openstack/bifrost
Code Issues Proposed changes

Use sha256 instead of md5 by default

Browse Source 
Change-Id: I8564228e221919829541124c36baae60a874f1e5
This commit is contained in:
Dmitry Tantsur 2023-12-05 14:20:22 +01:00
parent e41ed49832
commit 1a8dcd3e55
No known key found for this signature in database
GPG Key ID: 315B2AF9FD216C60
4 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/source/user/howto.rst
View File

@ -141,7 +141,7 @@ in an ``instance_info`` variable, for example:
}, },
"instance_info": { "instance_info": {
"image_source": "http://image.server/image.qcow2", "image_source": "http://image.server/image.qcow2",
"image_checksum": "<md5 checksum>", "image_checksum": "<md5/sha256/sha512 checksum>",
"configdrive": { "configdrive": {
"meta_data": { "meta_data": {
"public_keys": {"0": "ssh-rsa ..."}, "public_keys": {"0": "ssh-rsa ..."},

2
playbooks/roles/bifrost-deploy-nodes-dynamic/tasks/main.yml
View File

@ -82,7 +82,7 @@
stat: stat:
path: "{{ deploy_image_path }}" path: "{{ deploy_image_path }}"
get_checksum: yes get_checksum: yes
checksum_algorithm: md5 checksum_algorithm: sha256
register: test_deploy_image register: test_deploy_image
become: yes become: yes

2
playbooks/roles/bifrost-ironic-install/tasks/bootstrap.yml
View File

@ -423,7 +423,7 @@
- when: download_custom_deploy_image | bool - when: download_custom_deploy_image | bool
block: block:
- name: "Create a checksum file for the custom deployment image" - name: "Create a checksum file for the custom deployment image"
shell: md5sum {{ deploy_image_filename }} > {{ deploy_image_filename }}.CHECKSUMS shell: sha256sum {{ deploy_image_filename }} > {{ deploy_image_filename }}.CHECKSUMS
args: args:
chdir: "{{ http_boot_folder }}" chdir: "{{ http_boot_folder }}"
- name: "Ensure the checksum file is readable" - name: "Ensure the checksum file is readable"

4
releasenotes/notes/no-md5-38bb5be4da0f8d4a.yaml Normal file
View File

@ -0,0 +1,4 @@
---
upgrade:
- |
SHA256 is now used instead of MD5 for any checksums calculated by Bifrost.