July 2024 - Release-announce - lists.openstack.org

openstack-ansible 26.5.3 (zed)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are stoked to announce the release of: openstack-ansible 26.5.3: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 26.5.2..26.5.3 ------------------------------------------- 6d4d953d6 Switch u-c to SHA eadd8d466 Transition Zed to Unmaintained 7c6e5ef7f Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 118 ++++++------ .../defaults/repo_packages/openstack_services.yml | 210 ++++++++++----------- tox.ini | 2 +- zuul.d/jobs.yaml | 9 - 5 files changed, 166 insertions(+), 175 deletions(-)

1 0

cinder 22.2.0 (antelope)
by no-reply＠openstack.org 11 Jul '24

11 Jul '24

We are psyched to announce the release of: cinder 22.2.0: OpenStack Block Storage This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 22.2.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Ceph backup driver Bug #1895035 (https://bugs.launchpad.net/cinder/+bug/1895035) Fixed restore full backups to non RBD volumes. * Bug #1912624 (https://bugs.launchpad.net/cinder/+bug/1912624) Corrected regression introduced by the refactoring of the backup service in the ussuri release, which prevented the creation of a volume backup in a different availability zone. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Dell PowerMax driver bug #2051828 (https://bugs.launchpad.net/cinder/+bug/2051828) The driver only recognized 10.0 as being Unisphere 10 and would try to use 9.2 for Unisphere 10.x (where x > 0), but now it correctly recognizes 10.x as being Unisphere 10. * HPE 3PAR driver Bug #1994521 (https://bugs.launchpad.net/cinder/+bug/1994521) Fixed: While performing a delete snapshot (s1) operation, the volumes (v2) dependent on the snapshot (s1) are converted to base volumes. This operation fails if these dependent volumes (v2) have their own dependent snapshots (s2). The errors during the failure were vague and not helpful. With this release, we added conditions to fail this operation early and also added useful error message. * HPE 3PAR driver Bug #2015034 (https://bugs.launchpad.net/cinder/+bug/2015034) Added handling for VLAN iscsi IPs in the 3PAR iSCSI driver. Changes in cinder 22.1.2..22.2.0 -------------------------------- 5f5e86e35 CVE-2024-32498: Check for external qcow2 data file 1d7a0f5d8 Recognize Dell PowerMax Unisphere 10.x (x>0) b30ed079f HPE 3PAR: use vlan iscsi ips 0cca8c2aa [stable-only] Set volume_image_dep_tests flag c9330c6b6 Ceph: Fix restore backups to diff backend 22e6866f6 Fix 'cinder-backup' service when Swift with TLS enabled af040f925 3PAR: Error out if vol cannot be converted to base 8f9632461 Stable-only: Remove skip-level upgrade job 4ab3cbd70 Do not ignore availability_zone in backup creation Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +- cinder/backup/api.py | 3 +- cinder/backup/drivers/ceph.py | 65 +- cinder/backup/drivers/swift.py | 3 +- cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + cinder/scheduler/driver.py | 2 +- cinder/scheduler/filter_scheduler.py | 11 +- cinder/scheduler/host_manager.py | 18 +- cinder/scheduler/manager.py | 5 +- .../dell_emc/powermax/test_powermax_rest.py | 21 + cinder/volume/drivers/dell_emc/powermax/rest.py | 61 +- cinder/volume/drivers/hpe/hpe_3par_common.py | 27 +- cinder/volume/drivers/hpe/hpe_3par_iscsi.py | 111 ++- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/remotefs.py | 3 +- .../drivers/dell-emc-powermax-driver.rst | 56 +- .../bug-1895035-rbd-restore-0cd94ccd467ae1e3.yaml | 6 + ...2624-bakup-a-z-regression-452f4bc9dfd41871.yaml | 7 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...l-powermax-unisphere-v101-7195af74d1c7671c.yaml | 8 + ...t-to-base-vol-delete-snap-a460a4b1c419804a.yaml | 11 + ...e-3par-use-vlan-iscsi-ips-f75787b0d281030b.yaml | 5 + 34 files changed, 2591 insertions(+), 159 deletions(-)

