[Openstack] [openstack][glance]glance image location

stuart.mclaren at hp.com stuart.mclaren at hp.com
Tue Oct 1 11:47:37 UTC 2013


Hi Srujana,

>From looking at the source I think 'file' is disallowed only for image
uploads using the mechanisms where you specify either a location or copy_from
(ie where you do not include the image bytes in your request). This is
to prevent users accessing arbitrary files on the glance server.

For standard image uploads (where you include the image data in the request)
the 'file' backend should work as is I think.

-Stuart

On Tue, 1 Oct 2013, Srujana C P wrote:

> Hello All,
>
> We have a requirement wherein we want to access stored images as file:// URIs. However, we have noticed that file:// option has been removed for security reasons. It is mentioned in
> usr/lib/python2.6/site-packages/glance/api/v1/images.py .
>
> References :
> Line number : 380
> https://github.com/openstack/glance/blob/master/glance/api/v1/images.py
> Launchpad : bug #942118
>
> We are planning to include a configurable parameter in glance.conf and a flag in openstack python code, which enables the usage of file option according to configurable parameter. Can we go ahead with this ?
>
> Thanks,
> Srujana C P
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.
>
>




More information about the Openstack mailing list