You can modify many options in the Image service. The following tables provide a comprehensive list.
Configuration option = Default value | Description |
---|---|
[DEFAULT] | |
allow_additional_image_properties = True |
(Boolean) Allow users to add additional/custom properties to images. Glance defines a standard set of properties (in its schema) that appear on every image. These properties are also known as By default, this configuration option is set to Possible values:
Related options:
|
api_limit_max = 1000 |
(Integer) Maximum number of results that could be returned by a request. As described in the help text of NOTE: Setting this to a very large value may slow down database queries and increase response times. Setting this to a very low value may result in poor user experience. Possible values:
Related options:
|
backlog = 4096 |
(Integer) Set the number of incoming connection requests. Provide a positive integer value to limit the number of requests in the backlog queue. The default queue size is 4096. An incoming connection to a TCP listener socket is queued before a connection can be established with the server. Setting the backlog for a TCP socket ensures a limited queue size for incoming traffic. Possible values:
Related options:
|
bind_host = 0.0.0.0 |
(String) IP address to bind the glance servers to. Provide an IP address to bind the glance server to. The default value is Edit this option to enable the server to listen on one particular IP address on the network card. This facilitates selection of a particular network interface for the server. Possible values:
Related options:
|
bind_port = None |
(Port number) Port number on which the server will listen. Provide a valid port number to bind the server’s socket to. This port is then set to identify processes and forward network messages that arrive at the server. The default bind_port value for the API server is 9292 and for the registry server is 9191. Possible values:
Related options:
|
data_api = glance.db.sqlalchemy.api |
(String) Python module path of data access API. Specifies the path to the API to use for accessing the data model. This option determines how the image catalog data will be accessed. Possible values:
If this option is set to Setting this option to NOTE: In v2 OpenStack Images API, the registry service is optional. In order to use the Registry API in v2, the option Finally, when this configuration option is set to Related options:
|
digest_algorithm = sha256 |
(String) Digest algorithm to use for digital signature. Provide a string value representing the digest algorithm to use for generating digital signatures. By default, To get a list of the available algorithms supported by the version of OpenSSL on your platform, run the command: NOTE: Possible values:
Relation options:
|
executor_thread_pool_size = 64 |
(Integer) Size of executor thread pool. |
image_location_quota = 10 |
(Integer) Maximum number of locations allowed on an image. Any negative value is interpreted as unlimited. Related options:
|
image_member_quota = 128 |
(Integer) Maximum number of image members per image. This limits the maximum of users an image can be shared with. Any negative value is interpreted as unlimited. Related options:
|
image_property_quota = 128 |
(Integer) Maximum number of properties allowed on an image. This enforces an upper limit on the number of additional properties an image can have. Any negative value is interpreted as unlimited. NOTE: This won’t have any impact if additional properties are disabled. Please refer to Related options:
|
image_tag_quota = 128 |
(Integer) Maximum number of tags allowed on an image. Any negative value is interpreted as unlimited. Related options:
|
limit_param_default = 25 |
(Integer) The default number of results to return for a request. Responses to certain API requests, like list images, may return multiple items. The number of results returned can be explicitly controlled by specifying the NOTES:
Possible values:
Related options:
|
metadata_encryption_key = None |
(String) AES key for encrypting store location metadata. Provide a string value representing the AES cipher to use for encrypting Glance store metadata. NOTE: The AES key to use must be set to a random string of length 16, 24 or 32 bytes. Possible values:
Related options:
|
metadata_source_path = /etc/glance/metadefs/ |
(String) Absolute path to the directory where JSON metadefs files are stored. Glance Metadata Definitions (“metadefs”) are served from the database, but are stored in files in the JSON format. The files in this directory are used to initialize the metadefs in the database. Additionally, when metadefs are exported from the database, the files are written to this directory. NOTE: If you plan to export metadefs, make sure that this directory has write permissions set for the user being used to run the glance-api service. Possible values:
Related options:
|
