Fuel for OpenStack

  1. Series ocata
  2. Bug #1658989
  3. Comment #0

Comment 0 for bug 1658989

Revision history for this message
Alexey Shtokolov (ashtokolov) wrote :

MOS 9.1 and 9.2 contain the fix https://review.openstack.org/#/c/362840/ for the security bug https://review.openstack.org/#/c/362840/. This fix sets APT::Get::AllowUnauthenticated 0 and prohibits packages installation from unsigned repos.

Local mirrors created via plugins or fuel-mirror (fuel-createmirror) utility are not signed.

Steps to reproduce:

1. Install Master node
2. Create a local repo using fuel-mirror or Install plugins with local repos.
3. Deploy

Expected result: Fuel installs packages from local mirrors
Actual result: Packages from local mirrors cannot be authenticated and are not installed.