From: j...@redhat.com
Date: Tue, 14 Aug 2012 20:23:52 -0400
From: Dan Wendlandt d...@nicira.com
Date: Tue, 14 Aug 2012 15:22:31 -0700
jrd, my feeling is that we'd need a patch for this under review this
week to understand the
j...@redhat.com wrote:
Update: Dan and ttx, Gary has uploaded a patch set addressing the fix
of quantum-rootwrap for me, until I finish getting my credentials
sorted out so that I can push them myself.
See https://review.openstack.org/11472
There's a couple of review comments, which I
Dan Wendlandt wrote:
On Mon, Aug 13, 2012 at 12:51 PM, Vishvananda Ishaya
vishvana...@gmail.com mailto:vishvana...@gmail.com wrote:
This is up to dan, I suppose, but the rootwrap stuff seems like
something worth granting a ffe to…
I wasn't going to mention it, as the urgency of
On Tue, Aug 14, 2012 at 1:54 AM, Thierry Carrez thie...@openstack.orgwrote:
Dan Wendlandt wrote:
On Mon, Aug 13, 2012 at 12:51 PM, Vishvananda Ishaya
vishvana...@gmail.com mailto:vishvana...@gmail.com wrote:
This is up to dan, I suppose, but the rootwrap stuff seems like
From: Dan Wendlandt d...@nicira.com
Date: Tue, 14 Aug 2012 15:22:31 -0700
On Tue, Aug 14, 2012 at 1:54 AM, Thierry Carrez thie...@openstack.org
wrote:
Dan Wendlandt wrote:
On Mon, Aug 13, 2012 at 12:51 PM, Vishvananda Ishaya
vishvana...@gmail.com
On 08/13/2012 08:42 AM, balaji patnala wrote:
Hello Thierry,
Can we download Folsom branch codebase for understanding Quantum and
other changes in Folsom release?
You can get the code at git://github.com/openstack/quantum.git.
If you would like to see the status of things regarding F-3 then
From: j...@redhat.com
Date: Fri, 10 Aug 2012 11:52:49 -0400
[...]
Very much, thanks. More news as it happens...
Here's where I've got to so far
I've ported/transliterated code from nova/cinder to manage rootwrap
filter defs the same way in quantum.
I've plowed through most of
This is up to dan, I suppose, but the rootwrap stuff seems like something worth
granting a ffe to…
Vish
On Aug 13, 2012, at 11:49 AM, j...@redhat.com wrote:
From: j...@redhat.com
Date: Fri, 10 Aug 2012 11:52:49 -0400
[...]
Very much, thanks. More news as it happens...
Here's
On Mon, Aug 13, 2012 at 12:51 PM, Vishvananda Ishaya
vishvana...@gmail.comwrote:
This is up to dan, I suppose, but the rootwrap stuff seems like something
worth granting a ffe to…
I wasn't going to mention it, as the urgency of a nearby deadline can be
helpful :)
But yes, I'd grant an ffe to
Hello Thierry,
Can we download Folsom branch codebase for understanding Quantum and other
changes in Folsom release?
Please give us your comments,experience and known issues.
Thanks in advance.
-balaji
On Wed, Aug 8, 2012 at 7:01 PM, Thierry Carrez thie...@openstack.orgwrote:
Hi everyone,
From: Thierry Carrez thie...@openstack.org
Date: Thu, 09 Aug 2012 16:32:23 +0200
[...]
My goal is by end of today , or tomorrow morning latest, to have at
least a reasonably complete understanding of the changes necessary to
get the quantum-rootwrap facility up to
From: Thierry Carrez thie...@openstack.org
Date: Fri, 10 Aug 2012 17:38:52 +0200
j...@redhat.com wrote:
Apologies for the not-very coherent description. Please let me know
if you think I'm off in the weeds or missing important bits.
One other thing I spotted
j...@redhat.com wrote:
From: Dan Wendlandt d...@nicira.com
If someone (Bob?) has the immediate cycles to make rootwrap work in Folsom
with low to medium
risk of disruption, I'd be open to exploring that, even if it meant
inconsistent usage in quantum
vs. nova/cinder.
