Theoslo.privsep client can be called from a program using eventlet.Ifeventlet.monkey_patch, some libraries will be patched, for examplethreading oros. When the root daemon is forked from the clientprocess, those libraries remain patched. Now, when the daemon is forkedfrom the client process, those libraries and methods are restored to theoriginal values. The goal is to prevent some timeouts when using eventletthreads (user threads); system threads are preemptive and the code doesnot need to care about the executor token.

Support for Python 2.7 has been dropped. The minimum version of Python nowsupported is Python 3.6.

When the privsep helper dies, the client side PrivContext now restarts theclient channel and the helper so that privileged commands can continue tobe processed. Seebug 1715374 for details. In conjunction with the fixforbug 1794708 in oslo.service, the nova-compute service now behavescorrectly when it receivesSIGHUP.

Privsep now uses multithreading to allow concurrency in executingprivileged commands. The number of concurrent threads defaults to theavailable CPU cores, but can be adjusted by the newthread_pool_sizeconfig option.

Switch to reno for managing release notes.