This bug was fixed in the package nova-lxd - 15.0.0~dev44-0ubuntu1
---------------
nova-lxd (15.0.0~dev44-0ubuntu1) zesty; urgency=medium
* New upstream release (LP: #1648056).
-- James Page <james.p...@ubuntu.com> Thu, 15 Dec 2016 11:30:53 +0000
** Changed in: nova-lxd (Ubuntu Zesty)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1648056
Title:
Support LXD multiple sub-uid mapping
Status in OpenStack LXD Charm:
Fix Released
Status in Ubuntu Cloud Archive:
Triaged
Status in Ubuntu Cloud Archive mitaka series:
Triaged
Status in Ubuntu Cloud Archive newton series:
Triaged
Status in Ubuntu Cloud Archive ocata series:
Triaged
Status in nova-lxd:
Fix Released
Status in nova-lxd package in Ubuntu:
Fix Released
Status in nova-lxd source package in Xenial:
In Progress
Status in nova-lxd source package in Yakkety:
In Progress
Status in nova-lxd source package in Zesty:
Fix Released
Bug description:
[Impact]
By default, all LXD containers will run with the same subuid/subgid range,
which means that if a single container is compromised, all containers on the
same host are potentially compromised as well.
[Test Case]
deploy a nova-lxd based openstack cloud
boot multiple instances
they all share the same uid/gid mapping within a host
boot multiple instances with a flavor property of lxd:isolated
all containers have different uid/gid mappings within a host
[Regression Potential]
Minimal in nova-lxd itself; we're just adding an additional extra-spec and
tweaking the container profile if the underlying LXD daemon supports the
isolation feature.
[Original Bug Report]
LXD 2.0.6 supports use of distinct sub-uid/gid for each running container;
nova-lxd has support for this upstream in all stable and master branches so we
should update nova-lxd in >= Xenial to support this feature.
To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-lxd/+bug/1648056/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
