[libvirt] [PATCH 11/14] qemu: command: Add support for qcow2 + luks

Ján Tomko jtomko at redhat.com
Sat Mar 31 12:22:41 UTC 2018


On Thu, Mar 29, 2018 at 01:51:08PM +0200, Peter Krempa wrote:
>The old qcow2 encryption format was buggy, so the new approach is to use
>luks inside qcow2. As it turns out, it didn't require that many changes.
>
>It was necessary to fix the command line formatter to stop mangling the
>format when secrets are present and specify the encryption format and
>secret in correct format.
>
>Signed-off-by: Peter Krempa <pkrempa at redhat.com>
>---
>You can easily create a qcow2+luks disk image by:
>
>qemu-img create --object secret,id=sec0,data=asdf -f qcow2 \
>    -o encrypt.format=luks,encrypt.key-secret=sec0 luks.qcow2 10M
>
> src/qemu/qemu_command.c | 16 ++++++++++++----
> 1 file changed, 12 insertions(+), 4 deletions(-)
>

ACK

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20180331/4b45e79e/attachment-0001.sig>


More information about the libvir-list mailing list