[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-block] [PATCH v10 09/20] qcow: convert QCow to use QCryptoBloc
From: |
Alberto Garcia |
Subject: |
Re: [Qemu-block] [PATCH v10 09/20] qcow: convert QCow to use QCryptoBlock for encryption |
Date: |
Mon, 26 Jun 2017 12:07:31 +0200 |
User-agent: |
Notmuch/0.18.2 (http://notmuchmail.org) Emacs/24.4.1 (i586-pc-linux-gnu) |
On Fri 23 Jun 2017 06:24:08 PM CEST, Daniel P. Berrange wrote:
> This converts the qcow driver to make use of the QCryptoBlock
> APIs for encrypting image content. This is only wired up to
> permit use of the legacy QCow encryption format. Users who wish
> to have the strong LUKS format should switch to qcow2 instead.
>
> With this change it is now required to use the QCryptoSecret
> object for providing passwords, instead of the current block
> password APIs / interactive prompting.
>
> $QEMU \
> -object secret,id=sec0,filename=/home/berrange/encrypted.pw \
> -drive file=/home/berrange/encrypted.qcow,encrypt.format=aes,\
> encrypt.key-secret=sec0
I just realized that the property in the 'secret' object is called
'file', not 'filename'.
You can of course keep my R-b if you fix that.
Berto
- [Qemu-block] [PATCH v10 01/20] block: expose crypto option names / defs to other drivers, (continued)
- [Qemu-block] [PATCH v10 01/20] block: expose crypto option names / defs to other drivers, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 02/20] block: add ability to set a prefix for opt names, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 03/20] qcow: document another weakness of qcow AES encryption, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 04/20] qcow: require image size to be > 1 for new images, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 05/20] iotests: skip 042 with qcow which dosn't support zero sized images, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 06/20] iotests: skip 048 with qcow which doesn't support resize, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 08/20] qcow: make encrypt_sectors encrypt in place, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 07/20] block: deprecate "encryption=on" in favor of "encrypt.format=aes", Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 09/20] qcow: convert QCow to use QCryptoBlock for encryption, Daniel P. Berrange, 2017/06/23
- Re: [Qemu-block] [PATCH v10 09/20] qcow: convert QCow to use QCryptoBlock for encryption,
Alberto Garcia <=
- [Qemu-block] [PATCH v10 10/20] qcow2: make qcow2_encrypt_sectors encrypt in place, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 12/20] qcow2: extend specification to cover LUKS encryption, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 11/20] qcow2: convert QCow2 to use QCryptoBlock for encryption, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 15/20] iotests: enable tests 134 and 158 to work with qcow (v1), Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 14/20] qcow2: add iotests to cover LUKS encryption support, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 13/20] qcow2: add support for LUKS encryption format, Daniel P. Berrange, 2017/06/23
- [Qemu-block] [PATCH v10 16/20] block: rip out all traces of password prompting, Daniel P. Berrange, 2017/06/23