openstack
/
glance
Code Issues Proposed changes

Image signature base64 don't wrap lines 

In the image signature documentation, base64 should not use line
wrapping (defaults to 76). Disable using -w 0. With line wrapping
enabled Nova will fail to boot the image.

Added a note to inform users to use -w 0 with Glance v1 but is
optional for v2.

DocImpact

Closes-Bug: 1617258
Change-Id: I3585c5cc90e6ea738ff7ecb5a5574cbb0e737511
This commit is contained in:
Darren White 2016-08-23 14:56:31 +01:00
parent dda820d59f
commit 5663196c9c
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/source/signature.rst
View File

@ -135,10 +135,13 @@ Get an image and create the signature::
$ openssl dgst -sha256 -sign private_key.pem -sigopt rsa_padding_mode:pss -out myimage.signature myimage
$ base64 myimage.signature > myimage.signature.b64
$ base64 -w 0 myimage.signature > myimage.signature.b64
$ image_signature=$(cat myimage.signature.b64)
.. note:: Using Glance v1 requires '-w 0' due to not supporting multiline image properties.
Glance v2 does support multiline image properties and does not require '-w 0' but may still be used.
Create the image::
$ glance image-create --name mySignedImage --container-format bare --disk-format qcow2 --property img_signature="$image_signature" --property img_signature_certificate_uuid="$cert_uuid" --property img_signature_hash_method='SHA-256' --property img_signature_key_type='RSA-PSS' < myimage