Hi Dan. I've
From: Thierry Carrez thie...@openstack.org
Date: Thu, 09 Aug 2012 10:34:17 +0200
j...@redhat.com wrote:
From: Dan Wendlandt d...@nicira.com
If someone (Bob?) has the immediate cycles to make rootwrap work in
Folsom with low to medium
risk of disruption, I'd be
j...@redhat.com wrote:
* Switch to rootwrap_config and deprecate root_helper
This would fully align quantum-rootwrap with nova-rootwrap. However I'm
not sure it's reasonable to deprecate root_helper=sudo in Folsom, given
how little tested quantum-rootwrap seems to be on Folsom.
From: Thierry Carrez thie...@openstack.org
Date: Thu, 09 Aug 2012 16:32:23 +0200
j...@redhat.com wrote:
* Switch to rootwrap_config and deprecate root_helper
This would fully align quantum-rootwrap with nova-rootwrap. However
I'm
not sure it's reasonable
On 08/09/2012 10:32 AM, Thierry Carrez wrote:
j...@redhat.com wrote:
* Switch to rootwrap_config and deprecate root_helper
This would fully align quantum-rootwrap with nova-rootwrap. However I'm
not sure it's reasonable to deprecate root_helper=sudo in Folsom, given
how little
On Aug 9, 2012, at 8:13 AM, Robert Kukura rkuk...@redhat.com wrote:
We should immediately change devstack to stop running the quantum agents
as root, so at least the root_helper=sudo functionality is really being
used.
It looks like devstack does configure nova with the new
Hi everyone,
Quantum currently contains bin/quantum-rootwrap, a copy of nova-rootwrap
supposed to control its privilege escalation to run commands as root.
However quantum-rootwrap is currently non-functional, missing a lot of
filter definitions that are necessary for it to work correctly.
Hi,
How much work would would be needed to get this added in quantum?
Thanks
chuck
On Wed, 08 Aug 2012 15:31:59 +0200
Thierry Carrez thie...@openstack.org wrote:
Hi everyone,
Quantum currently contains bin/quantum-rootwrap, a copy of
nova-rootwrap supposed to control its privilege
On 08/08/2012 09:31 AM, Thierry Carrez wrote:
Hi everyone,
Quantum currently contains bin/quantum-rootwrap, a copy of nova-rootwrap
supposed to control its privilege escalation to run commands as root.
However quantum-rootwrap is currently non-functional, missing a lot of
filter
Robert Kukura wrote:
On 08/08/2012 09:31 AM, Thierry Carrez wrote:
Quantum currently contains bin/quantum-rootwrap, a copy of nova-rootwrap
supposed to control its privilege escalation to run commands as root.
However quantum-rootwrap is currently non-functional, missing a lot of
filter
On Wed, Aug 8, 2012 at 9:22 AM, Thierry Carrez thie...@openstack.orgwrote:
Robert Kukura wrote:
On 08/08/2012 09:31 AM, Thierry Carrez wrote:
Quantum currently contains bin/quantum-rootwrap, a copy of nova-rootwrap
supposed to control its privilege escalation to run commands as root.
From: Dan Wendlandt d...@nicira.com
Date: Wed, 8 Aug 2012 10:28:37 -0700
On Wed, Aug 8, 2012 at 9:22 AM, Thierry Carrez thie...@openstack.org
wrote:
Robert Kukura wrote:
On 08/08/2012 09:31 AM, Thierry Carrez wrote:
Quantum currently contains
On Wed, Aug 8, 2012 at 1:20 PM, j...@redhat.com wrote:
If someone (Bob?) has the immediate cycles to make rootwrap work in
Folsom with low to medium
risk of disruption, I'd be open to exploring that, even if it meant
inconsistent usage in quantum
vs. nova/cinder.
Hi Dan.
25 matches
Mail list logo