Automic VaultAutomic Vault

brew / 受保护工具覆盖

使用 Homebrew, Nix 安装 openstackclient

查看 openstackclient 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install openstackclient

local Homebrew formula metadata

概览

软件包摘要

Command-line client for OpenStack

命令和别名

  • openstack

历史

项目历史与用法

OpenStackClient, also packaged as `python-openstackclient`, is the unified `openstack` command-line interface for OpenStack clouds. It brings commands for services such as Compute, Identity, Image, Network, Object Store, and Block Storage into one command structure, replacing the older habit of juggling service-specific CLIs such as `nova`, `glance`, and `keystone`.

项目历史

OpenStack’s early client experience mirrored its service architecture: each major project shipped its own Python client and CLI. The UnifiedCLI proposal documented the pain of inconsistent commands, options, and terminology, and proposed a single OpenStack CLI that reused existing client modules where possible rather than duplicating every REST implementation.

The `python-openstackclient` project turned that design goal into the `openstack` binary. Its documentation states the primary goal as a unified shell command structure and common language for OpenStack operations, with additional service APIs available through plugins.

采用历史

OpenStackClient became the operator-facing CLI because it matched how cloud administrators and users actually work: they create projects, images, networks, volumes, servers, users, roles, and quotas across service boundaries. OpenStack release notes track OpenStackClient versions alongside OpenStack named releases, emphasizing cross-release compatibility instead of a one-client-per-cloud-version model.

Distributions and package managers package it as a Python application because OpenStack deployments often rely on scripted administration. Debian describes it as a thin wrapper over the stock Python service client modules, which captures its role as a unifying front end over the OpenStack client ecosystem.

使用方式

Operators configure authentication through environment variables, command-line options, or `clouds.yaml`, then use `openstack` commands for day-to-day cloud administration and automation. Output format options such as table, JSON, YAML, CSV, and value-oriented output make it useful both for humans and scripts.

The CLI is also a compatibility layer for OpenStack documentation and support: operational runbooks can say `openstack server list` or `openstack network create` without teaching users which legacy service-specific binary owns each resource.

为什么软件包爱好者会关心

The package is interesting because it is less a standalone tool than a negotiated interface across a large plugin-heavy cloud platform. Its dependency graph, Python compatibility, OpenStackSDK integration, and release-series mapping matter to anyone packaging private-cloud tooling.

时间线

  • 2010: OpenStack began as an open-source cloud platform, creating the multi-service client problem that OpenStackClient later addressed.
  • 2010s: the UnifiedCLI design documented the plan for a single OpenStack command structure over service-specific clients.
  • 2014: OpenStack Juno-era packaging used OpenStackClient 0.4.1, showing the tool’s early place in named OpenStack release cycles.
  • 2023: Antelope/2023.1 release notes mapped OpenStackClient 6.1.0 to that OpenStack release.

Related projects

  • Related packages include OpenStackSDK and service clients such as python-novaclient, python-glanceclient, python-cinderclient, python-neutronclient, and python-keystoneclient. OpenStackClient sits above them as the consistent user-facing shell.

受保护工具覆盖

Plain Text OpenStack Cloud Credentials

`openstack` reads ~/.config/openstack/clouds.yaml and optional ~/.config/openstack/secure.yaml, and those files can contain plaintext passwords, tokens, and application credential secrets. Our isotope migrates single-cloud password, token, and application credential secret values into the macOS keychain as OS_* environment assignments. More complex configs still fall back to storing the original config files in the keychain and reconstructing them in a temporary config directory only while `openstack` runs.

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 5 个运行时依赖。

本地 README 摘录

openstackclient Protected-tool coverage

openstack reads ~/.config/openstack/clouds.yaml and optional ~/.config/openstack/secure.yaml, and those files can contain plaintext passwords, tokens, and application credential secrets.

For a single configured cloud with simple password, token, or application_credential_secret values, this protected-tool coverage migrates the secret values into the Automic Vault keychain as OS_* environment assignments, blanks those fields on disk, and wraps openstack so the values are injected only while the CLI runs.

More complex configs still use the older config-wrapper fallback: the original default user OpenStack config files are stored in the keychain, supported secret values are blanked on disk, and openstack reconstructs the original files in a temporary config directory only while the CLI runs.

Caveats

  • We currently migrate only ~/.config/openstack/clouds.yaml and

~/.config/openstack/secure.yaml.

  • The OS_* env path is limited to single-cloud configs with simple scalar

secret values.

  • Multi-cloud configs and complex YAML secret values fall back to temporary

config reconstruction.

  • Only password, token, and application credential secret fields are blanked

on disk during migration.

  • Project-local ./clouds.yaml files and /etc/openstack are not migrated.
  • Runtime config changes made while openstack runs are written to the

temporary files and are not persisted back to keychain.

  • Direct execution of the original binary will not receive credentials.

来源: local coverage notes

覆盖来源

来源摘录

注意事项

  • We currently migrate only ~/.config/openstack/clouds.yaml and secure.yaml.
  • The OS_* env path is limited to single-cloud configs with simple scalar secret values.
  • Multi-cloud configs and complex YAML secret values fall back to temporary config reconstruction.
  • Only password, token, and application credential secret fields are blanked.
  • Project-local ./clouds.yaml files and /etc/openstack are not migrated.
  • Runtime config changes are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.config/openstack/clouds.yaml~/.config/openstack/secure.yaml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.config/openstack/clouds.yaml~/.config/openstack/secure.yaml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
openstackcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-07
管理器版本10.1.0
管理器更新时间2026-06-20
本地数据OK
上游not checked
检测到的最新版本未检测到

https://openstack.org

  • 信息Release/tag comparison is only available for GitHub repositories.https://openstack.orgnone 置信度

安装元数据

软件包元数据

软件包键brew:openstackclient
版本10.1.0
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/openstackclient
主页https://openstack.org
仓库https://opendev.org/openstack/python-openstackclient
上游文档https://docs.openstack.org/python-openstackclient/latest
许可证Apache-2.0
源码归档https://files.pythonhosted.org/packages/84/bb/597fc8c39fe593e43089b7eb035b40f5df44c73e4afad3fb8a6163d51010/python_openstackclient-10.1.0.tar.gz
最后更新2026-06-20T11:21:11Z
Pulseupdated
依赖certifi, cryptography, libyaml, python@3.14, rpds-py
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameopenstackclient
Version Scheme0
Revision1
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Nix95%

openstackclient

nix profile install nixpkgs#openstackclient
  • normalized package name match
  • 匹配方式：Openstackclient
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: openstackclient from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

相同工作流

  • scwShares av.db curated category or tags: cli, cloud, cloud-infrastructure, infrastructure.
  • aiven-clientShares av.db curated category or tags: cli, cloud, cloud-infrastructure.
  • aliyun-cliShares av.db curated category or tags: cli, cloud, cloud-infrastructure.
  • firebase-cliShares av.db curated category or tags: cli, cloud, cloud-infrastructure.
  • linode-cliShares av.db curated category or tags: cli, cloud, cloud-infrastructure.
  • s4cmdShares av.db curated category or tags: cli, cloud-infrastructure, python.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • local coverage README
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • secret-handling manifest