1 0

cinder 23.2.0 (bobcat)
by no-reply＠openstack.org 11 Jul '24

11 Jul '24

We are pleased to announce the release of: cinder 23.2.0: OpenStack Block Storage This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 23.2.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Bug #2008017 (https://bugs.launchpad.net/cinder/+bug/2012246) Hide value of the *[coordination] backend_url* option from logs because it can contain credential. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Dell PowerMax driver bug #2051828 (https://bugs.launchpad.net/cinder/+bug/2051828) The driver only recognized 10.0 as being Unisphere 10 and would try to use 9.2 for Unisphere 10.x (where x > 0), but now it correctly recognizes 10.x as being Unisphere 10. * Bug #1988942 (https://bugs.launchpad.net/cinder/+bug/1988942) Increased size of volume image metadata values accepted by the Block Storage API. Volume image metadata values were limited to 255 characters but Glance allows up to 65535 bytes. This change does not affect the database tables which already allow up to 65535 bytes for image metadata values. Changes in cinder 23.1.0..23.2.0 -------------------------------- 9e667b02b CVE-2024-32498: Check for external qcow2 data file 1ec51a0af [stable-only] Set volume_image_dep_tests flag 9c504a019 [coordination] backend_url should be secret 245274505 RBD: Use "RBD" capitalization in user-facing text 68acf0b81 Recognize Dell PowerMax Unisphere 10.x (x>0) 1e5260264 Fix 'cinder-backup' service when Swift with TLS enabled 6fcdf82f6 Tests: Quiet Fungible invalid UUID warnings c0d9e2a2c Tests: Make NEC tests faster 9267b2f46 [stable-only] fix relnote markup 2fb2ff99b Increase size of volume image metadata values 5d24ae271 Ceph: Fix restoring old backups to a different backend Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 + cinder/api/schemas/volume_image_metadata.py | 2 +- cinder/api/validation/parameter_types.py | 9 + cinder/api/validation/validators.py | 8 + cinder/backup/drivers/ceph.py | 44 +- cinder/backup/drivers/swift.py | 3 +- cinder/coordination.py | 1 + cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + .../unit/api/contrib/test_volume_image_metadata.py | 65 +- .../dell_emc/powermax/test_powermax_rest.py | 21 + .../unit/volume/drivers/fungible/test_driver.py | 2 +- .../drivers/nec/v/test_internal_nec_rest_fc.py | 5 +- cinder/volume/drivers/dell_emc/powermax/rest.py | 61 +- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/rbd.py | 34 +- cinder/volume/drivers/remotefs.py | 3 +- .../drivers/dell-emc-powermax-driver.rst | 6 + .../notes/bug-2012246-292d7d93260a1fe5.yaml | 6 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...l-powermax-unisphere-v101-7195af74d1c7671c.yaml | 8 + ...ge-metadata-size-increase-323812970dc0e513.yaml | 8 + ...pure-storage-fix-failover-fe6260a112409742.yaml | 4 +- 31 files changed, 2269 insertions(+), 119 deletions(-)

1 0

cinder 24.1.0 (caracal)
by no-reply＠openstack.org 11 Jul '24

11 Jul '24

We exuberantly announce the release of: cinder 24.1.0: OpenStack Block Storage This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 24.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Dell PowerMax driver bug #2034937 (https://bugs.launchpad.net/cinder/+bug/2034937) Fixed This change is to update the live migration ability in environments using PowerMax. In previous 2023.1 version, the live migration fails without a pool name. This update add the ability of live migration without a pool name. * Bug #2058596 (https://bugs.launchpad.net/cinder/+bug/2058596) Fixed broken "backup_swift_service_auth=True" which made swift backup driver consistently fail during object data access. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Bug #2031897 (https://bugs.launchpad.net/cinder/+bug/2031897) Fixed issues for volume backups with the Ceph driver where failures of the first process ("rbd export-diff") were not caught. Instead, only the return code of the second process ("rbd import-diff") was recognized. This change also preserves the stderr that was lost previously in order to ease debugging. Changes in cinder 24.0.0..24.1.0 -------------------------------- db98dc207 CVE-2024-32498: Check for external qcow2 data file 966bc53c8 Fix broken backup_swift_service_auth=True 52f885b77 Ceph: Catch more failure conditions on volume backup 1aa541d02 PowerMax: Allow live migration without pool name Diffstat (except docs and test files) ------------------------------------- cinder/backup/drivers/ceph.py | 58 +- cinder/backup/drivers/swift.py | 3 +- cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + cinder/service_auth.py | 11 + .../drivers/dell_emc/powermax/powermax_data.py | 7 + .../dell_emc/powermax/test_powermax_masking.py | 17 + cinder/volume/drivers/dell_emc/powermax/masking.py | 10 +- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/remotefs.py | 3 +- ...ation-without-a-pool-name-7690fcd67b5f690c.yaml | 10 + .../notes/bug-2058596-3c676e7fdc642b3d.yaml | 6 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...h-more-failure-conditions-d2ec640f5ff8051c.yaml | 10 + 23 files changed, 2123 insertions(+), 93 deletions(-)

