[glance] [ops] Issue sharing an image with another project (something related to get_image_location)
Massimo Sgaravatto
massimo.sgaravatto at gmail.com
Thu May 2 07:03:09 UTC 2019
Hi Brian
Thanks for your
A couple of answers in-line:
On Wed, May 1, 2019 at 3:25 PM Brian Rosmaita <rosmaita.fossdev at gmail.com>
wrote:
> (Apologies for top-posting.)
>
> Hi Massimo,
>
> Two things:
>
> (1) Please file a glance bug for this. I didn't think the sharing code
> would touch image locations, but apparently it does. In the bug report,
> please include your policy settings for *_location and *_member, and
> also the output of an image-show call for the image you're trying to
> share, and the log extract.
>
Sure: I will
>
> (2) With the policy settings you have for *_location, I don't think that
> any regular (non-admin) user will be able to download an image or boot
> an instance from an image, so you should verify those operations.
Actually it works
E.g.:
$ openstack image show 7ebe160d-5498-477b-aa2e-94a6d962a075
+------------------+------------------------------------------------------------------------------+
| Field | Value
|
+------------------+------------------------------------------------------------------------------+
| checksum | b4548edf0bc476c50c083fb88717d92f
|
| container_format | bare
|
| created_at | 2018-01-15T16:14:35Z
|
| disk_format | qcow2
|
| file | /v2/images/7ebe160d-5498-477b-aa2e-94a6d962a075/file
|
| id | 7ebe160d-5498-477b-aa2e-94a6d962a075
|
| min_disk | 3
|
| min_ram | 512
|
| name | CentOS7
|
| owner | 56c3f5c047e74a78a71438c4412e6e13
|
| properties | locations='[]', os_hash_algo='None',
os_hash_value='None', os_hidden='False' |
| protected | False
|
| schema | /v2/schemas/image
|
| size | 877985792
|
| status | active
|
| tags |
|
| updated_at | 2018-01-15T16:21:23Z
|
| virtual_size | None
|
| visibility | public
|
+------------------+------------------------------------------------------------------------------+
So locations are not showed, as expected, since I am a 'regular'
(non-admin) user
But I able to download the image:
$ openstack image save --file ~/CentOS7.qcow2
7ebe160d-5498-477b-aa2e-94a6d962a075
$ ls -l ~/CentOS7.qcow2
-rw-r--r-- 1 sgaravat utenti 877985792 May 2 08:54
/home/sgaravat/CentOS7.qcow2
$ md5sum ~/CentOS7.qcow2
b4548edf0bc476c50c083fb88717d92f /home/sgaravat/CentOS7.qcow2
I am also able to launch an instance using this image
Thanks, Massimo
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20190502/b89764f2/attachment-0001.html>
More information about the openstack-discuss
mailing list