Open Stack

On Fri, May 29, 2015 at 1:48 PM Jeremy Stanley <fungi at yuggoth.org> wrote:

> On 2015-05-28 23:09:41 +0200 (+0200), Thomas Goirand wrote:
> > Also, it is my understanding that infra will not accept to use
> > long-living VMs, and prefer to spawn new instances.
>
> Right, after we run arbitrary user-submitted code on a server, we cease to
> be able to trust it and so immediately delete and replace it.
>

I think is unnecessarily maximalist. Trust is not an all-or-nothing boolean
flag: why can't you trust that server to do more work at the same level of
trust and run another batch of user-submitted code?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150529/2d7ee9cc/attachment.html>