[openstack-dev] [kolla] cinder-api image doesn't run as a cinder user.

Erlon Cruz sombrafam at gmail.com
Mon Jun 11 12:36:14 UTC 2018


Hi Eduardo,

Just for curiosity, do you know the motivation why many OS services were
moved to run on apache instead of just listen? Any reference about that?

Erlon

Em seg, 11 de jun de 2018 às 06:02, Eduardo Gonzalez <dabarren at gmail.com>
escreveu:

> Hi,
>
> From Pike cinder-api only runs as a wsgi process and container has been
> migrated into an apache process, currenty we run apache as root user and
> not as service's user.
>
> Regards
>
>
>
> 2018-06-11 10:46 GMT+02:00 Jae Sang Lee <hyangii at gmail.com>:
>
>> Hi, stackers.
>>
>> We are distributing OpenStack to kubernetes using the docker image
>> generated by kolla. I recently upgraded from ocata to pike and found
>> that the cinder-api container does not run as a cinder user.
>> So it does not pass our unit test.
>>
>> This seems to have been fixed in the following code,
>>
>> https://review.openstack.org/#/c/463535/2/docker/cinder/cinder-api/Dockerfile.j2,unified
>>
>> Is there a reason why it should not be run as a cinder user? Other
>> services except cinder-api (cinder-scheduler, cinder-volume,
>> cinder-backup) are all running as cinder user. If this is a simple bug, try
>> to fix it.
>>
>> Thanks.
>>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20180611/133930fe/attachment.html>


More information about the OpenStack-dev mailing list