)]}'
{"security-guide/section_security-services-for-instances.xml":[{"author":{"_account_id":167,"name":"Christian Berendt","email":"berendt@osism.tech","username":"berendt"},"change_message_id":"749a74d649a528769c7c3eedc42d359918326af3","unresolved":false,"context_lines":[{"line_number":154,"context_line":"        \u003cpara\u003eA current gap in validation is that validation must be"},{"line_number":155,"context_line":"        done by hand when desired. OpenStack does not currently support"},{"line_number":156,"context_line":"        validating the image hash or user signature before each instance"},{"line_number":157,"context_line":"        launch.\u003c/para\u003e"},{"line_number":158,"context_line":"      \u003c/section\u003e"},{"line_number":159,"context_line":"    \u003c/section\u003e"},{"line_number":160,"context_line":"    \u003csection xml:id\u003d\"security-services-for-instances-idp170576\"\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"baada198_19e85c7a","line":157,"updated":"2014-08-01 06:32:49.000000000","message":"The second sentence is redundant. That it is not supported at the moment is already mentioned in line 152. Also I do not understand how it should be possible to validate the image prior to the launch of the instance. How is that possible after nova-compute expanded the image?","commit_id":"e62fe980c021b7a5cdb8d126582b6b3e72233acf"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"b1a22655795e73947180290dece6934c0bb7decf","unresolved":false,"context_lines":[{"line_number":154,"context_line":"        \u003cpara\u003eA current gap in validation is that validation must be"},{"line_number":155,"context_line":"        done by hand when desired. OpenStack does not currently support"},{"line_number":156,"context_line":"        validating the image hash or user signature before each instance"},{"line_number":157,"context_line":"        launch.\u003c/para\u003e"},{"line_number":158,"context_line":"      \u003c/section\u003e"},{"line_number":159,"context_line":"    \u003c/section\u003e"},{"line_number":160,"context_line":"    \u003csection xml:id\u003d\"security-services-for-instances-idp170576\"\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"baada198_e57d7ae7","line":157,"in_reply_to":"baada198_19e85c7a","updated":"2014-08-11 18:18:25.000000000","message":"Christian, there second sentence was mostly to highlight the work in progress around OpenAttestation and the ability to validate image integrity even after copying from glance into libvirt and passing to nova (ensuring each step had a \u0027good\u0027 image) - the two trains of thought being a key created by the system (when the image is created locally), or a user-input key if the image was built elsewhere and uploaded. (https://wiki.openstack.org/wiki/OpenAttestation)","commit_id":"e62fe980c021b7a5cdb8d126582b6b3e72233acf"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"38efa91b1ecec6b2983dddd151706e07d6ab63f0","unresolved":false,"context_lines":[{"line_number":154,"context_line":"        \u003cpara\u003eA current gap in validation is that validation must be"},{"line_number":155,"context_line":"        done by hand when desired. OpenStack does not currently support"},{"line_number":156,"context_line":"        validating the image hash or user signature before each instance"},{"line_number":157,"context_line":"        launch.\u003c/para\u003e"},{"line_number":158,"context_line":"      \u003c/section\u003e"},{"line_number":159,"context_line":"    \u003c/section\u003e"},{"line_number":160,"context_line":"    \u003csection xml:id\u003d\"security-services-for-instances-idp170576\"\u003e"}],"source_content_type":"application/xml","patch_set":1,"id":"1abeadc6_e0f3199d","line":157,"in_reply_to":"baada198_e57d7ae7","updated":"2014-08-19 17:50:44.000000000","message":"I prefer the original sentence. This version doesn\u0027t says you can do validation \"by hand\", but to me this doesn\u0027t mean anything.\n\nIf the goal of the sentence is to highlight work around OpenAttestation, then it\u0027s not achieving its goal that since I had no idea that it was referring to OpenAttestation. I\u0027d prefer that the information in the comment here was provided rather than being vague.","commit_id":"e62fe980c021b7a5cdb8d126582b6b3e72233acf"}]}