Security Guide - Chapter 43. Gap In Image-to-Instance Validation

[N Dillon]

Currently States: "We hope that future versions of Compute and/or the Image Service will offer support for validating the image hash before each instance launch. An alternative option that would be even more powerful would be allow users to sign an image and then have the signature validated when the instance is launched."

Recommended Update: "A current gap in validation is that it must currently be done by hand when desired. OpenStack does not currently support validating the image hash or user signature before each instance launch."
-----------------------------------
Built: 2014-07-18T11:07:05 00:00
git SHA: 2dc0f54e2f4b1a51cfcf33c90c799d0f1b3a1cb7
URL: http://docs.openstack.org/security-guide/content/security-services-for-instances.html
source File: file:/home/jenkins/workspace/security-doc-tox-doc-publishdocs/security-guide/ch_security-services-for-instances.xml
xml:id: security-services-for-instances

[N Dillon (sicarie)]

A note for whoever does this, please proofreed the recommendation as it states "A current gap in validation is that it must currently..." Where the second currently is redundant and should be removed.

[N Dillon (sicarie)]

This is now in Ch29, but wording has remained

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/110130

[OpenStack Infra (hudson-openstack)]

Change abandoned by Nathaniel Dillon (<email address hidden>) on branch: master
Review: https://review.openstack.org/110130
Reason: Worked on rebasing this last night, didn't realize between last night and this morning the chapters had changed and by then had deleted local branch, will re-submit under different topic name.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/111097

[OpenStack Infra (hudson-openstack)]

Change abandoned by Nathaniel Dillon (<email address hidden>) on branch: master
Review: https://review.openstack.org/111097
Reason: It's like Coke Classic - everyone prefers the original :)

[Andreas Jaeger (jaegerandi)]

Looking at the discussion in the patch, I suggest to mark this bug as invalid. Do you agree?

[N Dillon (sicarie)]

Yeah, I think so - personally I think that things like 'we hope' and options for which there is no concrete tool or blueprint (or link to project page - I have not done the research to determine what OA/Ironic are doing to this end) shouldn't be in there as it does not relate specific guidance as to hardening (it just says what would be ideal), but I am not sure how to modify it to state that to the satisfaction of the reviewers.