well i do not work on the glance project but i think filign a bug for this would be approiate glance should support iso format images with embedded gpt partions dan has been workign on the https://review.opendev.org/q/topic:%22bp/glance-as-defender%22 spec for the last while and proably know where glance is better then most with regards to doing format enforcement. i dont know if the gpt_safety_checks_nonfatal option added by https://review.opendev.org/c/openstack/glance/+/939243/7/glance/common/confi... for example can help here or if setting require_image_format_match=false is the only option until glance properly supprot iso iamges with gpu partions but a bug for this gap in supprot is proably a good first step. On 13/10/2025 13:49, Eugen Block wrote:
Yep, I'aware of the image conversion, I'm still trying to convince my colleagues to not upload them as qcow2. ;-)
Do you need me to test anything or file a bug report on launchpad?
Zitat von Sean Mooney <smooney@redhat.com>:
On 13/10/2025 12:58, Eugen Block wrote:
Hi Sean,
thanks for your response. There's a general recommendation to use raw images with Ceph backend, we've been following that for 10 years now:
that is ture only for images of block devices which an iso is not. an iso is an image of an optical disk not a block device.
Using QCOW2 for hosting a virtual machine disk is NOT recommended. If you want to boot virtual machines in Ceph (ephemeral backend or boot from volume), please use the raw image format within Glance.
https://docs.ceph.com/en/latest/rbd/rbd-openstack/ The reason for this recommendation in general is if you don't use raw then we have to always convert and copy the image data. ceph has no native support of qcow or iso files.
But the result is the same if I specify iso as disk-format.
openstack image create --file openSUSE-Leap-15.3-DVD-x86_64-Current.iso --public --disk-format iso test-leap153-glance HttpException: 415: Client Error for url: https://controller.domain:9292/v2/images/0b9dfca4-0e78-4524-bf02-201499282b4..., Unsupported Media Type
With the same Exception:
Multiple formats detected: iso,gpt: glance.common.exception.InvalidImageData: Multiple formats detected: iso,gpt
that implies that the glance version you have still has not adopted the implimation of the format inspector form oslo.utils
and has not implented the explcity support for iso file with a GPT partion in the system area
this is related to this CVE https://bugs.launchpad.net/nova/+bug/2059809
i fixed the general iso supprot in https://review.opendev.org/c/openstack/nova/+/923533
after we ported the nova inspector code into oslo we added the ablity to handel iso-with-gpt
https://review.opendev.org/c/openstack/oslo.utils/+/931695
and modifed nova to use that functionatly for iso files expclity https://review.opendev.org/c/openstack/nova/+/931833
glance has a copy of the orginal nova iso support https://review.opendev.org/c/openstack/glance/+/923676
and it was updated to use oslo https://review.opendev.org/c/openstack/glance/+/927291/5
but i do not see any equilvent of https://review.opendev.org/c/openstack/nova/+/931833 in
https://github.com/openstack/glance/blob/1a89edc86b10cbe14e1877d119de409b7b7...
so i think this is a regression in glance from the cve fix.
Thanks, Eugen
Zitat von Sean Mooney <smooney@redhat.com>:
On 13/10/2025 08:50, Eugen Block wrote:
Good morning,
after our recent upgrade to Epoxy we had troubles uploading images to Glance:
openstack image create --disk-format raw --file .../opensuse/Leap-16.0-offline-installer-x86_64.install.iso --progress --public test-ebl [=============================>] 100% HttpException: 415: Client Error for url: http://controller.domain:9292/v2/images/e23d802e-d927-4f34-ae2d-1d6f54d62066..., Unsupported Media Type
so the problem is tha tyou are not uploading ths iso file as an iso
you should be using `openstack image create --disk-format iso ...`
And in the logs this is reported:
2025-10-11 01:16:56.585 65675 ERROR glance.api.v2.image_data [None req-086ad005-a455-471a-bb0d-9dfe5e27eacf 89c5dcc8793d4867bae22d50e51e16b3 90c403f317ee47feb0dad58461e76fb1 - - default default] Multiple formats detected: iso,gpt: glance.common.exception.InvalidImageData: Multiple formats detected: iso,gpt
This is the official openSUSE Leap 16 ISO file.
For now I disabled the check by setting:
[image_format] require_image_format_match = false
you should not do that in general. it is there to prevent potentially malious images form beign uploaded. nova and cider have there own protections but you shoudl instead sepcify the correct format for the image.
the reason its beign detectied as iso,gpt is because the iso format has a reserved space know as the system area where bootloader and partition table metadata can be written to allow the iso to be DD'ed directly onto a flash device or similar and allow booting on hardware that does not supprot cd rom emulation.
The docs state that this is likely a bug:
Disabling this may be required in the case of false match (or mismatch) issues, but those are bugs that should be filed and fixed.
I tried a couple of different ISO files (Ubuntu, openSUSE, incl. older files), all fail with the same error. Uploading raw images seemed to work fine. ISOs are supported file formats according to the docs, could anyone shed some light on this?
There may be docs bog if the docs suggest using raw for iso images as that has never been correct.
But this is not a bug in glance code.
https://docs.openstack.org/glance/latest/admin/manage-images.html#create-an-... correctly calsl out that --disk-formatiso should be used. perhsap the suse? doc you follow is incorrect do you have a linke to the instuction you followed that suggested using raw?
Thanks! Eugen