property_protection_file = None |
(String) The location of the property protection file. Provide a valid path to the property protection file which contains the rules for property protections and the roles/policies associated with them. A property protection file, when set, restricts the Glance image properties to be created, read, updated and/or deleted by a specific set of users that are identified by either roles or policies. If this configuration option is not set, by default, property protections won’t be enforced. If a value is specified and the file is not found, the glance-api service will fail to start. More information on property protections can be found at: http://docs.openstack.org/developer/glance/property-protections.html Possible values:
Related options:
|
property_protection_rule_format = roles |
(String) Rule format for property protection. Provide the desired way to set property protection on Glance image properties. The two permissible values are If the value is Possible values:
Related options:
|
show_image_direct_url = False |
(Boolean) Show direct image location when returning an image. This configuration option indicates whether to show the direct image location when returning image details to the user. The direct image location is where the image data is stored in backend storage. This image location is shown under the image property When multiple image locations exist for an image, the best location is displayed based on the location strategy indicated by the configuration option NOTES:
Possible values:
Related options:
|
user_storage_quota = 0 |
(String) Maximum amount of image storage per tenant. This enforces an upper limit on the cumulative storage consumed by all images of a tenant across all stores. This is a per-tenant limit. The default unit for this configuration option is Bytes. However, storage units can be specified using case-sensitive literals Possible values:
Related options:
|
workers = None |
(Integer) Number of Glance worker processes to start. Provide a non-negative integer value to set the number of child process workers to service requests. By default, the number of CPUs available is set as the value for Each worker process is made to listen on the port set in the configuration file and contains a greenthread pool of size 1000. NOTE: Setting the number of workers to zero, triggers the creation of a single API process with a greenthread pool of size 1000. Possible values:
Related options:
|
[glance_store] | |
rootwrap_config = /etc/glance/rootwrap.conf |
(String) Path to the rootwrap configuration file to use for running commands as root. The cinder store requires root privileges to operate the image volumes (for connecting to iSCSI/FC volumes and reading/writing the volume data, etc.). The configuration file should allow the required commands by cinder store and os-brick library. Possible values:
Related options:
|
[healthcheck] | |
backends = |
(List) Additional backends that can perform health checks and report that information back as part of a request. |
detailed = False |
(Boolean) Show more detailed information as part of the response |
disable_by_file_path = None |
(String) Check the presence of a file to determine if an application is running on a port. Used by DisableByFileHealthcheck plugin. |
disable_by_file_paths = |
(List) Check the presence of a file based on a port to determine if an application is running on a port. Expects a “port:path” list of strings. Used by DisableByFilesPortsHealthcheck plugin. |
path = /healthcheck |
(String) DEPRECATED: The path to respond to healtcheck requests on. |
[image_format] | |
container_formats = ami, ari, aki, bare, ovf, ova, docker |
(List) Supported values for the ‘container_format’ image attribute |
disk_formats = ami, ari, aki, vhd, vhdx, vmdk, raw, qcow2, vdi, iso, ploop |
(List) Supported values for the ‘disk_format’ image attribute |
[task] | |
task_executor = taskflow |
(String) Task executor to be used to run task scripts. Provide a string value representing the executor to use for task executions. By default,
Possible values:
Related Options:
|
task_time_to_live = 48 |
(Integer) Time in hours for which a task lives after, either succeeding or failing |
work_dir = /work_dir |
(String) Absolute path to the work directory to use for asynchronous task operations. The directory set here will be used to operate over images - normally before they are imported in the destination store. NOTE: When providing a value for A rough estimation can be done by multiplying the number of Possible values:
Related Options:
|
Configuration option = Default value | Description |
---|---|
[DEFAULT] | |
delayed_delete = False |
(Boolean) Turn on/off delayed delete. Typically when an image is deleted, the NOTE: When delayed delete is turned on, image scrubber MUST be running as a periodic task to prevent the backend storage from filling up with undesired usage. Possible values:
