)]}'
{"id":"openstack%2Fstorlets~803827","triplet_id":"openstack%2Fstorlets~master~Iea1c6219d2a4f889623a3a0f36698cdb67663f55","project":"openstack/storlets","branch":"master","topic":"docker-nosuid","hashtags":[],"change_id":"Iea1c6219d2a4f889623a3a0f36698cdb67663f55","subject":"Run agent processes by the swift user","status":"MERGED","created":"2021-08-07 14:00:13.000000000","updated":"2021-08-30 05:54:32.000000000","submitted":"2021-08-30 05:53:12.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"803827-docker-nosuid","meta_rev_id":"bcbaea6b0ab8ae20ccb1453bbcea1c887aacb057","_number":803827,"virtual_id_number":803827,"owner":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-08-30 05:53:12.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2021-08-20 04:39:35.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2021-08-30 05:30:21.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-08-07 14:28:04.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-08-20 04:39:35.000000000","updated_by":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},"reviewer":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},"state":"REVIEWER"}],"messages":[{"id":"29a17390bfd40e0ec14d98dba1e66adcf4aac12f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-07 14:00:13.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"6732f4c094067cdaf81ab5e0b56ae57fa09a76d6","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-07 14:28:04.000000000","message":"Patch Set 1: Verified-1\n\n(2 comments)\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/0c9f5077f76b482bb730d4ede869f06a : FAILURE in 4m 44s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/ea5163b30e55463bbff92091f0898c18 : SUCCESS in 4m 54s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/99f798b209794f5f9e7389cb873e96c9 : SUCCESS in 4m 57s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/1deb058edf70477580c752f1f6350506 : SUCCESS in 5m 01s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/1f2d1b000f884ef89c694751104f406e : SUCCESS in 5m 05s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b8d5cd7262044d7ba11594d76769ebd6 : SUCCESS in 4m 39s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/6918d6def3bb4c57a76ae3166836f3ed : SUCCESS in 18m 51s (non-voting)\n- storlets-functional-py3 https://zuul.opendev.org/t/openstack/build/8992ff0c1494455b9c649fc05d19eed3 : SUCCESS in 18m 38s","accounts_in_message":[],"_revision_number":1},{"id":"18b001ec96aba325690b1c17d5c7f070b4e59cdd","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-07 14:51:45.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"f7400aa5753fd16788ba93b88c68ee11aa98501f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-07 15:28:50.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8fed1faa6549425bbe1f1281d3aa63dc : SUCCESS in 6m 29s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/8b0a559410ed4dd5bc90cee036d7e268 : SUCCESS in 5m 25s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/c96e9c4fa829445ba9bf1c08eca3a350 : SUCCESS in 7m 36s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/17fc8244cc3b49ceb8a663f04dccbc1d : SUCCESS in 5m 19s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/353af00bd7fa4444a9f3e2d5c8bb55fd : SUCCESS in 4m 59s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c7d93241b11c4267aa931a064cd8eb73 : SUCCESS in 5m 44s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/1af81c2143c04718be9276f37896f322 : SUCCESS in 18m 08s (non-voting)\n- storlets-functional-py3 https://zuul.opendev.org/t/openstack/build/73d9f408efa049aca141ec6bf9d0e927 : SUCCESS in 19m 18s","accounts_in_message":[],"_revision_number":2},{"id":"9000d8a92050f0c3c1a3046bca7262ea81963757","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-14 09:13:21.000000000","message":"Uploaded patch set 3: Commit message was updated.","accounts_in_message":[],"_revision_number":3},{"id":"cc59da2d7de8e0ce0675e56f7813bba17d7be2d9","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-14 09:37:18.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c0bd2684435f48d99f87ba7e67e3ae71 : SUCCESS in 5m 35s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/ce682b4816704454a7493b5498c09f35 : SUCCESS in 4m 53s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/241551df997641c3ae893821b5052d31 : SUCCESS in 5m 39s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/e6d15b388715463398a267a7929f6b9c : SUCCESS in 5m 11s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/f59ef234dfa24cb594f56ad0e21fffc6 : SUCCESS in 5m 45s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b7ed4c02f2074e7485c92777c411dfc5 : SUCCESS in 4m 42s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/f719890996444c59b7f22d6773db6cc9 : SUCCESS in 19m 36s (non-voting)\n- storlets-functional-py3 https://zuul.opendev.org/t/openstack/build/ac81df269fe7421dadc689e40f4270b4 : SUCCESS in 18m 15s","accounts_in_message":[],"_revision_number":3},{"id":"7bdb33c853b375e7238aee4ebd7bc6e2eb751c92","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-14 09:42:25.