On Fri, Aug 17, 2018 at 09:56:28PM +0200, Thomas Goirand wrote: :Hi Max, : :Why would one want to configure OpenStack to not provide a video console :using VNC / SPICE? I don't get it...
Not sure why Max doesn't but one reason is OpenStack's VNC isn't really secured except by proxy so if you get bridged into the network the hypervisors are on you can connect to the VNC consoles directly on the hyprevisor with no auth. This may have happened to me before where some insufficient firewall rules exposed raw VNC ports of some of me VMs to the public internet, which I discoved after a soemone out side did. So I can image wanting to run "headless" even though we do still provide VNC, just a bit more carefully. -Jon
