tree ffee0f55c26eba67387848ee3a15dd815b091b3f
parent f80b067343600a7554059afaa351448eaaaf13a2
author kairat_kushaev <kkushaev@mirantis.com> 1510047698 +0400
committer kairat_kushaev <kkushaev@mirantis.com> 1510306167 +0400

Make libvirt safe again

At the current moment libvirt is not authenticated and listens
all incoming connection on his port.
The current patch proposes:
1. Use unix socket to connect to libvirt from nova compute
so it won't be affected by
2. protect libvirt port with firewall.
so we will drop all connections to libvirt port from anywhere.
Live migrations seems not be affected because at the current
configuration it seems libvirt uses another randomly-chosen port.

Rel-Prod: 15651
Change-Id: I1dcca1ad34029b5c158c4013036f33827255235b