)]}'
{"security-guide/source/instance-management/security-services-for-instances.rst":[{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"a06044ac2f90c42714129423e15611db91547229","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"Currently, it is possible to force Compute to validate an image hash"},{"line_number":208,"context_line":"immediately prior to starting an instance. But signature verification"},{"line_number":209,"context_line":"is provided in Compute only, an accompanying feature in the Image"},{"line_number":210,"context_line":"service is targeted for Mitaka. To understand the situation, we begin"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_468eaa2e","line":207,"updated":"2016-03-03 17:36:16.000000000","message":"With the Mitaka feature freeze upon us, it would be nice to be more clear about what is supported in Mitaka. \n\nSuggest some rework of this section to accommodate the new feature. Something like the following...\n\"As of the Mitaka release, compute supports instance signature validation immediately prior to starting an instance. The following paragraph describes how images are typically handled (without signature validation) when an instance is launched.\"","commit_id":"e573d418368f3fe1b748d0c9e828368897c12261"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"a06044ac2f90c42714129423e15611db91547229","unresolved":false,"context_lines":[{"line_number":213,"context_line":""},{"line_number":214,"context_line":"Images come from the glance service to the nova service on a node."},{"line_number":215,"context_line":"This transfer should be protected by running over TLS. Once the image"},{"line_number":216,"context_line":"is on the node, it is verified with a basic checksum and then it\u0027s"},{"line_number":217,"context_line":"disk is expanded based on the size of the instance being launched. If,"},{"line_number":218,"context_line":"at a later time, the same image is launched with the same instance"},{"line_number":219,"context_line":"size on this node, it will be launched from the same expanded image."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_cca13efa","line":216,"range":{"start_line":216,"start_character":62,"end_line":216,"end_character":66},"updated":"2016-03-03 17:36:16.000000000","message":"I realize this existed already, but it would be good to revise this to correct usage while you are making updates to the file. Change \"it\u0027s\" to \"its\"","commit_id":"e573d418368f3fe1b748d0c9e828368897c12261"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"a06044ac2f90c42714129423e15611db91547229","unresolved":false,"context_lines":[{"line_number":216,"context_line":"is on the node, it is verified with a basic checksum and then it\u0027s"},{"line_number":217,"context_line":"disk is expanded based on the size of the instance being launched. If,"},{"line_number":218,"context_line":"at a later time, the same image is launched with the same instance"},{"line_number":219,"context_line":"size on this node, it will be launched from the same expanded image."},{"line_number":220,"context_line":"Since this expanded image is not re-verified before launching, it"},{"line_number":221,"context_line":"could be tampered with and the user would not have any way of knowing,"},{"line_number":222,"context_line":"beyond a manual inspection of the files in the resulting image."}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_ace5d238","line":219,"range":{"start_line":219,"start_character":22,"end_line":219,"end_character":29},"updated":"2016-03-03 17:36:16.000000000","message":"Suggest changing to \"is launched...\" to use present tense.","commit_id":"e573d418368f3fe1b748d0c9e828368897c12261"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"a06044ac2f90c42714129423e15611db91547229","unresolved":false,"context_lines":[{"line_number":217,"context_line":"disk is expanded based on the size of the instance being launched. If,"},{"line_number":218,"context_line":"at a later time, the same image is launched with the same instance"},{"line_number":219,"context_line":"size on this node, it will be launched from the same expanded image."},{"line_number":220,"context_line":"Since this expanded image is not re-verified before launching, it"},{"line_number":221,"context_line":"could be tampered with and the user would not have any way of knowing,"},{"line_number":222,"context_line":"beyond a manual inspection of the files in the resulting image."},{"line_number":223,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_6c974a48","line":220,"range":{"start_line":220,"start_character":33,"end_line":220,"end_character":44},"updated":"2016-03-03 17:36:16.000000000","message":"Suggest adding \"by default.\" \"Since this expanded image is not re-verified by default before launching, it is possible that it has undergone tampering.