openstack
/
tripleo-image-elements
Code Issues Proposed changes
tripleo-image-elements/elements/overcloud-secure
History
Yolanda Robla 23de84ffcd Use volumes for security hardened images 
Instead of relying on fixed partitions, start using volumes
now that diskimage-builder is supporting it. It will give more
flexibility in terms of resizing to use the disk fully.

Change-Id: I88049da2179e2ea984e05648abb60c804a521b70
 		2017-10-23 10:56:48 +00:00
..
README.rst Add overcloud-secure element 2017-05-30 18:18:41 +02:00
block-device-default.yaml Use volumes for security hardened images 2017-10-23 10:56:48 +00:00
element-deps Add overcloud-secure element 2017-05-30 18:18:41 +02:00
package-installs.yaml Add overcloud-secure element 2017-05-30 18:18:41 +02:00

README.rst

overcloud-secure

CAUTION: This element is part of the security hardened images feature, that is delivered in this release as tech preview. The following element is not intended for production usage.

overcloud-secure is an element to add extra security hardening features to the tripleo images: partition creation and unsafe package uninstall.

It includes the block-device-default definition, that creates independent partitions on the overcloud image, allowing those to accomplish the ANSSI security requirements. Please note that the sizes of the partitions may not be enough for production usage, they will need to be resized properly after deployment depending on the available disk size.