[PKG-Openstack-devel] Bug#826803: Work in progress, use case limited

[Thomas Goirand]

Hi Carsten,

Thanks for letting me know. However, a few things here.

First, Fuel is currently in a kind of experimental stage in Debian, and
doesn't fully work. Operating system can be provisioned (ie: remote
slaves can be installed with Debian), but at the moment, OpenStack can't
be installed on it (it fails because of issues with Hiera).

Also, the web GUI for OpenStack isn't currently packaged, because it
uses npm and gulp, which is crazy to package in Debian. I am currently
unsure if I should do all of the work to package maybe 100 nodejs
packages just to have fuel-ui packaged, or if I should put that into the
contrib or non-free repository.

Fuel without fuel-ui can still be useful (ie: from the command line),
but the scope is kind of limited and it is a lot less interesting.

The reason why I uploaded all of Fuel to unstable, is to receive QA from
Debian, and start improving the packages right away. This already
happened a lot.

Last, I don't see a use case where you would deploy a Fuel master node
where there would be user accounts running on it. Typically, such a
machine would be dedicated for the OpenStack deployment. If one doesn't
have the hardware, then probably someone would use a virtual machine.
But setting-up a fuel master node on a multi-user machine makes no sense
at all. So I'm not sure we care so much about this kind of issue you're
reporting. I'll get it fixed upstream never the less of course.

However, before that, there's so many other issues to correct. For
example, the deployed computer with fuel all have well known passwords
(ie: r00tme), and some services are also setup with well known
passwords. All of that will take time to fix. In the mean time, please
bare with me.

For all of these reasons, I'm lowering the severity of this bug to
"important".

Once all of Fuel is uploaded to Debian *and* fully usable, I will very
much welcome security audit of the whole thing. Until then, I don't
think it's very valuable to report issues just yet.

Last note: if Fuel isn't uploaded to Experimental, it's because it is
following the way OpenStack itself is packaged. OpenStack Mitaka is
currently in Sid, and so should Fuel. Experimental is for OpenStack and
Fuel Newton version.

Hoping this brings some light,
Cheers,

Thomas Goirand (zigo)