On Fri, May 29, 2015 at 1:48 PM Jeremy Stanley <fu...@yuggoth.org> wrote:

> On 2015-05-28 23:09:41 +0200 (+0200), Thomas Goirand wrote:
> > Also, it is my understanding that infra will not accept to use
> > long-living VMs, and prefer to spawn new instances.
>
> Right, after we run arbitrary user-submitted code on a server, we cease to
> be able to trust it and so immediately delete and replace it.
>

I think is unnecessarily maximalist. Trust is not an all-or-nothing boolean
flag: why can't you trust that server to do more work at the same level of
trust and run another batch of user-submitted code?
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to