c007315764
Upversioning docker-distribution to v2.8.2+ds1-1 to be able to block
TLS1.0, TLS1.1 in registry-distribution.
Test Plan:
PASS: $downloader.
PASS: $build-pkgs docker-distribution --clean.
PASS: $build-image.
PASS: List docker-distribution package installed with apt list |
grep docker.
PASS: Verify if ports 9001 and 9002 are blocking tls1.0, 1.1 and
1.2 with nmap.
Closes-Bug: 2043217
Change-Id: Id0fc5f8794af54fc4b87b9cab6cec8b454775410
Signed-off-by: Karla Felix <karla.karolinenogueirafelix@windriver.com>
31 lines
1013 B
Diff
31 lines
1013 B
Diff
From 0ada96a42a4c7738f492ae870afb32c4029162c8 Mon Sep 17 00:00:00 2001
|
|
From: Karla Felix <karla.karolinenogueirafelix@windriver.com>
|
|
Date: Wed, 18 Oct 2023 19:51:56 -0300
|
|
Subject: [PATCH] Remove User directive from unit file
|
|
|
|
By removing:
|
|
User=docker-registry
|
|
the service now runs as user root which allows ansible to use the
|
|
registry without hitting permissions issues.
|
|
|
|
Signed-off-by: Fabricio Henrique Ramos <fabriciohenrique.ramos@windriver.com>
|
|
---
|
|
debian/docker-registry.service | 1 -
|
|
1 file changed, 1 deletion(-)
|
|
|
|
diff --git a/debian/docker-registry.service b/debian/docker-registry.service
|
|
index a2feaa6..a4652b3 100644
|
|
--- a/debian/docker-registry.service
|
|
+++ b/debian/docker-registry.service
|
|
@@ -3,7 +3,6 @@ Description=the Docker toolset to pack, ship, store, and deliver content
|
|
After=network.target
|
|
|
|
[Service]
|
|
-User=docker-registry
|
|
Type=simple
|
|
Environment=REGISTRY_STORAGE_DELETE_ENABLED=true
|
|
ExecStart=/usr/bin/docker-registry serve /etc/docker-distribution/registry/config.yml
|
|
--
|
|
2.25.1
|
|
|