Related options:
|
image_cache_dir = None |
(String) Base directory for image cache. This is the location where image data is cached and served out of. All cached images are stored directly under this directory. This directory also contains three subdirectories, namely, The The Possible values:
Related options:
|
image_cache_driver = sqlite |
(String) The driver to use for image cache management. This configuration option provides the flexibility to choose between the different image-cache drivers available. An image-cache driver is responsible for providing the essential functions of image-cache like write images to/read images from cache, track age and usage of cached images, provide a list of cached images, fetch size of the cache, queue images for caching and clean up the cache, etc. The essential functions of a driver are defined in the base class
Possible values:
Related options:
|
image_cache_max_size = 10737418240 |
(Integer) The upper limit on cache size, in bytes, after which the cache-pruner cleans up the image cache. NOTE: This is just a threshold for cache-pruner to act upon. It is NOT a hard limit beyond which the image cache would never grow. In fact, depending on how often the cache-pruner runs and how quickly the cache fills, the image cache can far exceed the size specified here very easily. Hence, care must be taken to appropriately schedule the cache-pruner and in setting this limit. Glance caches an image when it is downloaded. Consequently, the size of the image cache grows over time as the number of downloads increases. To keep the cache size from becoming unmanageable, it is recommended to run the cache-pruner as a periodic task. When the cache pruner is kicked off, it compares the current size of image cache and triggers a cleanup if the image cache grew beyond the size specified here. After the cleanup, the size of cache is less than or equal to size specified here. Possible values:
Related options:
|
image_cache_sqlite_db = cache.db |
(String) The relative path to sqlite file database that will be used for image cache management. This is a relative path to the sqlite file database that tracks the age and usage statistics of image cache. The path is relative to image cache base directory, specified by the configuration option This is a lightweight database with just one table. Possible values:
Related options:
|
image_cache_stall_time = 86400 |
(Integer) The amount of time, in seconds, an incomplete image remains in the cache. Incomplete images are images for which download is in progress. Please see the description of configuration option It is recommended to run cache-cleaner as a periodic task on the Glance API nodes to keep the incomplete images from occupying disk space. Possible values:
Related options:
|
scrub_pool_size = 1 |
(Integer) The size of thread pool to be used for scrubbing images. When there are a large number of images to scrub, it is beneficial to scrub images in parallel so that the scrub queue stays in control and the backend storage is reclaimed in a timely fashion. This configuration option denotes the maximum number of images to be scrubbed in parallel. The default value is one, which signifies serial scrubbing. Any value above one indicates parallel scrubbing. Possible values:
Related options:
|
scrub_time = 0 |
(Integer) The amount of time, in seconds, to delay image scrubbing. When delayed delete is turned on, an image is put into It is important to realize that this has storage implications. The larger the Possible values:
Related options:
|
Configuration option = Default value | Description |
---|---|
[profiler] | |
connection_string = messaging:// |
(String) Connection string for a notifier backend. Default value is messaging:// which sets the notifier to oslo_messaging. Examples of possible values:
|
enabled = False |
(Boolean) Enables the profiling for all services on this node. Default value is False (fully disable the profiling feature). Possible values:
|
es_doc_type = notification |
(String) Document type for notification indexing in elasticsearch. |
es_scroll_size = 10000 |
(Integer) Elasticsearch splits large requests in batches. This parameter defines maximum size of each batch (for example: es_scroll_size=10000). |
es_scroll_time = 2m |
(String) This parameter is a time value parameter (for example: es_scroll_time=2m), indicating for how long the nodes that participate in the search will maintain relevant resources in order to continue and support it. |
hmac_keys = SECRET_KEY |
(String) Secret key(s) to use for encrypting context data for performance profiling. This string value should have the following format: <key1>[,<key2>,...<keyn>], where each key is some random string. A user who triggers the profiling via the REST API has to set one of these keys in the headers of the REST API call to include profiling results of this node for this particular project. Both “enabled” flag and “hmac_keys” config options should be set to enable profiling. Also, to generate correct profiling information across all services at least one key needs to be consistent between OpenStack projects. This ensures it can be used from client side to generate the trace, containing information from all possible resources. |
