Open Stack

Emilien Macchi wrote:
> [...]
> Thierry mentioned privsep migration (done in Nova and Zun). (action,
> ping mikal about it).

It's not "done" in Nova: Mikal planned to migrate all of nova-compute
(arguably the largest service using rootwrap) to privsep during Queens,
but AFAICT it's still work in progress.

Other projects like cinder and neutron are using it.

If support in Nova is almost there, it would make a great Queens goal to
get rid of the last rootwrap leftovers and deprecate it.

Mikal: could you give us a quick update of where you are ?
Anyone interested in championing that as a goal?

-- 
Thierry Carrez (ttx)