openstack/tripleo-image-elements
Code Issues Proposed changes

Merge "Document shortcomings of pypi-openstack element"

Browse Source
This commit is contained in:
Jenkins 2014-02-04 08:15:01 +00:00 committed by Gerrit Code Review
commit 8b9e3f5d0a
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
elements/pypi-openstack/README.md
View File

@ -6,3 +6,12 @@ http://pypi.openstack.org.
By policy all tests in the OpenStack CI/CD environment need to use just the
OpenStack PyPI mirror and thus should include this element.
Note that when building images with this element, pip uses HTTP, and the
OpenStack mirror does not provide a way to verify the contents of the
downloaded packages, and thus is vulnerable to a man-in-the-middle attack.
In order to have a secure local mirror which is built in the same way
pypi-openstack is, see the diskimage-builder element 'pypi'. If you would
like to build an image which hosts such a mirror, see the pypi-mirror
element.