I really need to get caught up on my ML reading. On 4/11/19 6:40 PM, Thomas Goirand wrote: [snip]
It's just a shame that Glance doesn't show MD5 and not sha512 sums by default...
The Secure Hash Algorithm Support ("multihash") spec [0] for Glance was implemented in Rocky and provides a self-describing secure hash on images (in addition to the 'checksum', which is preserved for backward compatability.) The default is SHA-512. See the Rocky release notes [1] for some implementation details not covered by the spec. The multihash is displayed in the image-list and image-show API responses since Images API v2.7, and in the glanceclient since 2.12.0. The glanceclient has been using the secure hash for download verification since 2.13.0, with a fallback to the md5 'checksum' field if the multihash isn't populated. (It also optionally allows fallback to md5 if the algorithm for the secure hash isn't available to the client; this option is off by default.) See the 2.13.0 release notes [2] for details. [0] https://specs.openstack.org/openstack/glance-specs/specs/rocky/implemented/g... [1] https://docs.openstack.org/releasenotes/glance/rocky.html#new-features [2] https://docs.openstack.org/releasenotes/python-glanceclient/rocky.html#relno...
Cheers,
Thomas Goirand (zigo)