[glance] [ops] Issue sharing an image with another project (something related to get_image_location)

Massimo Sgaravatto massimo.sgaravatto at gmail.com
Thu May 2 07:03:09 UTC 2019


Hi Brian

Thanks for your
A couple of answers in-line:

On Wed, May 1, 2019 at 3:25 PM Brian Rosmaita <rosmaita.fossdev at gmail.com>
wrote:

> (Apologies for top-posting.)
>
> Hi Massimo,
>
> Two things:
>
> (1) Please file a glance bug for this.  I didn't think the sharing code
> would touch image locations, but apparently it does.  In the bug report,
> please include your policy settings for *_location and *_member, and
> also the output of an image-show call for the image you're trying to
> share, and the log extract.
>

Sure: I will


>
> (2) With the policy settings you have for *_location, I don't think that
> any regular (non-admin) user will be able to download an image or boot
> an instance from an image, so you should verify those operations.


Actually it works

E.g.:
$ openstack image show 7ebe160d-5498-477b-aa2e-94a6d962a075
+------------------+------------------------------------------------------------------------------+
| Field            | Value
                      |
+------------------+------------------------------------------------------------------------------+
| checksum         | b4548edf0bc476c50c083fb88717d92f
                       |
| container_format | bare
                       |
| created_at       | 2018-01-15T16:14:35Z
                       |
| disk_format      | qcow2
                      |
| file             | /v2/images/7ebe160d-5498-477b-aa2e-94a6d962a075/file
                       |
| id               | 7ebe160d-5498-477b-aa2e-94a6d962a075
                       |
| min_disk         | 3
                      |
| min_ram          | 512
                      |
| name             | CentOS7
                      |
| owner            | 56c3f5c047e74a78a71438c4412e6e13
                       |
| properties       | locations='[]', os_hash_algo='None',
os_hash_value='None', os_hidden='False' |
| protected        | False
                      |
| schema           | /v2/schemas/image
                      |
| size             | 877985792
                      |
| status           | active
                       |
| tags             |
                      |
| updated_at       | 2018-01-15T16:21:23Z
                       |
| virtual_size     | None
                       |
| visibility       | public
                       |
+------------------+------------------------------------------------------------------------------+

So locations are not showed, as expected, since I am a 'regular'
(non-admin) user

But I able to download the image:

$ openstack image save --file ~/CentOS7.qcow2
7ebe160d-5498-477b-aa2e-94a6d962a075

$ ls -l ~/CentOS7.qcow2
-rw-r--r-- 1 sgaravat utenti 877985792 May  2 08:54
/home/sgaravat/CentOS7.qcow2

$ md5sum ~/CentOS7.qcow2
b4548edf0bc476c50c083fb88717d92f  /home/sgaravat/CentOS7.qcow2


I am also able to launch an instance using this image

Thanks, Massimo




>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190502/b89764f2/attachment-0001.html>


More information about the openstack-discuss mailing list