Copy disks to dest node use rsync without ssh
The disks are copied from source to destination via rysnc over ssh during resizing/migrating.
It means that we will need a password-less ssh private key setup among all compute nodes.
It is a security problem in some environment. This blueprint will use rsync(tool, not the protocol) itself(not over ssh) to copy/delete the disks.
Blueprint information
- Status:
- Complete
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- Jian Wen
- Direction:
- Needs approval
- Assignee:
- Jian Wen
- Definition:
- Obsolete
- Series goal:
- None
- Implementation:
-
Unknown
- Milestone target:
- None
- Started by
- Completed by
- John Garbutt
Related branches
Related bugs
Sprints
Whiteboard
Not sure how this helps security? --Vish
Discussions are here: [openstack-dev] [OSSG] OpenStack Security Group Task List --Jian
We have implemented this bp in ours release, erverything is ok but only when any errors occur in the resize process, an empty instance dir of dest node will be leaved, we use rsync deamon push mode--wangpan
@wangpan I have implemented this bp on 14th Sep last year. You don't have to do this. Feel free to pull the code. To delete the left instance dir
+ utils.execute(
+ "'--include=%s'" % instance['name'],
+ "'--include=%s/*'" % instance['name'],
+ "'--exclude=*'",
+ inst_base, # or FLAGS.instances
+ uri)
--Jian Wen
could you give me the url of your code? thanks--wangpan
https:/
Discussions are here: [openstack-dev] [OSSG] OpenStack Security Group Task List --Jian
We have implemented this bp in ours release, erverything is ok but only when any errors occur in the resize process, an empty instance dir of dest node will be leaved, we use rsync deamon push mode--wangpan
@wangpan I have implemented this bp on 14th Sep last year. You don't have to do this. Feel free to pull the code. To delete the left instance dir
+ utils.execute(
+ "'--include=%s'" % instance['name'],
+ "'--include=%s/*'" % instance['name'],
+ "'--exclude=*'",
+ inst_base, # or FLAGS.instances
+ uri)
--Jian Wen
could you give me the url of your code? thanks--wangpan
https:/
This blueprint is not complete after a good year or so, marking as Obsolete to tidy up the Nova backlog. --johnthetubaguy (20th April 2014)
