the project.
Change-Id: I5c2deb4a2e33575d57c852089f856a9acc6818d0
|
|
Big patch drops all mentions of binary images support. Suggestions are
welcome how to split it into parts or handle better.
Change-Id: I5d5a46c6ce7734ceb8b844e17b43e359d7cac6e3
|
|
|
|
We are just overinstalling these.
PyMySQL is enough nowadays.
Change-Id: I074d9d13f52c208c0f3d92ea060b3b9abb6a6b9e
|
|
Spotted while doing MariaDB/MySQL cleanup.
This script is no longer useful and may be removed at some point
causing the image to fail to build.
Change-Id: Iec0dba6ed9f2f8c4c4005fbf203fa5fd243021a1
|
|
remove python3-pymysql from placement since it has added into
openstack-base
Change-Id: Iae240eae5d3e4a9efa42ec73940728775dfc25fb
|
|
Change-Id: I9692dda817ef134d647247431565e1b58cf9da41
|
|
Change-Id: I33d45a5bdd4f45153a78c695e7a9a97f2444dd74
|
|
We have agreed to remove support for Oracle Linux.
http://lists.openstack.org/pipermail/openstack-discuss/2019-June/006896.html
Change-Id: I961dfba1aeef2c509ecdaf376dfe6928926ffb39
Depends-On: https://review.opendev.org/682858
|
|
1. Install python3-pymysql in placement-base image.
2. Remove default placement WSGI config.
3. Use python3 for manage.py in horizon
Change-Id: Ibb620af2241e39fe99bc48757f90296c0d77d438
Partial-Bug: #1823989
|
|
|
|
This patch is committed according to patch[0] of the kolla-ansible.
[0]https://review.openstack.org/#/c/613629/28
Change-Id: Id138802b320ae0a0f01db51a0b5a784c83a72485
|
|
mysql-migrate-db.sh script is not bundled in packages
nor installed with pip. So will need to copy over some
path in the host to run the db migration.
Change-Id: I116277c5e11b484748784134be50c18675b28103
|
|
This change updates the docker files to use base_package_type instead
of doing specific distro checks for the rhel/deb generic cases. The
base_distro is still available and is used when a specific distro needs
a customization but if the differences are purely rpm vs deb, then the
base_package_type can be used.
Change-Id: I8d720bb185df65a0178061ccf20b1ab2265da2c5
|
|
This change breaks out the Placement service from Nova ahead of it's
removal from the project later in Stein.
For the time being the original Nova Placement images are left in place
but they will be removed later in the cycle once the Placement code is
removed from the Nova project by the following change:
https://review.openstack.org/#/c/618215/
Co-Authored-By: Lee Yarwood <lyarwood@redhat.com>
Change-Id: I2bf6f5bf45b76e6900f41c21e9af30c69dc6e9c0
|