[openstack-dev] [all] [tc] Community Goals for Rocky -- privsep

Thierry Carrez thierry at openstack.org
Thu Jan 11 14:20:00 UTC 2018

Emilien Macchi wrote:
> [...]
> Thierry mentioned privsep migration (done in Nova and Zun). (action,
> ping mikal about it).

It's not "done" in Nova: Mikal planned to migrate all of nova-compute
(arguably the largest service using rootwrap) to privsep during Queens,
but AFAICT it's still work in progress.

Other projects like cinder and neutron are using it.

If support in Nova is almost there, it would make a great Queens goal to
get rid of the last rootwrap leftovers and deprecate it.

Mikal: could you give us a quick update of where you are ?
Anyone interested in championing that as a goal?

Thierry Carrez (ttx)

More information about the OpenStack-dev mailing list