[Bug 801299] Re: [MIR]glance

2011-09-23 Thread Matthias Klose
2011-09-23 11:08:04 INFOOverride Component to: 'main' 2011-09-23 11:08:04 INFO'glance - 2011.3-0ubuntu1/universe/net' source overridden 2011-09-23 11:08:04 INFO'glance-2011.3-0ubuntu1/universe/python/EXTRA' binary overridden in oneiric/amd64 2011-09-23 11:08:04 INFO'glance-2011.3-

[Bug 801299] Re: [MIR]glance

2011-09-22 Thread Chuck Short
Yes: https://bugs.launchpad.net/ubuntu/+source/glance/+bug/829063 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications about this bug go to: https://bugs

[Bug 801299] Re: [MIR]glance

2011-09-22 Thread Jamie Strandboge
I see that Thierry mentioned SSL support is forthcoming, is this in a bug somewhere (sorry, I was unable to find it). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To mana

[Bug 801299] Re: [MIR]glance

2011-09-22 Thread Jamie Strandboge
I've been asked to comment on whether the lack of SSL for glance communications is blocking the MIR. Looking at the architecture documents for Nova and Glance, it seems like glance is typically not going to be used across an open network, but instead as a sort of backend for nova-compute and nova-a

[Bug 801299] Re: [MIR]glance

2011-09-21 Thread Jamie Strandboge
** Changed in: glance (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications about this

[Bug 801299] Re: [MIR]glance

2011-09-07 Thread Chuck Short
Thanks for pointing that out doko, it got hit by a recent python- greenlet change. Builds fine now. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications a

[Bug 801299] Re: [MIR]glance

2011-09-07 Thread Matthias Klose
recent upload ftbfs: https://launchpad.net/ubuntu/+source/glance/2011.3~rc~20110831.1002-0ubuntu1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications ab

[Bug 801299] Re: [MIR]glance

2011-08-26 Thread Thierry Carrez
SSL support is on the roadmap before release: https://launchpad.net/glance/+milestone/diablo-rbp -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications abou

[Bug 801299] Re: [MIR]glance

2011-08-25 Thread Kees Cook
It seems like running this over an open network without SSL would result in all of man-in-the-middle potential, credential theft, image changing, etc. Is there something I'm missing about this? It seems like a rather critical service to run without SSL. -- You received this bug notification becau

[Bug 801299] Re: [MIR]glance

2011-08-25 Thread Clint Byrum
It strikes me that there doesn't seem to be a way to make the CLI client or server use SSL, though the internal API's have some options for it. So really we can't make it use SSL at all, much less by default. Kees, is that a hard requirement for main inclusion, or can we mark it as wishlist? --

[Bug 801299] Re: [MIR]glance

2011-08-21 Thread Jay Pipes
re: "is the POSTed image data actually used? I can't find many references to "image_data"" Not sure what you mean here. Glance passes storage of virtual disk images off to one of several backends. It doesn't execute/boot the virtual disk image; it merely stores it. re: "should use SSL by default"

[Bug 801299] Re: [MIR]glance

2011-08-21 Thread Jay Pipes
Hi Kees, "glance/common/utils.py creates dangerous "execute"" That function isn't used anywhere in the Glance source code. It can be removed; it was copies from early Nova source... -jay -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubunt

[Bug 801299] Re: [MIR]glance

2011-08-19 Thread Dave Walker
Thanks for the review Kees. I have raised separate bugs for those identified: bug 828719 - glance/common/config.py find_config_file() loads config files from "." bug 828721 - When purged, the glance user is not removed bug 829063 - should use SSL by default bug 8290

[Bug 801299] Re: [MIR]glance

2011-08-11 Thread Kees Cook
- glance/common/config.py find_config_file() should not load config files from "." (e.g. imagine doing "sudo apt-get install glace" from /tmp and being surprised that ./glance-registry.conf gets loaded during the postinst, writing to arbitrary locations for SQL and logs) - I don't see any packag

[Bug 801299] Re: [MIR]glance

2011-08-11 Thread Michael Terry
** Changed in: glance (Ubuntu) Assignee: Michael Terry (mterry) => Kees Cook (kees) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications about this b

[Bug 801299] Re: [MIR]glance

2011-08-11 Thread Thierry Carrez
** Changed in: glance (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications about this bug go to: https://bugs.la

[Bug 801299] Re: [MIR]glance

2011-06-24 Thread Michael Terry
** Changed in: glance (Ubuntu) Assignee: (unassigned) => Michael Terry (mterry) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications about this bug g

[Bug 801299] Re: [MIR]glance

2011-06-24 Thread Dave Walker
** Tags added: server-o-mir -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/801299 Title: [MIR]glance To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/glance/+b