Cloned from launchpad blueprint https://blueprints.launchpad.net/nova/+spec/nova-support-image-signing.
In order to support Glance's image signing feature, we need to add accompanying functionality to Nova. This will allow Nova to verify signed images before booting and create signed images.
This accompanies the functionality described in the spec here: https://review.openstack.org/#/c/177948/
Specification URL (additional information):
Specification as not approved for Ocata, moving to Pike.
Specification moved to Pike based on Barbican dependency for end to end delivery of feature.
As discussed, we should also validate the deployment aspect of this RFE by ensuring we use the VerifyGlanceSignatures  parameter to enable this on the compute nodes.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.