\"","commit_id":"e573d418368f3fe1b748d0c9e828368897c12261"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"a06044ac2f90c42714129423e15611db91547229","unresolved":false,"context_lines":[{"line_number":218,"context_line":"at a later time, the same image is launched with the same instance"},{"line_number":219,"context_line":"size on this node, it will be launched from the same expanded image."},{"line_number":220,"context_line":"Since this expanded image is not re-verified before launching, it"},{"line_number":221,"context_line":"could be tampered with and the user would not have any way of knowing,"},{"line_number":222,"context_line":"beyond a manual inspection of the files in the resulting image."},{"line_number":223,"context_line":""},{"line_number":224,"context_line":"For detailed procedure see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_ecdeba0f","line":221,"range":{"start_line":221,"start_character":27,"end_line":221,"end_character":32},"updated":"2016-03-03 17:36:16.000000000","message":"Suggest starting new sentence. \"The user would not be aware of tampering, unless he performed a manual inspection of the files in the resulting image.\"","commit_id":"e573d418368f3fe1b748d0c9e828368897c12261"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"a06044ac2f90c42714129423e15611db91547229","unresolved":false,"context_lines":[{"line_number":221,"context_line":"could be tampered with and the user would not have any way of knowing,"},{"line_number":222,"context_line":"beyond a manual inspection of the files in the resulting image."},{"line_number":223,"context_line":""},{"line_number":224,"context_line":"For detailed procedure see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"},{"line_number":225,"context_line":"in the Operations Guide."},{"line_number":226,"context_line":""},{"line_number":227,"context_line":"Instance migrations"}],"source_content_type":"text/x-rst","patch_set":2,"id":"7af24918_06182274","line":224,"updated":"2016-03-03 17:36:16.000000000","message":"Suggest something like the following: \n\"For additional security of images, you can enable instance signature verification by setting the verify_glance_signatures flag in nova.conf to TRUE. When enabled, compute automatically validates the signed instance prior to its launch. For more information, see Adding Signed Images in the Operations Guide.\"","commit_id":"e573d418368f3fe1b748d0c9e828368897c12261"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"750bf3d44349090995c3a3babb4af02234891211","unresolved":false,"context_lines":[{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"},{"line_number":224,"context_line":"verification by setting the ``verify_glance_signatures`` flag to TRUE"},{"line_number":225,"context_line":"in the ``/etc/nova/nova.conf`` file. When enabled, compute automatically"},{"line_number":226,"context_line":"validates the signed instance prior to its launch. For more information,"},{"line_number":227,"context_line":"see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"},{"line_number":228,"context_line":"in the Operations Guide."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5aef4532_607363b2","line":225,"range":{"start_line":225,"start_character":51,"end_line":225,"end_character":58},"updated":"2016-03-07 19:59:30.000000000","message":"Compute (capitalized)","commit_id":"90108f5aa9b1f4a4e4802ba10f5d8b6aa1cee90c"},{"author":{"_account_id":9162,"name":"Lana Brindley","email":"openstack@lanabrindley.com","username":"loquacity"},"change_message_id":"da8ab488b9cbc9180447bb716b7d1a404ca58205","unresolved":false,"context_lines":[{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."},{"line_number":211,"context_line":""},{"line_number":212,"context_line":"Images come from the glance service to the nova service on a node."},{"line_number":213,"context_line":"This transfer should be protected by running over TLS. Once the image"},{"line_number":214,"context_line":"is on the node, it is verified with a basic checksum and then its"},{"line_number":215,"context_line":"disk is expanded based on the size of the instance being launched. If,"}],"source_content_type":"text/x-rst","patch_set":4,"id":"5aef4532_4d940a42","line":212,"range":{"start_line":212,"start_character":43,"end_line":212,"end_character":55},"updated":"2016-03-10 02:56:55.000000000","message":"Compute service","commit_id":"c8cb214a1db9ea911b42b5b96c232ab8360f41d9"},{"author":{"_account_id":9162,"name":"Lana Brindley","email":"openstack@lanabrindley.com","username":"loquacity"},"change_message_id":"da8ab488b9cbc9180447bb716b7d1a404ca58205","unresolved":false,"context_lines":[{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."},{"line_number":211,"context_line":""},{"line_number":212,"context_line":"Images come from the glance service to the nova service on a node."