Eric Windisch wrote: >> What implementation suboption would have your preference ? Is >> nova-rootwrap now universally used ? Should we prefer compatibility or >> absence of confusion ? > > There is an issue of how to extend rootwrap from third-party backend > drivers. If this was (is?) addressed, universal use of rootwrap will be > an easier sell.
Step 1 on the blueprint[1] is about moving allowed commands (filter definitions) from python code to configuration files in a rootwrap.d directory. This makes plugging new commands (to accommodate plugin needs) possible. Work in progress is in a branch on github[2]. [1] https://blueprints.launchpad.net/nova/+spec/folsom-nova-rootwrap [2] https://github.com/ttx/nova/tree/bp/folsom-nova-rootwrap Cheers, -- Thierry Carrez (ttx) Release Manager, OpenStack _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp