This is about review:

1 line, can be controversial

Its purpose is to add the possibility not to use libguestfs for data injection in nova, even when installed.

Not discussing about the fact that libguestfs should be preferred over fuse mounts for data injection as much as possible because mounts are more subject to causing security issues (and already have in the past nova releases).

However, there are a lot of potential cases when libguestfs won't be usable for data injection

This was the case here (fixed):

I entcountered a similar case more recently on powerkvm 2.1.0 (defect with the libguestfs)

So just saying it could be good adding a simple config flag (set to True by default, to keep the current behaviour untouched) to force nova not using libguestfs without having to uninstall it and thus prevent other users on the host from using it.



OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

Reply via email to