},{"line_number":213,"context_line":"This transfer should be protected by running over TLS. Once the image"},{"line_number":214,"context_line":"is on the node, it is verified with a basic checksum and then its"},{"line_number":215,"context_line":"disk is expanded based on the size of the instance being launched. If,"}],"source_content_type":"text/x-rst","patch_set":4,"id":"5aef4532_cda77abb","line":212,"range":{"start_line":212,"start_character":21,"end_line":212,"end_character":35},"updated":"2016-03-10 02:56:55.000000000","message":"Image service","commit_id":"c8cb214a1db9ea911b42b5b96c232ab8360f41d9"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"55b2ed47e44f68822de46953b83d9d13a5e30b2c","unresolved":false,"context_lines":[{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."},{"line_number":211,"context_line":""},{"line_number":212,"context_line":"Images come from the glance service to the nova service on a node."},{"line_number":213,"context_line":"This transfer should be protected by running over TLS. Once the image"},{"line_number":214,"context_line":"is on the node, it is verified with a basic checksum and then its"},{"line_number":215,"context_line":"disk is expanded based on the size of the instance being launched. If,"}],"source_content_type":"text/x-rst","patch_set":4,"id":"5aef4532_cde3fad7","line":212,"range":{"start_line":212,"start_character":43,"end_line":212,"end_character":55},"in_reply_to":"5aef4532_4d940a42","updated":"2016-03-10 03:01:31.000000000","message":"Done","commit_id":"c8cb214a1db9ea911b42b5b96c232ab8360f41d9"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"55b2ed47e44f68822de46953b83d9d13a5e30b2c","unresolved":false,"context_lines":[{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."},{"line_number":211,"context_line":""},{"line_number":212,"context_line":"Images come from the glance service to the nova service on a node."},{"line_number":213,"context_line":"This transfer should be protected by running over TLS. Once the image"},{"line_number":214,"context_line":"is on the node, it is verified with a basic checksum and then its"},{"line_number":215,"context_line":"disk is expanded based on the size of the instance being launched. If,"}],"source_content_type":"text/x-rst","patch_set":4,"id":"5aef4532_0dea02ac","line":212,"range":{"start_line":212,"start_character":21,"end_line":212,"end_character":35},"in_reply_to":"5aef4532_cda77abb","updated":"2016-03-10 03:01:31.000000000","message":"Done","commit_id":"c8cb214a1db9ea911b42b5b96c232ab8360f41d9"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"63b0156ce22a65e76122097d59ccfd5cc15daaf1","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, compute supports instance signature"},{"line_number":208,"context_line":"validation immediately prior to starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":5,"id":"3afc51ec_c9f9d44f","line":207,"updated":"2016-03-11 19:52:52.000000000","message":"Compute","commit_id":"731ee9d3dc2a49e15cddb57b916d85602533b1c2"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"9736cbc8658fb47d2ae36ff302a865591c5a419a","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, compute supports instance signature"},{"line_number":208,"context_line":"validation immediately prior to starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":5,"id":"3afc51ec_eab6343c","line":207,"in_reply_to":"3afc51ec_c9f9d44f","updated":"2016-03-12 02:23:11.000000000","message":"Done","commit_id":"731ee9d3dc2a49e15cddb57b916d85602533b1c2"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"63b0156ce22a65e76122097d59ccfd5cc15daaf1","unresolved":false,"context_lines":[{"line_number":217,"context_line":"size on this node, it is launched from the same expanded image."},{"line_number":218,"context_line":"Since this expanded image is not re-verified by default before"},{"line_number":219,"context_line":"launching, it is possible that it has undergone tampering. The user"},{"line_number":220,"context_line":"would not be aware of tampering, unless he performed a manual"},{"line_number":221,"context_line":"inspection of the files in the resulting image."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3afc51ec_c955541e","line":220,"updated":"2016-03-11 19:52:52.000000000","message":"...not be aware of tampering, unless a manual inspection of the files is performed...","commit_id":"731ee9d3dc2a49e15cddb57b916d85602533b1c2"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"9736cbc8658fb47d2ae36ff302a865591c5a419a","unresolved":false,"context_lines":[{"line_number":217,"context_line":"size on this node, it is launched from the same expanded image."},{"line_number":218,"context_line":"Since this expanded image is not re-verified by default before"},{"line_number":219,"context_line":"launching, it is possible that it has undergone tampering. The user"},{"line_number":220,"context_line":"would not be aware of tampering, unless he performed a manual"},{"line_number":221,"context_line":"inspection of the files in the resulting image."