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"4f0b9e41de3776ac88471845e74fbead5e0fa375","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-14 09:43:21.000000000","message":"Topic sigterm removed","accounts_in_message":[],"_revision_number":4},{"id":"7910f9cee5aef2e41e6a9ae3f630003a1f2cc182","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-14 09:43:25.000000000","message":"Topic set to docker-nosuid","accounts_in_message":[],"_revision_number":4},{"id":"a0fdcbc9486b47ec400b07c30386ef7d5661fc2d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-14 10:03:18.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/32cca6d6dc9f4aedb4d592ae802d66aa : SUCCESS in 4m 43s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/506d160987534fdab7175b4b85d93e0b : SUCCESS in 5m 22s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/b4b58f8110b246e5ab19ff937ab48fdd : SUCCESS in 5m 32s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/7284e9f0c0a74565be51adf5db3bdefd : SUCCESS in 5m 42s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/813d8bd4b21d4bb2a70ddd96245fbd56 : SUCCESS in 5m 39s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c401039426c344899555a77459c023f3 : SUCCESS in 5m 29s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/afcf2f8ed8ba4c54894d58c0f4d37af0 : SUCCESS in 18m 45s (non-voting)\n- storlets-functional-py3 https://zuul.opendev.org/t/openstack/build/75eb88c2eff24b808315412569d7165e : SUCCESS in 17m 47s","accounts_in_message":[],"_revision_number":4},{"id":"688aaa7e066bf0762d8e8b75f7cbb795a3471a17","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2021-08-19 09:17:18.000000000","message":"Patch Set 5: Patch Set 4 was rebased","accounts_in_message":[],"_revision_number":5},{"id":"dcc783dbae8e30a7f146a19cb96db844eba5b1f6","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-19 09:39:12.000000000","message":"Patch Set 5: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/519b43c09c314d5e9f375c2a96a16a28 : SUCCESS in 5m 14s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/bb415de32162420092c7040c13c8833d : SUCCESS in 5m 08s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7c767caa94804c06b6165fb0860d8ed1 : SUCCESS in 5m 31s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/997bfddb6b72418e8939c18b1a89eec3 : SUCCESS in 5m 47s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/021605cd70634ca4b20336b889b6d5a5 : SUCCESS in 5m 10s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9aaf9c76874f413b92b0d9c5f67b4f6d : SUCCESS in 5m 39s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/950f95f1d41e429a83f93e9e23d00b2b : SUCCESS in 17m 18s (non-voting)\n- storlets-functional-py3 https://zuul.opendev.org/t/openstack/build/a7c99f653ac146d2bf13dbb933c798d9 : SUCCESS in 17m 37s","accounts_in_message":[],"_revision_number":5},{"id":"b8e9e0a22fb5dbad7a194d22a1ccd9e9e14b673a","author":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},"date":"2021-08-20 04:39:35.000000000","message":"Patch Set 5: Code-Review+2\n\nBy the way, Swift requires to run as root then, change the user to the specific one configured in *-server.conf. the daemon factory seems to be a factory process managed by system-administrator so i\u0027m in neutral position on keeping/removing by this patch.","accounts_in_message":[],"_revision_number":5},{"id":"00f9ee2e192b033eab85145f1794eefcdc4e4b5c","author":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"},"date":"2021-08-30 05:30:21.000000000","message":"Patch Set 5: Workflow+1","accounts_in_message":[],"_revision_number":5},{"id":"f70c4393affcf94e271c2bb404d74b8fc51f5633","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-30 05:30:40.000000000","message":"Patch Set 5: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":5},{"id":"175ceaae0b051245bc603b365433393f215e781d","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-30 05:53:12.000000000","message":"Patch Set 5: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e7dfe9298e3b464481b1ac96edd2d339 : SUCCESS in 5m 02s\n- openstack-tox-py27 https://zuul.opendev.org/t/openstack/build/08d18564356b4c1fb89c0a4b7715e07c : SUCCESS in 5m 50s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/ee78426dc55445c89e725a29a5b645a9 : SUCCESS in 4m 37s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/96f2d6fd3a5f4ed89ea53cefeb76e51b : SUCCESS in 6m 03s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f3a0c71b1d194f479dc06dcc8f926818 : SUCCESS in 5m 15s\n- storlets-functional https://zuul.opendev.org/t/openstack/build/67ad0d2835cc4c9a8b106a294ef2789d : SUCCESS in 20m 22s (non-voting)\n- storlets-functional-py3 https://zuul.opendev.org/t/openstack/build/c5d0fae799194481b6f7882bede919f9 : SUCCESS in 18m 30s","accounts_in_message":[],"_revision_number":5},{"id":"f019663c32ed667edbf62ace5294fb9e973f7f4b","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-30 05:53:12.