Comment 11 for bug 1847243

Revision history for this message
James Page (james-page) wrote :

Hi Daniel

As a distro all we can do is provide the patched packages to resolve the CVE; yes there are operator actions that need to be undertaken to refresh amphora.

As to how to build amphora images that use the Ubuntu Cloud Archive - take a look at:

  https://snapcraft.io/octavia-diskimage-retrofit

this tool will take a stock Ubuntu cloud image, and overlay the required packages from a configurable openstack release into it from octavia.