rbd command : is it possible to pass authkey in argument ?

rbd command : is it possible to pass authkey in argument ?

[Alexandre DERUMIER]

Hi,

I'm writing rbd module for proxmox kvm distribution,

Is it possible to pass authkey as argument in rbd command line ? (I can do in with qemu-rbd drive option)

Or does it need to use a keyring file ?

Regards,

Alexandre

Re: rbd command : is it possible to pass authkey in argument ?

[Wido den Hollander]

Hi,

On 05/30/2012 11:15 AM, Alexandre DERUMIER wrote:
> Hi,
>
> I'm writing rbd module for proxmox kvm distribution,
>
> Is it possible to pass authkey as argument in rbd command line ? (I can do in with qemu-rbd drive option)

I'm not sure yet, have you tried with they argument "--key" ?

I tried and that failed and looking through the source-code it seems 
that it isn't possible yet.

Adding it seems rather simple however, so it could be added.

Wido

>
> Or does it need to use a keyring file ?
>
> Regards,
>
> Alexandre
>
> --
> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: rbd command : is it possible to pass authkey in argument ?

[Sage Weil]

On Wed, 30 May 2012, Wido den Hollander wrote:
> Hi,
> 
> On 05/30/2012 11:15 AM, Alexandre DERUMIER wrote:
> > Hi,
> > 
> > I'm writing rbd module for proxmox kvm distribution,
> > 
> > Is it possible to pass authkey as argument in rbd command line ? (I can do
> > in with qemu-rbd drive option)
> 
> I'm not sure yet, have you tried with they argument "--key" ?

Yep, --key is what you want.

sage

> 
> I tried and that failed and looking through the source-code it seems that it
> isn't possible yet.
> 
> Adding it seems rather simple however, so it could be added.
> 
> Wido
> 
> > 
> > Or does it need to use a keyring file ?
> > 
> > Regards,
> > 
> > Alexandre
> > 
> > --
> > To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> > the body of a message to majordomo@vger.kernel.org
> > More majordomo info at  http://vger.kernel.org/majordomo-info.html
> --
> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 
> 

Re: rbd command : is it possible to pass authkey in argument ?

[Alexandre DERUMIER]

Thanks Sage.

I didn't have found it,it seem to be undocumented (man or rbd -h).

I have tested it, it's works !

Alexandre

----- Mail original ----- 

De: "Sage Weil" <sage@inktank.com> 
À: "Wido den Hollander" <wido@widodh.nl> 
Cc: "Alexandre DERUMIER" <aderumier@odiso.com>, ceph-devel@vger.kernel.org 
Envoyé: Mercredi 30 Mai 2012 17:25:33 
Objet: Re: rbd command : is it possible to pass authkey in argument ? 

On Wed, 30 May 2012, Wido den Hollander wrote: 
> Hi, 
> 
> On 05/30/2012 11:15 AM, Alexandre DERUMIER wrote: 
> > Hi, 
> > 
> > I'm writing rbd module for proxmox kvm distribution, 
> > 
> > Is it possible to pass authkey as argument in rbd command line ? (I can do 
> > in with qemu-rbd drive option) 
> 
> I'm not sure yet, have you tried with they argument "--key" ? 

Yep, --key is what you want. 

sage 

> 
> I tried and that failed and looking through the source-code it seems that it 
> isn't possible yet. 
> 
> Adding it seems rather simple however, so it could be added. 
> 
> Wido 
> 
> > 
> > Or does it need to use a keyring file ? 
> > 
> > Regards, 
> > 
> > Alexandre 
> > 
> > -- 
> > To unsubscribe from this list: send the line "unsubscribe ceph-devel" in 
> > the body of a message to majordomo@vger.kernel.org 
> > More majordomo info at http://vger.kernel.org/majordomo-info.html 
> -- 
> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in 
> the body of a message to majordomo@vger.kernel.org 
> More majordomo info at http://vger.kernel.org/majordomo-info.html 
> 
> 



-- 

-- 




	Alexandre D erumier 
Ingénieur Système 
Fixe : 03 20 68 88 90 
Fax : 03 20 68 90 81 
45 Bvd du Général Leclerc 59100 Roubaix - France 
12 rue Marivaux 75002 Paris - France 
	
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: rbd command : is it possible to pass authkey in argument ?

[Tommi Virtanen]

On Wed, May 30, 2012 at 2:15 AM, Alexandre DERUMIER <aderumier@odiso.com> wrote:
> Is it possible to pass authkey as argument in rbd command line ? (I can do in with qemu-rbd drive option)

I see you got an answer for your actual question. I wanted to take a
different angle.

You should really avoid putting secrets on command lines, or in
process environment. Those are readable to all local users. This is
why I advocate keyring files.

Alternatively, with qemu, the monitor command mechanism they have
would let you add the drives, before starting up the vm, without the
secrets being visible to others.

Re: rbd command : is it possible to pass authkey in argument ?

[Alexandre DERUMIER]

Hi Tommi,
I was looking for a way to pass a keyfile, just found it

--keyfile  (both rbd and qemu drive option)


Better indeed ;)



----- Mail original ----- 

De: "Tommi Virtanen" <tv@inktank.com> 
À: "Alexandre DERUMIER" <aderumier@odiso.com> 
Cc: ceph-devel@vger.kernel.org 
Envoyé: Mercredi 30 Mai 2012 19:40:46 
Objet: Re: rbd command : is it possible to pass authkey in argument ? 

On Wed, May 30, 2012 at 2:15 AM, Alexandre DERUMIER <aderumier@odiso.com> wrote: 
> Is it possible to pass authkey as argument in rbd command line ? (I can do in with qemu-rbd drive option) 

I see you got an answer for your actual question. I wanted to take a 
different angle. 

You should really avoid putting secrets on command lines, or in 
process environment. Those are readable to all local users. This is 
why I advocate keyring files. 

Alternatively, with qemu, the monitor command mechanism they have 
would let you add the drives, before starting up the vm, without the 
secrets being visible to others. 



-- 

-- 




	Alexandre D erumier 
Ingénieur Système 
Fixe : 03 20 68 88 90 
Fax : 03 20 68 90 81 
45 Bvd du Général Leclerc 59100 Roubaix - France 
12 rue Marivaux 75002 Paris - France 
	
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html