[Openstack] [Quantum] Removing quantum-rootwrap

Gary Kotton gkotton at redhat.com
Mon Aug 13 06:19:13 UTC 2012


On 08/13/2012 08:42 AM, balaji patnala wrote:
> Hello Thierry,
>
> Can we download Folsom branch codebase for understanding Quantum and 
> other changes in Folsom release?

You can get the code at git://github.com/openstack/quantum.git.
If you would like to see the status of things regarding F-3 then please 
look at https://launchpad.net/quantum/.

The guys in the community have done some great work over the last few weeks!

> Please give us your comments,experience and known issues.
>
> Thanks in advance.
>
> -balaji
>
> On Wed, Aug 8, 2012 at 7:01 PM, Thierry Carrez <thierry at openstack.org 
> <mailto:thierry at openstack.org>> wrote:
>
>     Hi everyone,
>
>     Quantum currently contains bin/quantum-rootwrap, a copy of
>     nova-rootwrap
>     supposed to control its privilege escalation to run commands as root.
>
>     However quantum-rootwrap is currently non-functional, missing a lot of
>     filter definitions that are necessary for it to work correctly.
>     Quantum
>     is generally run with root_helper=sudo and a wildcard sudoers
>     file. That
>     means Quantum is not ready to deprecate in Folsom (and remove in
>     Grizzly) its ability to run with root_helper=sudo, like Nova and
>     Cinder do.
>
>     I discussed this with Dan, and it appears that the sanest approach
>     would
>     be to remove quantum-rootwrap from Quantum and only support
>     root_helper=sudo (the only option that works). I suspect nobody is
>     actually using quantum-rootwrap right now anyway, given how broken it
>     seems to be. For the first official release of Quantum as an OpenStack
>     core project, I would prefer not to ship half-working options :)
>
>     Quantum would then wait for rootwrap to move to openstack-common
>     (should
>     be done in Grizzly) to reconsider using it.
>
>     Let me know if any of you see issues with that approach.
>     (posted to the general list to get the widest feedback).
>
>     --
>     Thierry Carrez (ttx)
>     Release Manager, OpenStack
>
>     _______________________________________________
>     Mailing list: https://launchpad.net/~openstack
>     <https://launchpad.net/%7Eopenstack>
>     Post to     : openstack at lists.launchpad.net
>     <mailto:openstack at lists.launchpad.net>
>     Unsubscribe : https://launchpad.net/~openstack
>     <https://launchpad.net/%7Eopenstack>
>     More help   : https://help.launchpad.net/ListHelp
>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack at lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20120813/df66c1e7/attachment.html>


More information about the Openstack mailing list