Skip to main content
openstack-glance OpenStack Glance image service skill for deploying, configuring, operating, and troubleshooting the VM image registry. Covers image upload/download, format management (qcow2, raw, vmdk, vhd, iso), backend storage selection (file, swift, ceph), image import methods (web-download, glance-direct, copy-image), metadata management, property protections, image sharing between projects, snapshot lifecycle, image caching, and storage usage monitoring. Use when deploying Glance via Kolla-Ansible, managing VM images, converting image formats, or troubleshooting image upload failures.
الانتقال إلى التثبيت سوق المهارات اكتشف واستكشف مهارات الذكاء الاصطناعي التي بناها المجتمع.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
عرض تفاصيل Prompt يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/Tibsfox/gsd-skill-creator --skill openstack-glanceيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
تحميل Zip جاري التحميل... المزيد من هذا المستودع Use the moment a request is underspecified and you are about to act on an ASSUMED goal. Enumerate the candidate goals the request could mean, project the action or artifact each one implies, and check whether they diverge: if two or more plausible goals lead to materially different actions or artifacts, ask exactly ONE targeted clarifying question; otherwise proceed on the most-likely goal and state the assumption in one line. Clarification is an evidence-producing action, not a delay — but one question, never an interrogation. Distinct from gsd-spec-phase (GSD-phase-bound, emits a heavy SPEC.md) and intent-router (fetch strategy, not goal disambiguation). Backed by agent goal-state inference (arxiv 2606.16813v1). Triggers on acting under an assumed goal when the request admits more than one materially different reading.
Use at write time to vector/embedding memory — Grove content-addressed insertion, chroma/pgvector upserts, memory-consolidation promoting session traces to MEMORY.md, or embedding externally-ingested content. Scores each candidate record against a fixed panel of sentinel queries and quarantines any record that would become the nearest neighbor of too many unrelated queries — a hub — whether from adversarial poisoning or accidental over-generality. This is the memory-record-side sibling of skill-injection-guardian (file-side) and the write-side complement of memory-use-warrant (read-side). Quarantine, never silently drop; a human reviews. Backed by the admission-time hubness gate (arxiv 2606.19692v1). Triggers on inserting into vector memory, consolidating memory, and embedding stranger content.
Run this appropriateness check the moment you are about to integrate a retrieved long-term memory — a Grove content-addressed hit, a chroma/pgvector neighbour, a memory-consolidation digest, or a MEMORY.md line — into a response, especially anything touching private origins, Fox Companies IP, credentials, or Center Camp / consent-governed content. It answers a question intent-router never asks: not WHAT to fetch or HOW, but WHETHER a correctly-retrieved item should reach output. Relevance is not appropriateness — a perfect similarity match can still be a boundary violation. Default is FAIL-CLOSED: if in-context authorization is uncertain, the memory may inform behaviour but must not be surfaced. Backed by RBI-Eval (arxiv 2606.06055v1). Triggers on surfacing recalled sensitive memory into a response.
المهن ذات الصلة SOC
استنادا إلى تصنيف SOC المهني
name openstack-glance description OpenStack Glance image service skill for deploying, configuring, operating, and troubleshooting the VM image registry. Covers image upload/download, format management (qcow2, raw, vmdk, vhd, iso), backend storage selection (file, swift, ceph), image import methods (web-download, glance-direct, copy-image), metadata management, property protections, image sharing between projects, snapshot lifecycle, image caching, and storage usage monitoring. Use when deploying Glance via Kolla-Ansible, managing VM images, converting image formats, or troubleshooting image upload failures. user-invocable true allowed-tools Read Grep Glob metadata {"extensions":{"gsd-skill-creator":{"version":1,"createdAt":"2026-02-22","triggers":{"intents":["glance","image","snapshot","image format","qcow2","raw","image import","image registry"],"contexts":["deploying openstack images","managing vm images","troubleshooting image service","converting image formats"]}}}}
OpenStack Glance Image Service
Glance is the image catalog and delivery service for OpenStack. It stores, discovers, and serves virtual machine images that Nova uses to boot instances. Glance handles image metadata, format validation, access control, and backend storage abstraction -- it does not care where images are physically stored, only that they are retrievable.
