Excellent catch! And thanks for bringing this up, Richard. I was going to do some testing myself this week and file a corresponding bug.
This is a valid concern and something that we realized after the code was merged. One more point to consider here is that we need to run qemu-img in a sandbox vs. directly as a "glance" user on the the API node as possible in certain configurations. A approach for fixing this could be, using a chroot environment.
Excellent catch! And thanks for bringing this up, Richard. I was going to do some testing myself this week and file a corresponding bug.
This is a valid concern and something that we realized after the code was merged. One more point to consider here is that we need to run qemu-img in a sandbox vs. directly as a "glance" user on the the API node as possible in certain configurations. A approach for fixing this could be, using a chroot environment.