<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
I agree with Fang that controlling image purge functionality with optional parameters offers the flexibility needed to balance performance and security concerns.
<div><br>
</div>
<div>Perhaps there are two API calls where we could implement such an option:</div>
<div><br>
</div>
<div>/v1/container/post (create)</div>
<div>/vi/container/delete</div>
<div><br>
</div>
<div>That way you could default to either “secure” or “performance”, and optionally select the alternate depending on the value of the parameter you supply when the API is called.</div>
<div><br>
</div>
<div>Note that Docker (unless forced) will not allow the deletion of a container image until all containers created from that image are also deleted. We will want to be sure we have adequate tests to be sure that related uses are tested, and have exceptions
that raise actionable error messages when raised. Let’s not have an “unknown exception” when I try to delete a container, and I get an error when it tries to delete the container image, but can’t because there is another container running that used the same
image.</div>
<div><br>
</div>
<div>Finally, we might also want to allow a user to specify whether untagged parents should be pruned or not (ie: docker rmi —no-prune=true)</div>
<div><br>
</div>
<div>Adrian</div>
<div><br>
<div>
<div>On Apr 14, 2015, at 2:31 AM, Fang Fenghua <<a href="mailto:449171342@qq.com">449171342@qq.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div>Indeed image pull be time-consuming. </div>
<div>Is it much better to supply a magnum api let end-user can clean image that not used?</div>
<div>
<div>Clean or not clean is decide by the end-user. Or we can supply a method let
</div>
<div>end-user can decide whether or not clean image.</div>
</div>
<div> </div>
<div>Date: Mon, 13 Apr 2015 14:51:05 +0800<br>
From: "=?gb<span style="Z-INDEX: 1; BORDER-BOTTOM: #ccc 1px dashed" t="6" data="18030">18030</span>?B?NDQ5MTcxMzQy?=" <<a href="mailto:449171342@qq.com" target="_blank"><font color="#1e5494">449171342@qq<wbr>.com</font></a>><br>
To: "=?gb<span style="Z-INDEX: 1; BORDER-BOTTOM: #ccc 1px dashed" t="6" data="18030">18030</span>?B?b3BlbnN0YWNrLWRldg==?="<br>
<<a href="mailto:openstack-dev@lists.openstack.org" target="_blank"><font color="#1e5494">openstack-de<wbr>v@lists.open<wbr>stack.org</font></a>><br>
Subject: [openstack-dev] ?magnum?About clean none use container imag<br>
Message-ID: <<a href="mailto:tencent_1B594E50513691B07D1B8F9E@qq.com" target="_blank"><font color="#1e5494">tencent_1B59<wbr>4E50513691B0<wbr>7D1B8F9E@qq.<wbr>com</font></a>><br>
Content-Type: text/plain; charset="gb<span style="Z-INDEX: 1; BORDER-BOTTOM: #ccc 1px dashed" t="6" data="18030">18030</span>"<br>
<br>
>From now on magnum had container create and delete api .The container create api will pull docker image from docker-registry.But the container delete api didn't delete image.It will let the image remain even though didn't had container use it.Is it much better
we can clear the image in someway?<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.openstack.org/pipermail/openstack-dev/attachments/20150413/7072441b/attachment-0001.html%3E" target="_blank"><font color="#1e5494">http://lists<wbr>.openstack.o<wbr>rg/pipermail<wbr>/openstack-d<wbr>ev/attachmen<wbr>ts/20150413/<wbr>7072441b/att<wbr>achment-0001<wbr>.html></font></a>;<br>
<br>
------------------------------<br>
<br>
Message: 26<br>
Date: Mon, 13 Apr 2015 15:09:18 +0800<br>
From: Jay Lau <<a href="mailto:jay.lau.513@gmail.com" target="_blank"><font color="#1e5494">jay.lau.513@<wbr>gmail.com</font></a>><br>
To: "OpenStack Development Mailing List (not for usage questions)"<br>
<<a href="mailto:openstack-dev@lists.openstack.org" target="_blank"><font color="#1e5494">openstack-de<wbr>v@lists.open<wbr>stack.org</font></a>><br>
Subject: Re: [openstack-dev] ?magnum?About clean none use container<br>
imag<br>
Message-ID:<br>
<<a href="mailto:CAFyztAG6EOd97Ho5zir7U0Gmywq=J=AErH9WJAi-2yswx2E5Ng@mail.gmail.com" target="_blank"><font color="#1e5494">CAFyztAG6EOd<wbr>97Ho5zir7U0G<wbr>mywq=J=AErH9<wbr>WJAi-2yswx2E<wbr>5Ng@mail.gma<wbr>il.com</font></a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Interesting topic, pulling image is time consuming, so someone might not<br>
want to delete the container; But for some cases, if the image was not<br>
used, then it is better to remove them from disk to release space. You may<br>
want to send out an email to [openstack][magnum] ML to get more feedback ;-)<br>
<br>
<span style="BORDER-BOTTOM: #ccc 1px dashed" t="5" times=" 14:51">2015-04-13</span> 14:51 GMT+08:00
<span style="Z-INDEX: 1; BORDER-BOTTOM: #ccc 1px dashed" t="6" data="449171342">449171342</span> <<a href="mailto:449171342@qq.com" target="_blank"><font color="#1e5494">449171342@qq<wbr>.com</font></a>>:<br>
<br>
><br>
><br>
> From now on magnum had container create and delete api .The container create api will pull docker image from docker-registry.But the container delete api didn't delete image.It will let the image remain even though didn't had container use it.Is it much
better we can clear the image in someway?<br>
> __________________________________________________________________________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org" target="_blank">
<font color="#1e5494">OpenStack-de<wbr>v-request@li<wbr>sts.openstac<wbr>k.org</font></a>?subject:unsubscribe<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">
<font color="#1e5494">http://lists<wbr>.openstack.o<wbr>rg/cgi-bin/m<wbr>ailman/listi<wbr>nfo/openstac<wbr>k-dev</font></a><br>
><br>
><br>
<br>
<br>
-- <br>
Thanks,<br>
<br>
Jay Lau (Guangya Liu)<br>
</div>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org">OpenStack-dev-request@lists.openstack.org</a>?subject:unsubscribe<br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</blockquote>
</div>
<br>
</div>
</body>
</html>