= Main Inclusion Report for image-store-proxy =

## '''Note''': when writing a report this template should be vigorously edited; as a rule of thumb, every individual point should be replaced with a description of the actual situation in the package in question.  The purpose of the report is to convey information to the reviewer, so there is no problem with varying the text in the bullet items, or with adding additional information.

## Please be informative, and in particular be thorough in investigating and explaining any weaknesses and problems with the package.  The purpose of the report is to show to the reviewer that the package has been properly investigated, and to give the reviewer the information from that investigation, for their decision.

== Requirements ==

 0. ''Availability:'' [[http://archive.ubuntu.com/ubuntu/pool/universe/i/image-store-proxy]]; available for all supported architectures (it's a pure python package).
 0. ''Rationale:''
  * The newly introduced Image Store UI in Eucalyptus relies on a local proxy in order to perform searches, queries, and to emit commands for image downloading and installation.
  * The Image Store Proxy sits in the middle of three entities: the Eucalyptus Image Store UI, the Eucalyptus S3 and EC2 APIs, and the upstream Canonical Image Store API:
  * {{{
                Canonical Image Store API
                -------------------------
                           ^
                           |
                           |
                 ---------------------
                 | Image Store Proxy |
                 ---------------------
                   ^               |
                   |               |
                   |               v
    ------------------           -----------------
    | Eucalyptus     |           |   Eucalyptus  |
    | Image Store UI |           | S3 & EC2 APIs |
    ------------------           -----------------
}}}
  * The Eucalyptus UI talks to the proxy to obtain information about which images are available, and also to do requests for installing images, canceling previously requested actions, and obtaining progress information about on going requests.
  * The Image Store Proxy talks to the upstream Canonical Image Store API to satisfy information requests done by the Eucalyptus UI, and once requested to install an image, will download the necessary files to the local file system using information provided by the upstream Canonical API, and then use the euca2ools suite to bundle, upload and register images in Eucalyptus through the EC2 and S3 APIs.
  
 0. ''Security:''
  * [[http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=image-store-proxy|CVE entries]]: 0.
  * [[http://secunia.com/search/?search=image-store-proxy|Secunia history]]: 0
  * Any binaries running as root or suid/sgid ? No
  * Any daemons: yes. The proxy is a daemon based on twisted.
  * Network activity: 
    * Does it open any port ? yes
    * Does it handle incoming network data ? yes.
  * Does it directly (not through a library) process binary (video, audio, etc) or structured (PDF, etc) data ? No. Although images from the Canonical Store are downloaded it uses the euca2ools/ec2 (external) tools to actually modify the downloaded images.
  * Any source code review performed ?  No.

 0. ''Quality assurance:''
  * In what situations does the package not work out of the box without configuration ? None. The default installation starts a daemon which listen on port 52780.
  * Does the package ask any debconf questions higher than priority 'medium' ? No.
  * Debian bugs: Not in Debian.
  * [[https://launchpad.net/image-store-proxy/|Upstream]] is vigorous.
  * [[https://bugs.launchpad.net/image-store-proxy|Upstream bug tracker]]: 0 bugs.
  * Hardware: Does this package deal with hardware and if so how exotic is it ? No.
  * Is there a test suite in the upstream source or packaging ? Yes.
    * Is it enabled to run in the build ? No.
 0. ''UI standards:''
  * There is only a command line to start the daemon.
  * User-visible strings are internationalized using standard gettext system ? No.
  * Package with translatable strings builds a PO template during package build ? No.
  * End-user applications ship a desktop file ? Not applicable.
 0. ''Standards compliance:'' 
  * [[http://www.pathname.com/fhs/|FHS]], [[http://www.de.debian.org/doc/debian-policy/|Debian Policy]] compliance ? Yes.
  * Packaging system: cdbs. No Patch system.
 0. ''Dependencies:''
  * python-twisted-web, python-pycurl,eucalyptus-common
  * All in main.
 0. ''Maintenance:''
  * How much maintenance is this package likely to need ? Simple package.
  * Who is responsible for monitoring the quality of this package and fixing its bugs ?  Are they Ubuntu or Debian developers ? Ubuntu Server team with the upstream Canonical developers.
  * Who is the package bug contact in Ubuntu? The ubuntu-server team.
 0. ''Background information:''
  * What do upstream call this software ? image-store-proxy.
    * Has it had different names in the past ? No
 0. ''Internationalization:''
  * Are graphical applications translatable? Do they support gettext? No GUI.

== Reviewers ==

MIR bug: [[https://launchpad.net/bugs/429894]]

''MathiasGug''