da4138e3f5
The following are included in the switch to strict confinement: * Set snapcraft.yaml confinement to strict and restore/update plugs * Drop building of python as it's not required for strict snaps * Switch back to running apps under root * Patch setgroups from ngnix since it's not covered by a plug * Build libxml into snap Change-Id: Ibd2e3c625ceb92cb4b6dd9f0c9a9012baf7c53a5
80 lines
2.6 KiB
YAML
80 lines
2.6 KiB
YAML
setup:
|
|
dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|
|
- "{snap_common}/etc/nginx/sites-enabled"
|
|
- "{snap_common}/etc/nginx/snap"
|
|
- "{snap_common}/etc/nginx/snap/sites-enabled"
|
|
- "{snap_common}/etc/uwsgi/snap"
|
|
- "{snap_common}/lib"
|
|
- "{snap_common}/lock"
|
|
- "{snap_common}/log"
|
|
- "{snap_common}/run"
|
|
templates:
|
|
nova-snap.conf.j2: "{snap_common}/etc/nova/nova.conf.d/nova-snap.conf"
|
|
nova-nginx.conf.j2: "{snap_common}/etc/nginx/snap/sites-enabled/nova.conf"
|
|
nginx.conf.j2: "{snap_common}/etc/nginx/snap/nginx.conf"
|
|
entry_points:
|
|
nova-api-os-compute:
|
|
binary: "{snap}/bin/nova-api-os-compute"
|
|
config-files:
|
|
- "{snap}/etc/nova/nova.conf"
|
|
config-files-override:
|
|
- "{snap_common}/etc/nova/nova.conf"
|
|
config-dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|
|
log-file: "{snap_common}/log/nova-api-os-compute.log"
|
|
nova-uwsgi:
|
|
type: uwsgi
|
|
uwsgi-dir: "{snap_common}/etc/uwsgi/snap"
|
|
uwsgi-dir-override: "{snap_common}/etc/uwsgi"
|
|
uwsgi-log: "{snap_common}/log/uwsgi.log"
|
|
config-files:
|
|
- "{snap}/etc/nova/nova.conf"
|
|
config-files-override:
|
|
- "{snap_common}/etc/nova/nova.conf"
|
|
config-dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|
|
log-file: "{snap_common}/log/nova-placement-api.log"
|
|
templates:
|
|
nova-placement-api.ini.j2:
|
|
"{snap_common}/etc/uwsgi/snap/nova-placement-api.ini"
|
|
nova-nginx:
|
|
type: nginx
|
|
config-file: "{snap_common}/etc/nginx/snap/nginx.conf"
|
|
config-file-override: "{snap_common}/etc/nginx/nginx.conf"
|
|
nova-conductor:
|
|
binary: "{snap}/bin/nova-conductor"
|
|
config-files:
|
|
- "{snap}/etc/nova/nova.conf"
|
|
config-files-override:
|
|
- "{snap_common}/etc/nova/nova.conf"
|
|
config-dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|
|
log-file: "{snap_common}/log/nova-conductor.log"
|
|
nova-scheduler:
|
|
binary: "{snap}/bin/nova-scheduler"
|
|
config-files:
|
|
- "{snap}/etc/nova/nova.conf"
|
|
config-files-override:
|
|
- "{snap_common}/etc/nova/nova.conf"
|
|
config-dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|
|
log-file: "{snap_common}/log/nova-scheduler.log"
|
|
nova-consoleauth:
|
|
binary: "{snap}/bin/nova-consoleauth"
|
|
config-files:
|
|
- "{snap}/etc/nova/nova.conf"
|
|
config-files-override:
|
|
- "{snap_common}/etc/nova/nova.conf"
|
|
config-dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|
|
log-file: "{snap_common}/log/nova-consoleauth.log"
|
|
nova-manage:
|
|
binary: "{snap}/bin/nova-manage"
|
|
config-files:
|
|
- "{snap}/etc/nova/nova.conf"
|
|
config-files-override:
|
|
- "{snap_common}/etc/nova/nova.conf"
|
|
config-dirs:
|
|
- "{snap_common}/etc/nova/nova.conf.d"
|