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3afc51ec_4a82c853","line":220,"in_reply_to":"3afc51ec_c955541e","updated":"2016-03-12 02:23:11.000000000","message":"Done","commit_id":"731ee9d3dc2a49e15cddb57b916d85602533b1c2"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fbef1eda19c59b8c40c3b79e2d97e7585b594f3b","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, Compute supports instance signature"},{"line_number":208,"context_line":"validation immediately prior to starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_227483fb","line":207,"range":{"start_line":207,"start_character":26,"end_line":207,"end_character":33},"updated":"2016-03-14 17:28:16.000000000","message":"i think this reads better as \"the Compute service\"","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"2e080b26a9d1ca0979be4b339aed4e870d021297","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, Compute supports instance signature"},{"line_number":208,"context_line":"validation immediately prior to starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_963663e5","line":207,"range":{"start_line":207,"start_character":26,"end_line":207,"end_character":33},"in_reply_to":"3afc51ec_227483fb","updated":"2016-03-15 03:31:22.000000000","message":"Done","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"c4741042a7da262322737173279d0f66e3c6e5e3","unresolved":false,"context_lines":[{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, Compute supports instance signature"},{"line_number":208,"context_line":"validation immediately prior to starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."},{"line_number":211,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_aeba3c6c","line":208,"range":{"start_line":208,"start_character":0,"end_line":208,"end_character":67},"updated":"2016-03-14 18:28:52.000000000","message":"may be writing this as \"the compute service supports instance signature validation just before starting an instance.\"","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"2e080b26a9d1ca0979be4b339aed4e870d021297","unresolved":false,"context_lines":[{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, Compute supports instance signature"},{"line_number":208,"context_line":"validation immediately prior to starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."},{"line_number":211,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_f63527da","line":208,"range":{"start_line":208,"start_character":0,"end_line":208,"end_character":67},"in_reply_to":"3afc51ec_aeba3c6c","updated":"2016-03-15 03:31:22.000000000","message":"Done","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"c4741042a7da262322737173279d0f66e3c6e5e3","unresolved":false,"context_lines":[{"line_number":221,"context_line":"files is performed in the resulting image."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"},{"line_number":224,"context_line":"verification by setting the ``verify_glance_signatures`` flag to TRUE"},{"line_number":225,"context_line":"in the ``/etc/nova/nova.conf`` file. When enabled, Compute automatically"},{"line_number":226,"context_line":"validates the signed instance prior to its launch. For more information,"},{"line_number":227,"context_line":"see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_8e61403c","line":224,"range":{"start_line":224,"start_character":65,"end_line":224,"end_character":69},"updated":"2016-03-14 18:28:52.000000000","message":"please replace TRUE with ``True`` as its a value to one of the config keys.","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"2e080b26a9d1ca0979be4b339aed4e870d021297","unresolved":false,"context_lines":[{"line_number":221,"context_line":"files is performed in the resulting image."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"},{"line_number":224,"context_line":"verification by setting the ``verify_glance_signatures`` flag to TRUE"},{"line_number":225,"context_line":"in the ``/etc/nova/nova.conf`` file. When enabled, Compute automatically"},{"line_number":226,"context_line":"validates the signed instance prior to its launch. For more information,"},{"line_number":227,"context_line":"see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_d630ebea","line":224,"range":{"start_line":224,"start_character":65,"end_line":224,"end_character":69},"in_reply_to":"3afc51ec_8e61403c","updated":"2016-03-15 03:31:22.000000000","message":"Done","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fbef1eda19c59b8c40c3b79e2d97e7585b594f3b","unresolved":false,"context_lines":[{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"},{"line_number":224,"context_line":"verification by setting the ``verify_glance_signatures`` flag to TRUE"},{"line_number":225,"context_line":"in the ``/etc/nova/nova.conf`` file. When enabled, Compute automatically"},{"line_number":226,"context_line":"validates the signed instance prior to its launch. For more information,"},{"line_number":227,"context_line":"see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"},{"line_number":228,"context_line":"in the Operations Guide."