namsral commented on issue #11163:
URL: https://github.com/apache/cloudstack/issues/11163#issuecomment-3083568664

   Thank you for all suggestions.
   
   Before starting anew I looked into current offerings and found most to be 
geared towards running development environments or not adhering to best 
practices when deploying containers in production environments, e.g. not 
complying with [Application Container Security Guide 
NIST.SP.800-190](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-190.pdf).
   
   The most challenging service to adapt is the kvm agent, but projects Kolla 
and kolla-ansible have a working solution for running containerized OpenStack 
Nova agents with kvm which I currently use in production.
   
   Another challenge is to remove all the script calls from Java, e.g 
[Script.runSimpleBashScript](https://github.com/search?q=repo%3Aapache%2Fcloudstack+runSimpleBashScript+language%3Ajava&type=code),
 and move these to either a bootstrap container or transform these calls to a 
container native solution.
   
   I will post another update after the summer break.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to