Supported image formats:
qcow2
raw
vmdk
vhd/vhdx
iso
file
swift
ceph
cinder
Deploy
Kolla-Ansible Configuration
glance_backend_file: "yes"
glance_database_password: "{{ vault_glance_database_password }} "
glance_keystone_password: "{{ vault_glance_keystone_password }} "
kolla-ansible -i inventory deploy --tags glance
docker ps --filter "name=glance" --format "table {{.Names}}\t{{.Status}}"
Post-deploy verification:
source /etc/kolla/admin-openrc.sh
openstack service list | grep image
openstack endpoint list --service glance
wget http://download.cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img
openstack image create --file cirros-0.6.2-x86_64-disk.img \
--disk-format qcow2 --container-format bare \
--public cirros
openstack image list
openstack image show cirros
Image Import Task Setup For web-download and glance-direct import methods:
enabled_import_methods = [glance-direct, web-download, copy-image]
task_executor = taskflow
work_dir = /var/lib/glance/tasks_work_dir
Configure
Backend Storage Selection Backend Use Case Pros Cons file Single-node, lab, development Simplest, no dependencies No HA, limited by local disk swift Multi-node with Swift deployed Native OpenStack, scalable Requires Swift deployment ceph Multi-node production High availability, consistent performance Requires Ceph cluster cinder Boot-from-volume workflows Leverages existing block storage Higher latency for image serving
Image Format Policies
disk_formats = qcow2,raw,iso
container_formats = bare,docker
default_disk_format = qcow2
Image Size Limits
image_size_cap = 13743895347
Image Caching Glance cache stores frequently requested images locally on the API node for faster serving:
image_cache_max_size = 10737418240
image_cache_stall_time = 86400
image_cache_dir = /var/lib/glance/image-cache
Metadata Definitions Glance supports structured metadata namespaces for organizing image properties:
openstack image metadata namespace list
openstack image set --property os_type=linux \
--property os_distro=ubuntu \
--property os_version=22.04 \
my-image
Property Protections Control which users can read/write specific image properties:
[x_billing_code]
create = role:admin
read = role:admin,role:member
update = role:admin
delete = role:admin
Image Import Methods
glance image-create-via-import --name web-image \
--disk-format qcow2 --container-format bare \
--import-method web-download \
--uri http://example.com/image.qcow2
glance image-create-via-import --name direct-image \
--disk-format qcow2 --container-format bare \
--import-method glance-direct \
--file local-image.qcow2
glance image-import --import-method copy-image --stores fast-store <image-id>
Operate
Image Upload and Download
openstack image create --file ubuntu-22.04.qcow2 \
--disk-format qcow2 --container-format bare \
--min-disk 10 --min-ram 1024 \
--public ubuntu-22.04
openstack image save --file downloaded.qcow2 <image-id>
qemu-img convert -f qcow2 -O raw ubuntu-22.04.qcow2 ubuntu-22.04.raw
openstack image create --file ubuntu-22.04.raw \
--disk-format raw --container-format bare ubuntu-22.04-raw
Format Conversion
qemu-img convert -f qcow2 -O raw input.qcow2 output.raw
qemu-img convert -f vmdk -O qcow2 input.vmdk output.qcow2
qemu-img info image.qcow2
Image Sharing Between Projects
openstack image add project <image-id> <target-project-id>
openstack image set --accept <image-id>
openstack image list --shared
openstack image remove project <image-id> <target-project-id>
Snapshot Management
openstack server image create --name my-snapshot my-instance
openstack image list --property image_type=snapshot
openstack image show my-snapshot -c status
Storage Usage Monitoring
openstack image list --long -f json | python3 -c "
import json, sys
images = json.load(sys.stdin)
total = sum(i.get('Size', 0) or 0 for i in images)
print(f'Total: {total / (1024**3):.2f} GB across {len(images)} images')
"
