<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=gb2312">

<meta name="Generator" content="Microsoft Word 15 (filtered medium)">

<style><!--

/* Font Definitions */

@font-face

        {font-family:"Cambria Math";

        panose-1:2 4 5 3 5 4 6 3 2 4;}

@font-face

        {font-family:微软雅黑;

        panose-1:2 11 5 3 2 2 4 2 2 4;}

@font-face

        {font-family:"\@微软雅黑";

        panose-1:2 11 5 3 2 2 4 2 2 4;}

/* Style Definitions */

p.MsoNormal, li.MsoNormal, div.MsoNormal

        {margin:0cm;

        margin-bottom:.0001pt;

        text-align:justify;

        text-justify:inter-ideograph;

        font-size:10.5pt;

        font-family:"Calibri",sans-serif;}

a:link, span.MsoHyperlink

        {mso-style-priority:99;

        color:#0563C1;

        text-decoration:underline;}

a:visited, span.MsoHyperlinkFollowed

        {mso-style-priority:99;

        color:#954F72;

        text-decoration:underline;}

p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph

        {mso-style-priority:34;

        margin:0cm;

        margin-bottom:.0001pt;

        text-align:justify;

        text-justify:inter-ideograph;

        text-indent:21.0pt;

        font-size:10.5pt;

        font-family:"Calibri",sans-serif;}

span.EmailStyle17

        {mso-style-type:personal-compose;

        font-family:"Calibri",sans-serif;

        color:windowtext;}

.MsoChpDefault

        {mso-style-type:export-only;

        font-family:"Calibri",sans-serif;}

/* Page Definitions */

@page WordSection1

        {size:612.0pt 792.0pt;

        margin:72.0pt 90.0pt 72.0pt 90.0pt;}

div.WordSection1

        {page:WordSection1;}

/* List Definitions */

@list l0

        {mso-list-id:1642881631;

        mso-list-type:hybrid;

        mso-list-template-ids:-833442540 196752808 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}

@list l0:level1

        {mso-level-tab-stop:none;

        mso-level-number-position:left;

        margin-left:39.0pt;

        text-indent:-18.0pt;}

@list l0:level2

        {mso-level-number-format:alpha-lower;

        mso-level-text:"%2\)";

        mso-level-tab-stop:none;

        mso-level-number-position:left;

        margin-left:63.0pt;

        text-indent:-21.0pt;}

@list l0:level3

        {mso-level-number-format:roman-lower;

        mso-level-tab-stop:none;

        mso-level-number-position:right;

        margin-left:84.0pt;

        text-indent:-21.0pt;}

@list l0:level4

        {mso-level-tab-stop:none;

        mso-level-number-position:left;

        margin-left:105.0pt;

        text-indent:-21.0pt;}

@list l0:level5

        {mso-level-number-format:alpha-lower;

        mso-level-text:"%5\)";

        mso-level-tab-stop:none;

        mso-level-number-position:left;

        margin-left:126.0pt;

        text-indent:-21.0pt;}

@list l0:level6

        {mso-level-number-format:roman-lower;

        mso-level-tab-stop:none;

        mso-level-number-position:right;

        margin-left:147.0pt;

        text-indent:-21.0pt;}

@list l0:level7

        {mso-level-tab-stop:none;

        mso-level-number-position:left;

        margin-left:168.0pt;

        text-indent:-21.0pt;}

@list l0:level8

        {mso-level-number-format:alpha-lower;

        mso-level-text:"%8\)";

        mso-level-tab-stop:none;

        mso-level-number-position:left;

        margin-left:189.0pt;

        text-indent:-21.0pt;}

@list l0:level9

        {mso-level-number-format:roman-lower;

        mso-level-tab-stop:none;

        mso-level-number-position:right;

        margin-left:210.0pt;

        text-indent:-21.0pt;}

ol

        {margin-bottom:0cm;}

ul

        {margin-bottom:0cm;}

--></style><!--[if gte mso 9]><xml>

<o:shapedefaults v:ext="edit" spidmax="1026" />

</xml><![endif]--><!--[if gte mso 9]><xml>

<o:shapelayout v:ext="edit">

<o:idmap v:ext="edit" data="1" />

</o:shapelayout></xml><![endif]-->

</head>

<body lang="ZH-CN" link="#0563C1" vlink="#954F72" style="text-justify-trim:punctuation">

<div class="WordSection1">

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">Hi all:<o:p></o:p></span></p>

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">       About

<a href="https://review.opendev.org/#/c/623120/">https://review.opendev.org/#/c/623120/</a> SPEC, there are two different perspectives, one from Alex and one from SPEC author Jingyu.<o:p></o:p></span></p>

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><o:p> </o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1">

<![if !supportLists]><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">    

</span></span></span><![endif]><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">@Jingyu’s point is add“vnc_password”to the instance’s metadata,“vnc_password”is only provided for libvirtd support. As described in SPEC, the“vnc_password”parameter is populated

 when the instance generates XML, and when show server details that pop the “vnc_password”from nova api to ensure its security. That we can refer to the implementation of "adminPass" to understand this method.<o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">Its advantage is that it will not break the current nova api, you only need to store“vnc_password”in the instance's metadata.<o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">The disadvantage is that“vnc_password”is in the metadata but the user cannot get it.

<o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">In addition, after we are evacuate/rebuild a server that we should reset it’s“vnc_password”, or take out "vnc_password" from the

 original instance and write into the new instance during evacuate/rebuild.<o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><o:p> </o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1">

<![if !supportLists]><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">    

</span></span></span><![endif]><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">@Alex’s suggestion is change the Create Console API, add“vnc_password”as a new request optional parameter to the request body, that when we request create the remote console,

 if the</span><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">“vnc_password”is not None</span><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"> we will reset the server’s vnc passwd, if</span><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">“vnc_password”is

 None, that it will use the novnc password set last time you opened the console.</span><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">The advantage is that it is more simple and convenient than storing "vnc_password" in metadata. When evacuate/rebuild, there is no

 need to consider the problem of "vnc_password" storage, but when we first open the console, we need to set it in the request body the value of "vnc_password".<o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">The disadvantage is that you need to add a new microversion to support this feature, which will break the current nova API (Create

 Console API).<o:p></o:p></span></p>

<p class="MsoListParagraph" style="margin-left:39.0pt;text-indent:0cm"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">In addition, from the working principle of the RFB protocol, nova does not care about the "vnc_password" parameter passed in to obtain

 the Console URL. The verification of the vnc password is the job of the vnc server maintained by libvirtd.<o:p></o:p></span></p>

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><o:p> </o:p></span></p>

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">       We look forward to completing it before the SPEC freeze, and hope to get more feedback, especially from the nova core team.<o:p></o:p></span></p>

<p class="MsoNormal" style="text-indent:21.0pt"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">SPEC link:

<a href="https://review.opendev.org/#/c/623120/">https://review.opendev.org/#/c/623120/</a><o:p></o:p></span></p>

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif"><o:p> </o:p></span></p>

<p class="MsoNormal"><span lang="EN-US" style="font-family:"微软雅黑",sans-serif">brinzhang<o:p></o:p></span></p>

</div>

</body>

</html>