[neutron][nova][large scale SIG] Rootwrap daemon and privsep
Arnaud Morin
arnaud.morin at gmail.com
Fri Nov 29 15:56:33 UTC 2019
Adding [large scale SIG], sorry!
--
Arnaud Morin
On 29.11.19 - 15:53, Arnaud Morin wrote:
> Hey,
>
> If I believe both the nova and neutron documentation:
> https://docs.openstack.org/nova/latest/configuration/config.html#DEFAULT.use_rootwrap_daemon
> https://docs.openstack.org/neutron/latest/configuration/neutron.html#agent.root_helper_daemon
>
> At scale, we are supposed to enable the rootwrap-daemon option.
> I have issues enabling that, but before going further on my issue, I'd
> like to understand the difference with privsep daemon.
>
> Is privsep a new daemon which is supposed to replace the rootwrap one?
> Is privsep being launch after rootwrap?
> IS privsep enabled by default, so I should not care about rootwrap at
> all?
>
> I'd like to understand more about that.
> Everything I try to find on popular search engine seems outdated, so if
> someone could give me a hand on finding the good page to understand that,
> I'l love it :p
>
> Cheers,
>
> --
> Arnaud Morin
>
More information about the openstack-discuss
mailing list