du -sh /var/lib/docker/volumes/glance/_data/images/
glance-manage db purge --age_in_days 30 --max_rows 100
Image Metadata Management
openstack image set \
--property hw_disk_bus=scsi \
--property hw_scsi_model=virtio-scsi \
--property hw_vif_model=virtio \
--property os_type=linux \
<image-id>
openstack image unset --property hw_disk_bus <image-id>
openstack image set --min-disk 20 --min-ram 2048 <image-id>
Troubleshoot
1. Image Upload Failures Symptoms: openstack image create hangs or returns error. Image stuck in "queued" state.
docker logs glance_api 2>&1 | tail -50
Cause Diagnosis Fix Storage full df -h /var/lib/docker/volumes/glance/Free space or expand storage Permission denied Glance logs: "Permission denied" on data dir Fix ownership: chown -R 42415:42415 /var/lib/docker/volumes/glance/ Size limit exceeded Glance logs: "image_size_cap" Increase image_size_cap in glance-api.conf or reduce image Database connection Glance logs: "OperationalError" Check MariaDB connectivity
2. Image Download Slow or Fails Symptoms: Nova instance boot takes very long. Image download timeout.
openstack image show <image-id> -c size
docker exec glance_api ls -la /var/lib/glance/images/<image-id>
docker logs nova_compute 2>&1 | grep -i "glance\|image\|download"
Enable image caching on compute nodes (nova.conf [image_cache])
Convert large qcow2 to raw for faster I/O
Check network bandwidth between API and compute nodes
Pre-cache images: openstack image set --property os_glance_caching=true <id>
3. Format Conversion Errors Symptoms: qemu-img convert fails. Image creates but won't boot.
qemu-img check input.qcow2
qemu-img info input.qcow2
Corrupted source: re-download original image
Unsupported format: convert through an intermediate format (vmdk -> qcow2 -> raw)
Wrong format specified: verify actual format with qemu-img info before uploading
4. Image Stuck in "saving" State Symptoms: Image shows status "saving" indefinitely.
docker logs glance_api 2>&1 | grep <image-id>
ls -la /var/lib/docker/volumes/glance/_data/images/<image-id>
Backend write timeout: increase [DEFAULT] image_size_cap and retry
Storage I/O error: check disk health with smartctl and dmesg
Reset stuck image: openstack image set --status error <image-id> then delete and re-upload
5. Metadata Service Issues Symptoms: Image property updates rejected. "403 Forbidden" when setting properties.
docker exec glance_api cat /etc/glance/property-protections.conf
docker exec glance_api cat /etc/glance/policy.yaml
Property protection blocking: update property-protections.conf to allow the role
RBAC denial: check policy.yaml for image modification rules
Reserved property namespace: properties starting with os_ may require admin role
Integration Points Service Integration Mechanism Keystone Authentication for all API calls; service user for internal operations keystonemiddleware in glance-api Nova Image retrieval for instance boot; snapshot upload after server image create Nova calls Glance REST API to download images to compute cache Cinder Volume-from-image: create bootable volume from Glance image Cinder calls Glance API, copies image data into volume Swift Backend storage option: images stored as Swift objects glance-api uses swift client to store/retrieve image data
NASA SE Cross-References SE Phase Glance Activity Reference Phase B (Preliminary Design) Select image backend (file vs swift vs ceph), define supported formats, plan storage capacity SP-6105 SS 4.3-4.4 Phase C (Final Design) Configure Glance in globals.yml: backend, data directory, size limits, import methods SP-6105 SS 5.1 Phase D (Integration & Test) Verify: image upload, image download, instance boot from image, snapshot create/restore SP-6105 SS 5.2-5.3 Phase E (Operations) Image lifecycle management, format conversion, storage monitoring, cache maintenance, soft-delete cleanup SP-6105 SS 5.4-5.5, NPR 7123.1 SS 5.4
