Skip to content

Commit 707d65b

Browse files
committed
Revert "Don't verify Apt repo CA initially when using HTTPS in container build"
This reverts commit f8947a9. This approach is not secure and leaves credentials in images.
1 parent aeaf2bf commit 707d65b

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

etc/kayobe/kolla.yml

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -328,10 +328,6 @@ kolla_build_blocks:
328328
RUN \
329329
rm /etc/apt/sources.list && \
330330
rm -f /etc/apt/auth.conf && \
331-
{% if stackhpc_repo_mirror_url | urlsplit('scheme') == 'https' %}
332-
{# We lack the ca-certificates package at this stage, so don't verify the CA #}
333-
echo 'Acquire::https::Verify-Peer "false";' > /etc/apt/apt.conf.d/90no-verify-peer && \
334-
{% endif %}
335331
{% if stackhpc_repo_mirror_username is truthy %}
336332
echo 'machine {{ stackhpc_repo_mirror_url }}' >> /etc/apt/auth.conf && \
337333
echo 'login {{ stackhpc_repo_mirror_username }}' >> /etc/apt/auth.conf && \
@@ -369,7 +365,6 @@ kolla_build_blocks:
369365
RUN \
370366
rm /etc/apt/sources.list && \
371367
rm -f /etc/apt/auth.conf && \
372-
rm -f /etc/apt/apt.conf.d/90no-verify-peer && \
373368
{% if stackhpc_repo_mirror_username is truthy %}
374369
echo 'machine {{ stackhpc_repo_mirror_url }}' >> /etc/apt/auth.conf && \
375370
echo 'login {{ stackhpc_repo_mirror_username }}' >> /etc/apt/auth.conf && \

0 commit comments

Comments
 (0)