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":5},{"id":"bcbaea6b0ab8ae20ccb1453bbcea1c887aacb057","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-08-30 05:54:32.000000000","message":"Patch Set 5:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/bd4db280e2fa40e28bcf341e186fc9ba : SUCCESS in 59s","accounts_in_message":[],"_revision_number":5}],"current_revision_number":5,"current_revision":"d0f5560488d79defb9706d619095a6509fbb4b81","revisions":{"45688ac885e6726fa245c3683df680ad9c4f54bd":{"kind":"REWORK","_number":1,"created":"2021-08-07 14:00:13.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/27/803827/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/27/803827/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/27/803827/1"}}},"commit":{"parents":[{"commit":"3100965e1fd15ee435c4f0e301bf46f08df83452","subject":"Get rid of SUID binary to restart docker containers","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/3100965e1fd15ee435c4f0e301bf46f08df83452"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 13:55:27.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 13:57:56.000000000","tz":540},"subject":"Run agent processes by the swift user","message":"Run agent processes by the swift user\n\nCurrently agent processes inside storlet containers are started by\nthe root user and inpersonate the swift user. However this is not\nsecure and might allow unexpected usage of the root user.\n\nThis change ensures the agent processes are started  by the swift user\nso that it gets limited access from beginning.\n\nChange-Id: Iea1c6219d2a4f889623a3a0f36698cdb67663f55\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/45688ac885e6726fa245c3683df680ad9c4f54bd"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/45688ac885e6726fa245c3683df680ad9c4f54bd"}]},"parents_data":[{"branch_name":"refs/heads/master","commit_id":"3100965e1fd15ee435c4f0e301bf46f08df83452","is_merged_in_target_branch":false,"change_id":"I8103d4d826f5121e16f67f1ff49102ceecaf8a80","change_number":750104,"patch_set_number":33,"change_status":"MERGED"}],"branch":"refs/heads/master"},"033e70fb18acb872c7196577921d7c931050fa3e":{"kind":"REWORK","_number":2,"created":"2021-08-07 14:51:45.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/27/803827/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/27/803827/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/27/803827/2"}}},"commit":{"parents":[{"commit":"5c45dacbb5bd7175b1eed5b48e9ede8b55c9bb39","subject":"Get rid of SUID binary to restart docker containers","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/5c45dacbb5bd7175b1eed5b48e9ede8b55c9bb39"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 13:55:27.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 14:51:37.000000000","tz":540},"subject":"Run agent processes by the swift user","message":"Run agent processes by the swift user\n\nCurrently agent processes inside storlet containers are started by\nthe root user and inpersonate the swift user. However this is not\nsecure and might allow unexpected usage of the root user.\n\nThis change ensures the agent processes are started  by the swift user\nso that it gets limited access from beginning.\n\nChange-Id: Iea1c6219d2a4f889623a3a0f36698cdb67663f55\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/033e70fb18acb872c7196577921d7c931050fa3e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/033e70fb18acb872c7196577921d7c931050fa3e"}]},"parents_data":[{"branch_name":"refs/heads/master","commit_id":"5c45dacbb5bd7175b1eed5b48e9ede8b55c9bb39","is_merged_in_target_branch":false,"change_id":"I8103d4d826f5121e16f67f1ff49102ceecaf8a80","change_number":750104,"patch_set_number":34,"change_status":"MERGED"}],"branch":"refs/heads/master"},"7bb00280c094282772ee93b5f3a7f10647fdc077":{"kind":"NO_CODE_CHANGE","_number":3,"created":"2021-08-14 09:13:21.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/27/803827/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/27/803827/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/27/803827/3"}}},"commit":{"parents":[{"commit":"5c45dacbb5bd7175b1eed5b48e9ede8b55c9bb39","subject":"Get rid of SUID binary to restart docker containers","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/5c45dacbb5bd7175b1eed5b48e9ede8b55c9bb39"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 13:55:27.