ironic-python-agent/releasenotes/notes/coreos-uses-chroot-8a01ba0b38a4a4f4.yaml
Jim Rollenhagen b9df861eb7 Catch up release notes for Mitaka
Change-Id: I0d42dd30053c0d54d566c58cbadb4e7b32b8f832
2015-12-16 16:34:21 -08:00

12 lines
472 B
YAML

---
features:
- CoreOS image builder now runs IPA in a chroot, instead
of a container. systemd-nspawn has been adding more
security features that break several things IPA needs
to do (after all, IPA manipulates hardware), such as
using sysrq triggers or writing to /sys.
upgrade:
- Now that IPA runs in a chroot, any operator tooling
built around the container may need to change (for
example, methods of getting a shell inside the container).