I really need to get caught up on my ML reading.
On 4/11/19 6:40 PM, Thomas Goirand wrote:
[snip]
> It's just a shame that Glance doesn't show MD5 and not sha512 sums by
> default...
The Secure Hash Algorithm Support ("multihash") spec [0] for Glance was
implemented in Rocky and provides a self-describing secure hash on
images (in addition to the 'checksum', which is preserved for backward
compatability.) The default is SHA-512. See the Rocky release notes [1]
for some implementation details not covered by the spec.
The multihash is displayed in the image-list and image-show API
responses since Images API v2.7, and in the glanceclient since 2.12.0.
The glanceclient has been using the secure hash for download
verification since 2.13.0, with a fallback to the md5 'checksum' field
if the multihash isn't populated. (It also optionally allows fallback
to md5 if the algorithm for the secure hash isn't available to the
client; this option is off by default.) See the 2.13.0 release notes
[2] for details.
[0]
https://specs.openstack.org/openstack/glance-specs/specs/rocky/implemented/glance/multihash.html
[1] https://docs.openstack.org/releasenotes/glance/rocky.html#new-features
[2]
https://docs.openstack.org/releasenotes/python-glanceclient/rocky.html#relnotes-2-13-0-stable-rocky
> Cheers,
>
> Thomas Goirand (zigo)