Comment 6 for bug 1449062

Revision history for this message
Nikhil Komawar (nikhil-komawar) wrote : Re: qemu-img calls need to be restricted by ulimit

Excellent catch! And thanks for bringing this up, Richard. I was going to do some testing myself this week and file a corresponding bug.

This is a valid concern and something that we realized after the code was merged. One more point to consider here is that we need to run qemu-img in a sandbox vs. directly as a "glance" user on the the API node as possible in certain configurations. A approach for fixing this could be, using a chroot environment.