sentinel_service_name = mymaster |
(String) Redissentinel uses a service name to identify a master redis service. This parameter defines the name (for example: sentinal_service_name=mymaster). |
socket_timeout = 0.1 |
(Floating point) Redissentinel provides a timeout option on the connections. This parameter defines that timeout (for example: socket_timeout=0.1). |
trace_sqlalchemy = False |
(Boolean) Enables SQL requests profiling in services. Default value is False (SQL requests won’t be traced). Possible values:
|
Configuration option = Default value | Description |
---|---|
[matchmaker_redis] | |
check_timeout = 20000 |
(Integer) Time in ms to wait before the transaction is killed. |
host = 127.0.0.1 |
(String) DEPRECATED: Host to locate redis. Replaced by [DEFAULT]/transport_url |
password = |
(String) DEPRECATED: Password for Redis server (optional). Replaced by [DEFAULT]/transport_url |
port = 6379 |
(Port number) DEPRECATED: Use this port to connect to redis host. Replaced by [DEFAULT]/transport_url |
sentinel_group_name = oslo-messaging-zeromq |
(String) Redis replica set name. |
sentinel_hosts = |
(List) DEPRECATED: List of Redis Sentinel hosts (fault tolerance mode), e.g., [host:port, host1:port ... ] Replaced by [DEFAULT]/transport_url |
socket_timeout = 10000 |
(Integer) Timeout in ms on blocking socket operations. |
wait_timeout = 2000 |
(Integer) Time in ms to wait between connection attempts. |
Configuration option = Default value | Description |
---|---|
[DEFAULT] | |
admin_password = None |
(String) DEPRECATED: The administrators password. If “use_user_token” is not in effect, then admin credentials can be specified. This option was considered harmful and has been deprecated in M release. It will be removed in O release. For more information read OSSN-0060. Related functionality with uploading big images has been implemented with Keystone trusts support. |
admin_tenant_name = None |
(String) DEPRECATED: The tenant name of the administrative user. If “use_user_token” is not in effect, then admin tenant name can be specified. This option was considered harmful and has been deprecated in M release. It will be removed in O release. For more information read OSSN-0060. Related functionality with uploading big images has been implemented with Keystone trusts support. |
admin_user = None |
(String) DEPRECATED: The administrators user name. If “use_user_token” is not in effect, then admin credentials can be specified. This option was considered harmful and has been deprecated in M release. It will be removed in O release. For more information read OSSN-0060. Related functionality with uploading big images has been implemented with Keystone trusts support. |
auth_region = None |
(String) DEPRECATED: The region for the authentication service. If “use_user_token” is not in effect and using keystone auth, then region name can be specified. This option was considered harmful and has been deprecated in M release. It will be removed in O release. For more information read OSSN-0060. Related functionality with uploading big images has been implemented with Keystone trusts support. |
auth_strategy = noauth |
(String) DEPRECATED: The strategy to use for authentication. If “use_user_token” is not in effect, then auth strategy can be specified. This option was considered harmful and has been deprecated in M release. It will be removed in O release. For more information read OSSN-0060. Related functionality with uploading big images has been implemented with Keystone trusts support. |
auth_url = None |
(String) DEPRECATED: The URL to the keystone service. If “use_user_token” is not in effect and using keystone auth, then URL of keystone can be specified. This option was considered harmful and has been deprecated in M release. It will be removed in O release. For more information read OSSN-0060. Related functionality with uploading big images has been implemented with Keystone trusts support. |
registry_client_ca_file = /etc/ssl/cafile/file.ca |
(String) Absolute path to the Certificate Authority file. Provide a string value representing a valid absolute path to the certificate authority file to use for establishing a secure connection to the registry server. NOTE: This option must be set if Possible values:
Related options:
|
registry_client_cert_file = /etc/ssl/certs/file.crt |
(String) Absolute path to the certificate file. Provide a string value representing a valid absolute path to the certificate file to use for establishing a secure connection to the registry server. NOTE: This option must be set if Possible values:
Related options:
