patch: use config drive to mitigate CVE-2024-6174 (#599)

yanksyoon · web-flow · commit 5ff5e0105422 · 2025-07-28T17:24:16.000+08:00
diff --git a/github-runner-manager/src/github_runner_manager/openstack_cloud/openstack_cloud.py b/github-runner-manager/src/github_runner_manager/openstack_cloud/openstack_cloud.py
@@ -293,6 +293,8 @@ def launch_instance(
                     timeout=CREATE_SERVER_TIMEOUT,
                     wait=False,
                     meta=meta,
+                    # 2025/07/24 - This option is set to mitigate CVE-2024-6174
+                    config_drive=True,
                 )
             except openstack.exceptions.ResourceTimeout as err:
                 logger.exception("Timeout creating openstack server %s", instance_id)

Original file line number	Diff line number	Diff line change
`@@ -293,6 +293,8 @@ def launch_instance(`
`293`	`293`	`timeout=CREATE_SERVER_TIMEOUT,`
`294`	`294`	`wait=False,`
`295`	`295`	`meta=meta,`
	`296`	`+ # 2025/07/24 - This option is set to mitigate CVE-2024-6174`
	`297`	`+ config_drive=True,`
`296`	`298`	`)`
`297`	`299`	`except openstack.exceptions.ResourceTimeout as err:`
`298`	`300`	`logger.exception("Timeout creating openstack server %s", instance_id)`