Bug 752842 - Reserve static uid/gids for OpenStack packages - quantum and keystone
Summary: Reserve static uid/gids for OpenStack packages - quantum and keystone
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: setup
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
Assignee: Ondrej Vasik
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-11-10 15:26 UTC by Bob Kukura
Modified: 2014-02-27 23:17 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-11-11 12:44:14 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Bob Kukura 2011-11-10 15:26:13 UTC
Similar to the other OpenStack services covered in bug #732442, the quantum (package: openstack-quantum, home: /var/lib/quantum) and keystone (package: openstack-keystone, home: /var/lib/keystone) services need unique static system UIDs and GIDs. Quantum is OpenStack's virtual networking service, and keystone is its authorization service. Both of these are network-facing.

Current OpenStack passwd entries:

glance:x:161:161:OpenStack Glance Daemons:/var/lib/glance:/sbin/nologin
nova:x:162:162:OpenStack Nova Daemons:/var/lib/nova:/sbin/nologin
swift:x:160:160:OpenStack Swift Daemons:/var/lib/swift:/sbin/nologin
keystone:x:990:983:OpenStack Keystone Daemons:/var/lib/keystone:/sbin/nologin
quantum:x:989:982:OpenStack Quantum Daemons:/var/lib/quantum:/sbin/nologin

The openstack-keystone package is currently in F16 and rawhide, and the openstack-quantum package is about to be added to F16 and rawhide.

Thanks,

-Bob

Comment 1 Ondrej Vasik 2011-11-11 12:44:14 UTC
Reserved in upstream git (future rawhide...) - feel free to use it.

* Fri Nov 11 2011 Ondrej Vasik <ovasik> 2.8.43-1
- reserve 163:163 for keystone (openstack-keystone) - #752842
- reserve 164:164 for quantum (openstack-quantum) - #752842


Note You need to log in before you can comment on or make changes to this bug.