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-14 09:12:54.000000000","tz":540},"subject":"Run agent processes by the swift user","message":"Run agent processes by the swift user\n\nCurrently agent processes inside storlet containers are started by\nthe root user and inpersonate the swift user. However this is not\nsecure and might allow unexpected usage of the root user.\n\nThis change ensures the agent processes are started by the swift user\nso that it gets limited access from beginning.\n\nChange-Id: Iea1c6219d2a4f889623a3a0f36698cdb67663f55\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/7bb00280c094282772ee93b5f3a7f10647fdc077"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/7bb00280c094282772ee93b5f3a7f10647fdc077"}]},"parents_data":[{"branch_name":"refs/heads/master","commit_id":"5c45dacbb5bd7175b1eed5b48e9ede8b55c9bb39","is_merged_in_target_branch":false,"change_id":"I8103d4d826f5121e16f67f1ff49102ceecaf8a80","change_number":750104,"patch_set_number":34,"change_status":"MERGED"}],"branch":"refs/heads/master"},"92f92eb8f5b86ca3457f21be2eddaa5d0253db1a":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2021-08-14 09:42:25.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/27/803827/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/27/803827/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/27/803827/4"}}},"commit":{"parents":[{"commit":"85051238fffea68a7bc07f7b9e71b4257dd60713","subject":"Get rid of SUID binary to restart docker containers","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/85051238fffea68a7bc07f7b9e71b4257dd60713"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 13:55:27.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-14 09:37:24.000000000","tz":540},"subject":"Run agent processes by the swift user","message":"Run agent processes by the swift user\n\nCurrently agent processes inside storlet containers are started by\nthe root user and inpersonate the swift user. However this is not\nsecure and might allow unexpected usage of the root user.\n\nThis change ensures the agent processes are started by the swift user\nso that it gets limited access from beginning.\n\nChange-Id: Iea1c6219d2a4f889623a3a0f36698cdb67663f55\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/92f92eb8f5b86ca3457f21be2eddaa5d0253db1a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/92f92eb8f5b86ca3457f21be2eddaa5d0253db1a"}]},"parents_data":[{"branch_name":"refs/heads/master","commit_id":"85051238fffea68a7bc07f7b9e71b4257dd60713","is_merged_in_target_branch":false,"change_id":"I8103d4d826f5121e16f67f1ff49102ceecaf8a80","change_number":750104,"patch_set_number":35,"change_status":"MERGED"}],"branch":"refs/heads/master"},"d0f5560488d79defb9706d619095a6509fbb4b81":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2021-08-19 09:17:18.000000000","uploader":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"ref":"refs/changes/27/803827/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/storlets","ref":"refs/changes/27/803827/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/storlets refs/changes/27/803827/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/storlets refs/changes/27/803827/5"}}},"commit":{"parents":[{"commit":"d60176cc2f7286257ab8d2187329943efec09bb7","subject":"Get rid of SUID binary to restart docker containers","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/d60176cc2f7286257ab8d2187329943efec09bb7"}]}],"author":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-07 13:55:27.000000000","tz":540},"committer":{"name":"Takashi Kajinami","email":"tkajinam@redhat.com","date":"2021-08-19 09:17:18.000000000","tz":0},"subject":"Run agent processes by the swift user","message":"Run agent processes by the swift user\n\nCurrently agent processes inside storlet containers are started by\nthe root user and inpersonate the swift user. However this is not\nsecure and might allow unexpected usage of the root user.\n\nThis change ensures the agent processes are started by the swift user\nso that it gets limited access from beginning.\n\nChange-Id: Iea1c6219d2a4f889623a3a0f36698cdb67663f55\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/d0f5560488d79defb9706d619095a6509fbb4b81"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/storlets/commit/d0f5560488d79defb9706d619095a6509fbb4b81"}]},"parents_data":[{"branch_name":"refs/heads/master","commit_id":"d60176cc2f7286257ab8d2187329943efec09bb7","is_merged_in_target_branch":true,"change_id":"I8103d4d826f5121e16f67f1ff49102ceecaf8a80","change_number":750104,"patch_set_number":36,"change_status":"MERGED"}],"branch":"refs/heads/master","description":"Rebase"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":4608,"name":"Kota Tsuyuzaki","email":"bloodeagle40234@gmail.com","username":"tsuyuzaki-kota"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}