1 0

nova 27.4.0 (antelope)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We are jazzed to announce the release of: nova 27.4.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.4.0 ^^^^^^ Bug Fixes * Ironic virt driver now uses the node cache and respects partition keys, such as conductor group, for list_instances and list_instance_uuids calls. This fix will improve performance of the periodic queries which use these driver methods and reduce API and DB load on the backing Ironic service. Changes in nova 27.3.0..27.4.0 ------------------------------ f732f84768 Fix vmdk_allowed_types checking 9e10ac2549 Additional qemu safety checking on base images 67e5376dd6 Check images with format_inspector for safety af4d819c60 Reject qcow files with data-file attributes 42d3725b51 Fix disk_formats in ceph job tempest config 3226318b53 [ironic] Partition & use cache for list_instance* b128957591 Fix nova-manage image_property show unexpected keyword 43273631d8 Improve logging at '_numa_cells_support_network_metadata' Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + nova/cmd/manage.py | 8 +- nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 +++++++++++++++++++++ nova/virt/hardware.py | 27 +- nova/virt/images.py | 56 +- nova/virt/ironic/driver.py | 33 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + ...nce-respect-partition-key-339ff653eaa00753.yaml | 5 + 15 files changed, 1446 insertions(+), 73 deletions(-)

1 0

nova 28.2.0 (bobcat)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We contentedly announce the release of: nova 28.2.0: Cloud computing fabric controller This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 28.2.0 ^^^^^^ Bug Fixes * Ironic virt driver now uses the node cache and respects partition keys, such as conductor group, for list_instances and list_instance_uuids calls. This fix will improve performance of the periodic queries which use these driver methods and reduce API and DB load on the backing Ironic service. Changes in nova 28.1.0..28.2.0 ------------------------------ 70a435fd51 Fix vmdk_allowed_types checking 0269234dc4 Additional qemu safety checking on base images 0acf5ee7b5 Check images with format_inspector for safety 736328f78f Reject qcow files with data-file attributes 625a10f7d0 Fix disk_formats in ceph job tempest config 555d7d0ad0 [ironic] Partition & use cache for list_instance* 0d970bfa5a Improve logging at '_numa_cells_support_network_metadata' 611bd95aab Adding server actions tests to grenade-multinode Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 +++++++++++++++++++++ nova/virt/hardware.py | 27 +- nova/virt/images.py | 56 +- nova/virt/ironic/driver.py | 33 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + ...nce-respect-partition-key-339ff653eaa00753.yaml | 5 + 14 files changed, 1443 insertions(+), 70 deletions(-)

1 0

nova 29.1.0 (caracal)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We jubilantly announce the release of: nova 29.1.0: Cloud computing fabric controller This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in nova 29.0.2..29.1.0 ------------------------------ 11301e7e3f Fix vmdk_allowed_types checking 8a0d5f2afa Additional qemu safety checking on base images f07fa55fd8 Check images with format_inspector for safety 58d933eafb Reject qcow files with data-file attributes 62b3192c70 Fix disk_formats in ceph job tempest config Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 ++++++++++++++++++++++ nova/virt/images.py | 56 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + 10 files changed, 1363 insertions(+), 18 deletions(-)

1 0

glance 27.1.0 (bobcat)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We are excited to announce the release of: glance 27.1.0: OpenStack Image Service This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 27.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected from glance because such images could be used in an exploit to expose host information. See Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) for details. Bug Fixes ********* * Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image format with an external data file will be rejected from glance. To achieve the same, format_inspector has been extended by adding safety checks for qcow2 and vmdk files in glance. Unsafe qcow and vmdk files will be rejected by pre-examining them with a format inspector to ensure safe configurations prior to any qemu-img operations. Changes in glance 27.0.0..27.1.0 -------------------------------- 835c89c7 Add releasenote for CVE-2024-32498 fix 78c97fd1 Revert "[stable only] Make import jobs non-voting" 212426fa Increase timeout for tempest-integrated-storage-import job fb0004a0 [stable only] Make import jobs non-voting 1ea1a937 Fix import job to provide valid disk-formats list to tempest 2befcfcb Add safety check and detection support to FI tool 54c1edbf Add file format detection to format_inspector 4bc13f95 Add QED format detection to format_inspector c2373030 Reject unsafe qcow and vmdk files 50aa0dfa Add VMDK safety check 733d771a Extend format_inspector for QCOW safety 87a98f0d Reject qcow files with data-file attributes 5e2acc91 Support Stream Optimized VMDKs 56da508e Remove py38-fips jobs because stream8 is dead cec35e92 Fix broken glance-cache-prefetcher utility 9a4a3067 Update TOX_CONSTRAINTS_FILE for stable/2023.2 6b7d26c9 Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +- glance/async_/flows/base_import.py | 10 + glance/async_/flows/plugins/image_conversion.py | 52 +++- glance/cmd/cache_prefetcher.py | 2 + glance/common/format_inspector.py | 270 +++++++++++++++++++-- .../async_/flows/plugins/test_image_conversion.py | 73 +++++- ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 ++ tools/test_format_inspector.py | 7 + tox.ini | 2 +- 12 files changed, 571 insertions(+), 53 deletions(-)