}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_229003ec","line":225,"range":{"start_line":225,"start_character":51,"end_line":225,"end_character":58},"updated":"2016-03-14 17:28:16.000000000","message":"same here, \"the Compute service\"","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"2e080b26a9d1ca0979be4b339aed4e870d021297","unresolved":false,"context_lines":[{"line_number":222,"context_line":""},{"line_number":223,"context_line":"For additional security of images, you can enable instance signature"},{"line_number":224,"context_line":"verification by setting the ``verify_glance_signatures`` flag to TRUE"},{"line_number":225,"context_line":"in the ``/etc/nova/nova.conf`` file. When enabled, Compute automatically"},{"line_number":226,"context_line":"validates the signed instance prior to its launch. For more information,"},{"line_number":227,"context_line":"see `Adding Signed Images \u003chttp://docs.openstack.org/openstack-ops/content/user_facing_images.html\u003e`_"},{"line_number":228,"context_line":"in the Operations Guide."}],"source_content_type":"text/x-rst","patch_set":6,"id":"3afc51ec_364e6f6f","line":225,"range":{"start_line":225,"start_character":51,"end_line":225,"end_character":58},"in_reply_to":"3afc51ec_229003ec","updated":"2016-03-15 03:31:22.000000000","message":"Done","commit_id":"5257df3f012ce5bef66f4564dfbc24dd2e358a52"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"94b25756ee65351bdcfb0e015c14259a2b9c6623","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, The Compute service supports instance"},{"line_number":208,"context_line":"signature validation just before starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":7,"id":"1af94dfe_a2e4663b","line":207,"range":{"start_line":207,"start_character":26,"end_line":207,"end_character":29},"updated":"2016-03-15 16:58:35.000000000","message":"a minor capitalization issue, \"The\" should be \"the\".","commit_id":"b090e17a9b71e23ace80e99ac418e8a6d8b17605"},{"author":{"_account_id":18265,"name":"Rony Haddad","email":"rony.haddad@ericsson.com","username":"RonyH"},"change_message_id":"a7ca1c93b66faa1e434a16c8c83f62adeb9d1858","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, The Compute service supports instance"},{"line_number":208,"context_line":"signature validation just before starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":7,"id":"1af94dfe_25ffbb02","line":207,"range":{"start_line":207,"start_character":26,"end_line":207,"end_character":29},"in_reply_to":"1af94dfe_a2e4663b","updated":"2016-03-15 18:33:03.000000000","message":"Done","commit_id":"b090e17a9b71e23ace80e99ac418e8a6d8b17605"},{"author":{"_account_id":19779,"name":"Chason Chan","display_name":"chenxing","email":"chason.chan@foxmail.com","username":"chenxing"},"change_message_id":"5a0088c072d4c7e6246959805cbc8493a4a6530f","unresolved":false,"context_lines":[{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""},{"line_number":207,"context_line":"As of the Mitaka release, The Compute service supports instance"},{"line_number":208,"context_line":"signature validation just before starting an instance. The following"},{"line_number":209,"context_line":"paragraph describes how images are typically handled (without"},{"line_number":210,"context_line":"signature validation) when an instance is launched."}],"source_content_type":"text/x-rst","patch_set":7,"id":"1af94dfe_a62bbaea","line":207,"range":{"start_line":207,"start_character":26,"end_line":207,"end_character":29},"in_reply_to":"1af94dfe_a2e4663b","updated":"2016-03-16 08:33:55.000000000","message":"Thanks","commit_id":"b090e17a9b71e23ace80e99ac418e8a6d8b17605"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"fc171f4c9bffddb5104e7e81439b6b812c393946","unresolved":false,"context_lines":[{"line_number":200,"context_line":"you will want to ensure that you are able to verify that your image"},{"line_number":201,"context_line":"was not modified before using it to create an instance. To do this,"},{"line_number":202,"context_line":"refer to the following section on Image Provenance."},{"line_number":203,"context_line":"C"},{"line_number":204,"context_line":"Image provenance and validation"},{"line_number":205,"context_line":"-------------------------------"},{"line_number":206,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"1af94dfe_e5b3e0e7","line":203,"updated":"2016-03-16 15:33:11.000000000","message":"Not sure why this C was introduced. The output is not displaying as a new section because of the formatting.","commit_id":"00b063baa2ed3b36cbde748480e514485fe43fdc"}]}