|
registry_client_insecure = False |
(Boolean) Set verification of the registry server certificate. Provide a boolean value to determine whether or not to validate SSL connections to the registry server. By default, this option is set to If set to Possible values:
Related options:
|
registry_client_key_file = /etc/ssl/key/key-file.pem |
(String) Absolute path to the private key file. Provide a string value representing a valid absolute path to the private key file to use for establishing a secure connection to the registry server. NOTE: This option must be set if Possible values:
Related options:
|
registry_client_protocol = http |
(String) Protocol to use for communication with the registry server. Provide a string value representing the protocol to use for communication with the registry server. By default, this option is set to This option can be set to Possible values:
Related options:
|
registry_client_timeout = 600 |
(Integer) Timeout value for registry requests. Provide an integer value representing the period of time in seconds that the API server will wait for a registry request to complete. The default value is 600 seconds. A value of 0 implies that a request will never timeout. Possible values:
Related options:
|
registry_host = 0.0.0.0 |
(String) Address the registry server is hosted on. Possible values:
Related options:
|
registry_port = 9191 |
(Port number) Port the registry server is listening on. Possible values:
Related options:
|
Configuration option = Default value | Description |
---|---|
[DEFAULT] | |
args = None |
(Multi-valued) Arguments for the command |
chunksize = 65536 |
(Integer) Amount of data to transfer per HTTP write. |
command = None |
(String) Command to be given to replicator |
dontreplicate = created_at date deleted_at location updated_at |
(String) List of fields to not replicate. |
mastertoken = |
(String) Pass in your authentication token if you have one. This is the token used for the master. |
metaonly = False |
(Boolean) Only replicate metadata, not images. |
slavetoken = |
(String) Pass in your authentication token if you have one. This is the token used for the slave. |
token = |
(String) Pass in your authentication token if you have one. If you use this option the same token is used for both the master and the slave. |
Configuration option = Default value | Description |
---|---|
[DEFAULT] | |
wakeup_time = 300 |
(Integer) Time interval, in seconds, between scrubber runs in daemon mode. Scrubber can be run either as a cron job or daemon. When run as a daemon, this configuration time specifies the time period between two runs. When the scrubber wakes up, it fetches and scrubs all If the wakeup time is set to a large number, there may be a large number of images to be scrubbed for each run. Also, this impacts how quickly the backend storage is reclaimed. Possible values:
Related options:
|
Configuration option = Default value | Description |
---|---|
[taskflow_executor] | |
conversion_format = raw |
(String) Set the desired image conversion format. Provide a valid image format to which you want images to be converted before they are stored for consumption by Glance. Appropriate image format conversions are desirable for specific storage backends in order to facilitate efficient handling of bandwidth and usage of the storage infrastructure. By default, The allowed values for this option are Possible values:
Related options:
|
engine_mode = parallel |
(String) Set the taskflow engine mode. Provide a string type value to set the mode in which the taskflow engine would schedule tasks to the workers on the hosts. Based on this mode, the engine executes tasks either in single or multiple threads. The possible values for this configuration option are: Possible values:
Related options:
|
max_workers = 10 |
(Integer) Set the number of engine executable tasks. Provide an integer value to limit the number of workers that can be instantiated on the hosts. In other words, this number defines the number of parallel tasks that can be executed at the same time by the taskflow engine. This value can be greater than one when the engine mode is set to parallel. Possible values:
Related options:
|
Configuration option = Default value | Description |
---|---|
[DEFAULT] | |
pydev_worker_debug_host = localhost |
(String) Host address of the pydev server. Provide a string value representing the hostname or IP of the pydev server to use for debugging. The pydev server listens for debug connections on this address, facilitating remote debugging in Glance. Possible values:
Related options:
|
pydev_worker_debug_port = 5678 |
(Port number) Port number that the pydev server will listen on. Provide a port number to bind the pydev server to. The pydev process accepts debug connections on this port and facilitates remote debugging in Glance. Possible values:
Related options:
|
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.