Steven Dake 6cf5928ff1 Base image changes for drop-root ... The reason we are doing drop root is so that a network exposed software component (i.e. glance) cannot be used to affect the immutability of the container which it runs in. I have tried several different approaches and this is the only approach which puts glance in PID=1 while ensuring no files may be written by the glance process in the container image except for the log files. Change-Id: Ifd3c8c361b78d0e4791dade3afa6435290407c41 Partially-Implements: blueprint drop-root		2015-11-09 11:00:26 -05:00
..
ceph.yum.repo	Increase Ceph RPM gpg key timeout to 90 seconds	2015-10-20 16:28:19 -04:00
Dockerfile.j2	Base image changes for drop-root	2015-11-09 11:00:26 -05:00
mariadb.yum.repo	Move docker_templates to docker dir	2015-08-28 13:33:50 +00:00
set_configs.py	Bring Kolla inline with FHS	2015-10-06 03:30:53 +00:00
sources.list	Remove ceph as external repo	2015-09-19 05:37:41 +00:00
start.sh	Base image changes for drop-root	2015-11-09 11:00:26 -05:00
sudoers	Base image changes for drop-root	2015-11-09 11:00:26 -05:00