Enable image signature verification

Bug #1893928 reported by Michał Ajduk
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Nova Compute Charm
Confirmed
Wishlist
Unassigned

Bug Description

Openstack nova allows image signature verification when booting up a VM [1]. In order to have that feature enabled in nova-compute, following section needs to be added to nova.conf:
[glance]
verify_glance_signatures = True
enable_certificate_validation = True

Currently the charm does not allow adding this section hence blocking image validation on boot.

This could be added as a nova-compute charm option.

[1] https://docs.openstack.org/nova/rocky/user/certificate-validation.html

Liam Young (gnuoy)
Changed in charm-nova-compute:
status: New → Confirmed
importance: Undecided → Wishlist
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.