Sunday, 2025-05-11

opendevreviewcid proposed openstack/ironic master: doc: A possible improvement around multi-arch config options  https://review.opendev.org/c/openstack/ironic/+/94941617:17
zigoGuys, Ironic 1:29.0.0-5 now in Debian Trixie and Unstable, has the ironic-vncproxy package and service as you guys suggested! :)18:15
zigo(thanks to Debian release team unblock)18:15
opendevreviewMerged openstack/ironic stable/2024.1: OSSA-2025-001: Disallow unsafe image file:// paths  https://review.opendev.org/c/openstack/ironic/+/94917520:21
JayFThanks zigo21:41
zigoIMO, for the above patch, this is a very valid case for implementing the use something like SE_linux or apparmor.21:44
* zigo is considering adding apparmor all over the place in OpenStack...21:44
zigoJayF: Until when will this patch be backported?21:44
* zigo hopes Zed, as this is what's in Bookworm at the moment21:45
zigoI can see Xena...21:46
JayFThe security annoucement is out on security.openstack.org w/links to patches back to xena22:25
JayFunmaintained branches are much lower priority for getting things merged because often we have to hit CI with a giant stick22:25

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!