glance/doc/source/admin/os_hash_algo.rst
pragathi93 438758db2f Add multihash info in glance documentation
New docs added for os_hash_algo in user guide and admin guide.

Change-Id: Id78be3935998b9c5acdd0706393117e892e5ab59
Closes-bug:#1871419
2023-02-08 21:30:44 +01:00

1.3 KiB
Raw Blame History

Secure Hash Algorithm Support (Multihash)

The Secure Hash Algorithm feature supplements the current checksum image property with a self-describing secure hash.

The self-description consists of two new image properties:

os_hash_algo

Contains the name of the secure hash algorithm used to generate the value on the image

os_hash_value

The hexdigest computed by applying the secure hash algorithm named in the os_hash_algo property to the image data

Hash Algorithm Configuration

os_hash_algo will be populated by the value of the configuration option hashing_algorithm in the glance.conf file. The os_hash_value value will be populated by the hexdigest computed when the algorithm is applied to the uploaded or imported image data.

These are read-only image properties and are not user-modifiable.

The default secure hash algorithm is SHA-512. It should be suitable for most applications.

The multihash is computed only for new images. There is no provision for computing the multihash for existing images.