Wallaby Series Release Notes¶

2.3.0¶

The oslo.privsep client can be called from a program using eventlet. If eventlet.monkey_patch, some libraries will be patched, for example threading or os. When the root daemon is forked from the client process, those libraries remain patched. Now, when the daemon is forked from the client process, those libraries and methods are restored to the original values. The goal is to prevent some timeouts when using eventlet threads (user threads); system threads are preemptive and the code does not need to care about the executor token.

Support for Python 2.7 has been dropped. The minimum version of Python now supported is Python 3.6.

When the privsep helper dies, the client side PrivContext now restarts the client channel and the helper so that privileged commands can continue to be processed. See bug 1715374 for details. In conjunction with the fix for bug 1794708 in oslo.service, the nova-compute service now behaves correctly when it receives SIGHUP.

Note

This only works for the ROOTWRAP method of starting the daemon. With the FORK method we’ve dropped privileges and no longer have the ability to restart the daemon in privileged mode.

Privsep now uses multithreading to allow concurrency in executing privileged commands. The number of concurrent threads defaults to the available CPU cores, but can be adjusted by the new thread_pool_size config option.