[opensuse-cloud] Files marked as %config(noreplace)
Hi guys, in our OpenStack packaging, we have several files marked as %config(noreplace) but we should discuss when this makes sense and when not. The general pattern in the past seemed to just mark everything as noreplace to (somewhat blindly) please the corresponding rpmlint warning. Recently this changed. In other words, we try to only mark stuff as noreplace where we really expect user's to change files. Good examples are: /etc/nova/nova.conf /etc/logrotate.d/openstack-nova But not necessarilly: /etc/quantum/plugins/bigswitch/restproxy.ini /etc/nova/policy.json /etc/nova/rootwrap.conf /etc/nova/rootwrap.d/api-metadata.filters Primarily rootwrap config is a security thing on which we want to have tight control. Thus these should only be marked as %config so that the user is able to shot himself in the foot. But in the end we still have the bigger duct-tape to fix things up. Of course the exact list on what to mark how is debatable, so here is a list of all files currently marked as %config(noreplace): http://paste.opensuse.org/77114742 And one for %config files: http://paste.opensuse.org/48154140 For now I'll fix-up things as I see fit. -- With kind regards, Sascha Peilicke SUSE Linux GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-cloud+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-cloud+owner@opensuse.org
On 03/19/2013 10:53 AM, Sascha Peilicke wrote:
But not necessarilly:
/etc/quantum/plugins/bigswitch/restproxy.ini
All configuration files in /etc/quantum/plugins have to be changed to get the several agents working. The files in /etc/quantum/plugins should be tagged as noreplace to not overwrite the existing configuration.
/etc/nova/policy.json
I think this file can also be modified by local operators. Should be noreplace.
/etc/nova/rootwrap.conf /etc/nova/rootwrap.d/api-metadata.filters
Not sure about them. I think they has not to be tagged. Christian. -- Christian Berendt Cloud Computing Solution Architect Tel.: +49-171-5542175 Mail: berendt@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537 -- To unsubscribe, e-mail: opensuse-cloud+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-cloud+owner@opensuse.org
I suggest that we create an openSUSE page, e.g. OpenStack packaging that documents these kind of "policies" and guidelines. Andreas -- Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg) GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126 -- To unsubscribe, e-mail: opensuse-cloud+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-cloud+owner@opensuse.org
Andreas Jaeger (aj@suse.com) wrote:
I suggest that we create an openSUSE page, e.g. OpenStack packaging that documents these kind of "policies" and guidelines.
http://en.opensuse.org/openSUSE:Specfile_guidelines#Configuration_files -- To unsubscribe, e-mail: opensuse-cloud+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-cloud+owner@opensuse.org
participants (4)
-
Adam Spiers
-
Andreas Jaeger
-
Christian Berendt
-
Sascha Peilicke