Attachment 935418 Details for Bug 1130213 – spec patch

[patch] spec patch

0001-exclude-default-port-35357-from-the-ephemeral-port-r.patch (text/plain), 2.90 KB, created by Alan Pevec on 2014-09-08 17:35:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alan Pevec

Created: 2014-09-08 17:35:33 UTC

Size: 2.90 KB

patch

obsolete

>From 0dfafbfde8c6c0ea32c5f4d961145a5fc424e9ca Mon Sep 17 00:00:00 2001
>From: Alan Pevec <alan.pevec@redhat.com>
>Date: Wed, 25 Jun 2014 01:00:34 +0200
>Subject: [PATCH] exclude default port 35357 from the ephemeral port range
>
>https://review.openstack.org/#/c/58013/8/doc/source/configuration.rst
>
>Resolves: rhbz#1130213
>---
> openstack-keystone.spec   | 9 ++++++++-
> openstack-keystone.sysctl | 3 +++
> 2 files changed, 11 insertions(+), 1 deletion(-)
> create mode 100644 openstack-keystone.sysctl
>
>diff --git a/openstack-keystone.spec b/openstack-keystone.spec
>index 6787797..8990ef1 100644
>--- a/openstack-keystone.spec
>+++ b/openstack-keystone.spec
>@@ -7,7 +7,7 @@
> 
> Name:           openstack-keystone
> Version:        2014.1.2.1
>-Release:        1%{?dist}
>+Release:        2%{?dist}
> Summary:        OpenStack Identity Service
> 
> License:        ASL 2.0
>@@ -15,6 +15,7 @@ URL:            http://keystone.openstack.org/
> Source0:        http://launchpad.net/keystone/%{release_name}/%{version}/+download/keystone-%{version}.tar.gz
> Source1:        openstack-keystone.logrotate
> Source2:        openstack-keystone.service
>+Source3:        openstack-keystone.sysctl
> Source5:        openstack-keystone-sample-data
> Source20:       keystone-dist.conf
> 
>@@ -133,6 +134,8 @@ install -p -D -m 640 etc/default_catalog.templates %{buildroot}%{_sysconfdir}/ke
> install -p -D -m 640 etc/policy.json %{buildroot}%{_sysconfdir}/keystone/policy.json
> install -p -D -m 644 %{SOURCE1} %{buildroot}%{_sysconfdir}/logrotate.d/openstack-keystone
> install -p -D -m 644 %{SOURCE2} %{buildroot}%{_unitdir}/openstack-keystone.service
>+install -d -m 755 %{buildroot}%{_prefix}/lib/sysctl.d
>+install -p -D -m 644 %{SOURCE3} %{buildroot}%{_prefix}/lib/sysctl.d/openstack-keystone.conf
> # Install sample data script.
> install -p -D -m 755 tools/sample_data.sh %{buildroot}%{_datadir}/keystone/sample_data.sh
> install -p -D -m 755 %{SOURCE5} %{buildroot}%{_bindir}/openstack-keystone-sample-data
>@@ -209,6 +212,7 @@ fi
> %config(noreplace) %{_sysconfdir}/logrotate.d/openstack-keystone
> %dir %attr(-, keystone, keystone) %{_sharedstatedir}/keystone
> %dir %attr(0750, keystone, keystone) %{_localstatedir}/log/keystone
>+%{_prefix}/lib/sysctl.d/openstack-keystone.conf
> 
> %files -n python-keystone
> %defattr(-,root,root,-)
>@@ -222,6 +226,9 @@ fi
> %endif
> 
> %changelog
>+* Mon Sep 08 2014 Alan Pevec <apevec@redhat.com> 2014.1.2.1-2
>+- exclude default port 35357 from the ephemeral port range
>+
> * Sat Aug 09 2014 Alan Pevec <apevec@redhat.com> 2014.1.2.1-1
> - updated to stable icehouse 2014.1.2.1 release
> 
>diff --git a/openstack-keystone.sysctl b/openstack-keystone.sysctl
>new file mode 100644
>index 0000000..682c160
>--- /dev/null
>+++ b/openstack-keystone.sysctl
>@@ -0,0 +1,3 @@
>+# By default, keystone starts a service on IANA-assigned port 35357
>+# http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
>+net.ipv4.ip_local_reserved_ports = 35357
>-- 
>1.9.3
>

Actions: View | Diff

Attachments on bug 1130213: 935418