1 0

glance 28.1.0 (caracal)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We joyfully announce the release of: glance 28.1.0: OpenStack Image Service This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 28.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected from glance because such images could be used in an exploit to expose host information. See Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) for details. Bug Fixes ********* * Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image format with an external data file will be rejected from glance. To achieve the same, format_inspector has been extended by adding safety checks for qcow2 and vmdk files in glance. Unsafe qcow and vmdk files will be rejected by pre-examining them with a format inspector to ensure safe configurations prior to any qemu-img operations. Changes in glance 28.0.1..28.1.0 -------------------------------- b5b29a0a Add releasenote for CVE-2024-32498 fix 4168ee5a Revert "[stable only] Make import jobs non-voting" 35968d7a Increase timeout for tempest-integrated-storage-import job bc996f20 [stable only] Make import jobs non-voting 400345bf Fix import job to provide valid disk-formats list to tempest 1e5c4444 Add safety check and detection support to FI tool 26e5b855 Add file format detection to format_inspector 83acfc46 Add QED format detection to format_inspector f482a92f Reject unsafe qcow and vmdk files b9ef41ac Add VMDK safety check 7a6c344c Extend format_inspector for QCOW safety 35c7e85d Reject qcow files with data-file attributes eb3eb4ea Remove SQLAlchemy tips jobs 99540a99 Fix broken glance-cache-prefetcher utility f6a553aa Replace remaining usage of [DEFAULT] sql_connection 708ca14f Update TOX_CONSTRAINTS_FILE for stable/2024.1 83683937 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 22 +- glance/async_/flows/base_import.py | 10 + glance/async_/flows/plugins/image_conversion.py | 52 +++- glance/cmd/cache_prefetcher.py | 2 + glance/common/format_inspector.py | 266 +++++++++++++++++++-- .../async_/flows/plugins/test_image_conversion.py | 73 +++++- ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 ++ tools/test_format_inspector.py | 7 + tox.ini | 2 +- 13 files changed, 523 insertions(+), 54 deletions(-)

1 0

glance 26.1.0 (antelope)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We exuberantly announce the release of: glance 26.1.0: OpenStack Image Service This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 26.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected from glance because such images could be used in an exploit to expose host information. See Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) for details. Bug Fixes ********* * Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image format with an external data file will be rejected from glance. To achieve the same, format_inspector has been extended by adding safety checks for qcow2 and vmdk files in glance. Unsafe qcow and vmdk files will be rejected by pre-examining them with a format inspector to ensure safe configurations prior to any qemu-img operations. Changes in glance 26.0.0..26.1.0 -------------------------------- edd75b70 Add releasenote for CVE-2024-32498 fix d65e8a51 Revert "[stable only] Make import jobs non-voting" 6918d5b5 Increase timeout for tempest-integrated-storage-import job f9ccc2d8 [stable only] Make import jobs non-voting f98e9ae4 Fix import job to provide valid disk-formats list to tempest a1c94b47 Add safety check and detection support to FI tool 1656fe88 Add file format detection to format_inspector 9b3faf37 Add QED format detection to format_inspector c1c54abe Reject unsafe qcow and vmdk files 812e56d1 Add VMDK safety check 48600242 Extend format_inspector for QCOW safety dba3bdb4 Reject qcow files with data-file attributes ef22a742 Support Stream Optimized VMDKs a45667b7 Remove py38-fips jobs because stream8 is dead 70170d2a Fix broken glance-cache-prefetcher utility 065e2d7e Adjust integrated-storage-import jobs 285021bd Update TOX_CONSTRAINTS_FILE for stable/2023.1 0c03779f Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- glance/async_/flows/base_import.py | 10 + glance/async_/flows/plugins/image_conversion.py | 52 +++- glance/cmd/cache_prefetcher.py | 2 + glance/common/format_inspector.py | 270 +++++++++++++++++++-- .../async_/flows/plugins/test_image_conversion.py | 73 +++++- playbooks/post-check-metadata-injection.yaml | 16 +- ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 ++ tools/test_format_inspector.py | 7 + tox.ini | 2 +- 13 files changed, 583 insertions(+), 59 deletions(-)

1 0