openstack team mailing list archive

Thread
Date

Re: [OpenStack] [Glance] Reuse the image id when recreate an image in Glance which had been deleted

To: Fei Long Wang <flwang@xxxxxxxxxx>
From: Robert Collins <robertc@xxxxxxxxxxxxxxxxx>
Date: Thu, 23 May 2013 10:00:42 +1200
Cc: openstack@xxxxxxxxxxxxxxxxxxx
In-reply-to: <OF4BF03A3A.9F4E1C86-ON48257B6C.004BE2FB-48257B6D.005095F5@cn.ibm.com>

On 17 May 2013 02:38, Fei Long Wang <flwang@xxxxxxxxxx> wrote:
> Hi stackers,
>
> Now I'm running into an issue about reusing image id in Glance. Based on
> current design, the image id can be specified during create image by end
> user. But now there is a problem, which is tracked by defect


...


various services use the image UUID as a key for caches on disk.
Reusing that seems like a catastrophic event, not to mention a clear
security attack vector.

-Rob


-- 
Robert Collins <rbtcollins@xxxxxx>
Distinguished Technologist
HP Cloud Services

References

[OpenStack] [Glance] Reuse the image id when recreate an image in Glance which had been deleted
From: Fei Long Wang, 2013-05-16