
Replace the hardcoded bloated template with a variant of our standard
template that only includes the values that are really needed.
This will allow deployments to override the default values and for
example deploy libvirtd with TLS authentication according to [0].
[0] https://wiki.openstack.org/wiki/OSSN/OSSN-0007
Change-Id: Ib7b305670f525bbf975ec33ed070e2d960347ef4
(cherry picked from commit ad3d1c3c65
)
25 lines
1.1 KiB
Ruby
25 lines
1.1 KiB
Ruby
# libvirtd_opts used in template for /etc/default/libvirt-bin
|
|
default['openstack']['compute']['libvirt']['libvirtd_opts'] = '-l'
|
|
|
|
default['openstack']['compute']['libvirt']['group'] = 'libvirt'
|
|
default['openstack']['compute']['libvirt']['volume_backend'] = nil
|
|
|
|
default['openstack']['compute']['libvirt']['rbd']['cinder']['pool'] = 'volumes'
|
|
default['openstack']['compute']['libvirt']['rbd']['glance']['pool'] = 'images'
|
|
default['openstack']['compute']['libvirt']['rbd']['nova']['pool'] = 'instances'
|
|
default['openstack']['compute']['libvirt']['rbd']['cinder']['user'] = 'cinder'
|
|
default['openstack']['compute']['libvirt']['rbd']['cinder']['secret_uuid'] = '00000000-0000-0000-0000-000000000000'
|
|
|
|
default['openstack']['compute']['libvirt']['conf'].tap do |conf|
|
|
conf['listen_tls'] = '0'
|
|
conf['listen_tcp'] = '1'
|
|
conf['unix_sock_rw_perms'] = '"0770"'
|
|
conf['auth_unix_ro'] = '"none"'
|
|
conf['auth_unix_rw'] = '"none"'
|
|
conf['auth_tcp'] = '"none"'
|
|
conf['max_clients'] = '20'
|
|
conf['max_workers'] = '20'
|
|
conf['max_requests'] = '20'
|
|
conf['max_client_requests'] = '5'
|
|
end
|