[openstack-dev] [glance] Option to skip deleting images in use?

Nikhil Komawar nikhil.komawar at RACKSPACE.COM
Tue Dec 16 22:56:22 UTC 2014


Hi Chris,

Apologies for not having heard your use case completely. From the description as well as the information you've provided; it is my recommendation to use a protected property in Glance for the Image entity that is in use. You can then use it in the service of your choice (Nova, Cinder) for not deleting the same. It is that service which shall have more accurate information as well as be source of truth for the in-use state of the Image entity. Making a call out to different service (except backend stores) is out of the scope of Glance. (Nova is the client of Glance and we would like to avoid the circular dependency mess there!)

Hope it helps. Please let me know if you need more information.

Thanks and Regards,
-Nikhil
________________________________
From: Chris St. Pierre [chris.a.st.pierre at gmail.com]
Sent: Tuesday, December 16, 2014 5:12 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [glance] Option to skip deleting images in use?

No, I'm looking to prevent images that are in use from being deleted. "In use" and "protected" are disjoint sets.

On Tue, Dec 16, 2014 at 3:36 PM, Fei Long Wang <feilong at catalyst.net.nz<mailto:feilong at catalyst.net.nz>> wrote:
Hi Chris,

Are you looking for the 'protected' attribute? You can mark an image with 'protected'=True, then the image can't be deleted by accidentally.

On 17/12/14 10:23, Chris St. Pierre wrote:
The goal here is protection against deletion of in-use images, not a workaround that can be executed by an admin. For instance, someone without admin still can't do that, and someone with a fat finger can still delete images in use.

"Don't lose your data" is a fine workaround for taking backups, but most of us take backups anyway. Same deal.

On Tue, Dec 16, 2014 at 2:30 PM, Jay Pipes <jaypipes at gmail.com<mailto:jaypipes at gmail.com>> wrote:
Just set the images to is_public=False as an admin and they'll disappear from everyone except the admin.

-jay


On 12/16/2014 03:09 PM, Chris St. Pierre wrote:
Currently, with delay_delete enabled, the Glance scrubber happily
deletes whatever images you ask it to. That includes images that are
currently in use by Nova guests, which can really hose things. It'd be
nice to have an option to tell the scrubber to skip deletion of images
that are currently in use, which is fairly trivial to check for and
provides a nice measure of protection.

Without delay_delete enabled, checking for images in use likely takes
too much time, so this would be limited to just images that are scrubbed
with delay_delete.

I wanted to bring this up here before I go to the trouble of writing a
spec for it, particularly since it doesn't appear that glance currently
talks to Nova as a client at all. Is this something that folks would be
interested in having? Thanks!

--
Chris St. Pierre


_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org<mailto:OpenStack-dev at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org<mailto:OpenStack-dev at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



--
Chris St. Pierre



_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org<mailto:OpenStack-dev at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



--
Cheers & Best regards,
Fei Long Wang (王飞龙)
--------------------------------------------------------------------------
Senior Cloud Software Engineer
Tel: +64-48032246<tel:%2B64-48032246>
Email: flwang at catalyst.net.nz<mailto:flwang at catalyst.net.nz>
Catalyst IT Limited
Level 6, Catalyst House, 150 Willis Street, Wellington
--------------------------------------------------------------------------

_______________________________________________
OpenStack-dev mailing list
OpenStack-dev at lists.openstack.org<mailto:OpenStack-dev at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Chris St. Pierre
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20141216/72144e51/attachment.html>


More information about the OpenStack-dev mailing list