Drop plugs for the time being until we have proper confinement - commented out of easier re-introduction

snapcraft.yaml

@@ -25,193 +25,193 @@ apps:
   # Openstack
   openstack:
     command: openstack
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # OpenStack Service Configuration
   configure:
     command: configure-openstack
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Keystone
   keystone-uwsgi:
     command: snap-openstack keystone-uwsgi
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
   keystone-manage:
     command: snap-openstack keystone-manage
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Nova
   nova-uwsgi:
     command: snap-openstack nova-uwsgi
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
   nova-api:
     command: snap-openstack nova-api-os-compute
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
   nova-conductor:
     command: snap-openstack nova-conductor
     daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
   nova-scheduler:
     command: snap-openstack nova-scheduler
     daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
   nova-compute:
     command: snap-openstack nova-compute
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
-      - firewall-control
+#      - firewall-control
-      - hardware-observe
+#      - hardware-observe
-      - libvirt
+#      - libvirt
-      - openvswitch
+#      - openvswitch
   nova-api-metadata:
     command: snap-openstack nova-api-metadata
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
-      - firewall-control
+#      - firewall-control
   nova-manage:
     command: snap-openstack nova-manage
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Neutron
   neutron-api:
     command: snap-openstack neutron-server
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
   neutron-openvswitch-agent:
     command: snap-openstack neutron-openvswitch-agent
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
-      - network-observe
+#      - network-observe
-      - firewall-control
+#      - firewall-control
-      - process-control
+#      - process-control
-      - system-observe
+#      - system-observe
-      - openvswitch
+#      - openvswitch
   neutron-l3-agent:
     command: snap-openstack neutron-l3-agent
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
-      - network-observe
+#      - network-observe
-      - firewall-control
+#      - firewall-control
-      - process-control
+#      - process-control
-      - system-observe
+#      - system-observe
-      - openvswitch
+#      - openvswitch
   neutron-dhcp-agent:
     command: snap-openstack neutron-dhcp-agent
     daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
-      - network-observe
+#      - network-observe
-      - process-control
+#      - process-control
-      - system-observe
+#      - system-observe
-      - openvswitch
+#      - openvswitch
   neutron-metadata-agent:
     command: snap-openstack neutron-metadata-agent
     daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
   neutron-ovs-cleanup:
     command: snap-openstack neutron-ovs-cleanup
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-control
+#      - network-control
-      - openvswitch
+#      - openvswitch
   neutron-netns-cleanup:
     command: snap-openstack neutron-netns-cleanup
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-control
+#      - network-control
   neutron-db-manage:
     command: snap-openstack neutron-db-manage
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Glance
   glance-api:
     command: snap-openstack glance-api
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
   registry:
     command: snap-openstack glance-registry
     daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-bind
+#      - network-bind
   glance-manage:
     command: snap-openstack glance-manage
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Openstack Shared Services
   nginx:
     command: snap-openstack nginx
     daemon: forking
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
 
   # Openvswitch
   ovs-vswitchd:
     command: ovs-wrapper $SNAP/share/openvswitch/scripts/ovs-ctl --no-ovsdb-server --no-monitor --system-id=random start
     stop-command: ovs-wrapper $SNAP/share/openvswitch/scripts/ovs-ctl --no-ovsdb-server stop
     daemon: forking
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
-      - openvswitch-support
+#      - openvswitch-support
-      - process-control
+#      - process-control
-      - system-trace
+#      - system-trace
   ovsdb-server:
     command: ovs-wrapper $SNAP/share/openvswitch/scripts/ovs-ctl --no-ovs-vswitchd --no-monitor --system-id=random start
     stop-command: ovs-wrapper $SNAP/share/openvswitch/scripts/ovs-ctl --no-ovs-vswitchd stop
     daemon: forking
-    plugs:
+#    plugs:
-      - network
+#      - network
-      - network-bind
+#      - network-bind
-      - network-control
+#      - network-control
-      - openvswitch-support
+#      - openvswitch-support
-      - process-control
+#      - process-control
-      - system-trace
+#      - system-trace
   ovs-vsctl:
     command: ovs-wrapper $SNAP/bin/ovs-vsctl
-    plugs:
+#    plugs:
-      - network
+#      - network
   ovs-appctl:
     command: ovs-wrapper $SNAP/bin/ovs-appctl
-    plugs:
+#    plugs:
-      - network
+#      - network
   ovs-ofctl:
     command: ovs-wrapper $SNAP/bin/ovs-ofctl
-    plugs:
+#    plugs:
-      - network
+#      - network
   ovs-dpctl:
     command: ovs-wrapper $SNAP/bin/ovs-dpctl
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Libvirt/Qemu
   libvirtd:
@@ -222,33 +222,32 @@ apps:
   virsh:
     command: virsh
 
-  # MySQL
   # MySQL
   mysqld:
     command: mysql-start-server
     daemon: simple
-    plugs:
+#    plugs:
-      - process-control
+#      - process-control
-      - network
+#      - network
-      - network-bind
+#      - network-bind
   mysql:
     command: mysql-start-client
-    plugs:
+#    plugs:
-      - process-control
+#      - process-control
-      - network
+#      - network
 
   # RabbitMQ
   rabbitmq-server:
     command: rabbitmq-server
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
     environment:
       HOME: $SNAP_COMMON/lib/rabbitmq
   rabbitmqctl:
     command: rabbitmqctl
-    plugs:
+#    plugs:
-      - network
+#      - network
     environment:
       HOME: $SNAP_COMMON/lib/rabbitmq
   rabbitmq-plugins:
@@ -260,41 +259,41 @@ apps:
   memcached:
     command: memcached -u root -v
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
 
   # Cinder
   cinder-uwsgi:
     command: snap-openstack cinder-uwsgi
 #    daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
   cinder-backup:
     command: snap-openstack cinder-backup
 #    daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
   cinder-manage:
     command: snap-openstack cinder-manage
-    plugs:
+#    plugs:
-      - network
+#      - network
   cinder-scheduler:
     command: snap-openstack cinder-scheduler
 #    daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
   cinder-volume:
     command: snap-openstack cinder-volume
 #    daemon: simple
-    plugs:
+#    plugs:
-      - network
+#      - network
 
   # Horizon
   horizon-uwsgi:
     command: snap-openstack horizon-uwsgi
     daemon: simple
-    plugs:
+#    plugs:
-      - network-bind
+#      - network-bind
 
 parts:
   # OpenStack Python Projects, keyed off Keystone