Comment 6 for bug 1482371
Revision history for this message
| Stuart McLaren (stuart-mclaren) wrote Re: Image status can be changed by passing header 'x-image-meta-status' with PUT operation using v1 | #6 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
73416ba
(Get the code!)
I've found a couple of ways to change the image bytes (break the immutability guarantee).
1. Set the image back to queued and upload using v2
(http://
2. Use --location to replace the image location
(http://
When set_image_location is allowed by policy it's always possible for a user to upload new
bytes to the location behind glance's back. But previously that would result in a checksum error
when the user went to download the replaced bytes. The change in behaviour here is that the
checksum, size, etc of the image are changed so the download will not raise any error.
I tried copy-from to change the image bytes, and I also tried setting the image status from the nova client.
Both failed to do anything bad.