diff options
| author | Dmitry Tantsur <dtantsur@protonmail.com> | 2023-05-04 09:26:10 +0200 |
|---|---|---|
| committer | Dmitry Tantsur <dtantsur@protonmail.com> | 2023-05-04 09:26:10 +0200 |
| commit | c1c5537ba23b791e5041230db289bd5cd226ac7c (patch) | |
| tree | ec88f6c16eb2be02e2ca015fb917a33859eccb4e /releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml | |
| parent | c05fdf790c3cab6a18ca5b264e258c5c0016918d (diff) | |
| download | ironic-python-agent-c1c5537ba23b791e5041230db289bd5cd226ac7c.tar.gz | |
Revert disabling MD5 checksums
This was a significant breaking change that was landed despite explicit
disagreement by some community members (myself included). It has already
resulted in an accidental Ironic CI breakage, has broken Bifrost and has
a potential of breaking Metal3. In case of Metal3, MD5 support is a part
of its public API.
While MD5 is a potential security hazard, I don't see the need to hurry
this change without giving the community time to prepare. This change
reverts the new option md5_enabled to True.
Change-Id: I32b291ea162e8eb22429712c15cb5b225a6daafd
Diffstat (limited to 'releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml')
| -rw-r--r-- | releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml | 11 |
1 files changed, 2 insertions, 9 deletions
diff --git a/releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml b/releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml index 7fcacac4..5c9cfd05 100644 --- a/releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml +++ b/releasenotes/notes/disable-md5-image-checksum-7def176928d36e75.yaml @@ -6,14 +6,7 @@ features: (SHA-2) and SHA256 (SHA-2) checksums to be identified and utilized without an explicit declaration of the checksum type utilizing the ``os_hash_algo`` value. -upgrade: - - | - MD5 support for checksums have been disabled by default. This may result - in rebulids or manual deploy attempts to fail if no updated checksum has - been supplied for the ``os_hash_value`` and ``os_hash_algo`` settings. - To re-enable MD5 support, you may utilize a the ``[DEFAULT]md5_enabled`` - setting. deprecations: - | - Support for MD5 checksums have been deprecated and disabled by default. - Support for MD5 checksums will be removed after the 2024 Release. + Support for MD5 checksums have been deprecated and will be removed after + the 2024 Release. |