Monday, 2022-03-21

hiwkby_Hello, I am a Trove contributor since OpenStack Train. When I update my OpenStack version using devstack, I found Trove seems to use third party Docker images in Guest VMs.02:55
hiwkby_```02:55
hiwkby_ubuntu@guestvm:~$ grep -irnH 'docker_image' /etc/trove/02:55
hiwkby_/etc/trove/conf.d/trove-guestagent.conf:24:backup_docker_image = catalystcloud/db-backup-mysql:1.1.002:55
hiwkby_/etc/trove/conf.d/trove-guestagent.conf:25:docker_image = catalystcloud/mysql02:55
hiwkby_/etc/trove/conf.d/trove-guestagent.conf:28:backup_docker_image = catalystcloud/db-backup-postgresql:1.1.202:55
hiwkby_/etc/trove/conf.d/trove-guestagent.conf:29:docker_image = catalystcloud/postgres02:55
hiwkby_```02:55
hiwkby_I think these docker images are external libraries for Trove, but is it correct? If they are external libraries, Trove project must know what the licenses of the included software are at least.02:55
hiwkby_FYI: Here is OpenStack's Licensing requirements. https://governance.openstack.org/tc/reference/licensing.html02:55
hiwkby_If big security issues would occur in its external libraries, I think OpenStack project must fix them by cooperating with the upstream of external libraries or forking them soon. However, if the licenses of the included software are not under OSS, I think it is difficult. So, I think Trove must know what the licenses of the included software and also know their licenses are OSS.03:12
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Uses userdata instead of personality files  https://review.opendev.org/c/openstack/trove/+/83442205:36
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Uses userdata instead of personality files  https://review.opendev.org/c/openstack/trove/+/83442205:43
__ministrytrove use docker to run database services.07:06
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Adds new configurations for injected file owner  https://review.opendev.org/c/openstack/trove/+/83442808:41
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Adds new configurations for injected file owner  https://review.opendev.org/c/openstack/trove/+/83442808:42
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Uses userdata instead of personality files  https://review.opendev.org/c/openstack/trove/+/83442210:06
opendevreviewMerged openstack/trove-dashboard master: Works around a failure to load openstack dashboard  https://review.opendev.org/c/openstack/trove-dashboard/+/83349711:37
opendevreviewMerged openstack/trove-dashboard master: Update master for stable/yoga  https://review.opendev.org/c/openstack/trove-dashboard/+/83297511:41
opendevreviewHirotaka Wakabayashi proposed openstack/trove-dashboard master: Fix detach configuration group issue  https://review.opendev.org/c/openstack/trove-dashboard/+/82756313:32
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Uses userdata instead of personality files  https://review.opendev.org/c/openstack/trove/+/83442215:09
-opendevstatus- NOTICE: The Gerrit service on review.opendev.org will be offline momentarily for a Gerrit patch upgrade and kernel update, but should return again shortly21:33
opendevreviewHirotaka Wakabayashi proposed openstack/trove master: Uses userdata instead of personality files  https://review.opendev.org/c/openstack/trove/+/83442221:57

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!