From: "Daniel P. Berrange" <berrange@redhat.com>
To: Max Reitz <mreitz@redhat.com>
Cc: qemu-devel@nongnu.org, qemu-block@nongnu.org,
Eric Blake <eblake@redhat.com>, Kevin Wolf <kwolf@redhat.com>,
Alberto Garcia <berto@igalia.com>
Subject: Re: [Qemu-devel] [PATCH v9 09/20] qcow: convert QCow to use QCryptoBlock for encryption
Date: Fri, 23 Jun 2017 11:06:59 +0100 [thread overview]
Message-ID: <20170623100659.GE28635@redhat.com> (raw)
In-Reply-To: <0456194f-d8c0-3542-2a8a-6a952b4c8b58@redhat.com>
On Wed, Jun 21, 2017 at 04:29:02PM +0200, Max Reitz wrote:
> On 2017-06-19 19:34, Daniel P. Berrange wrote:
> > This converts the qcow driver to make use of the QCryptoBlock
> > APIs for encrypting image content. This is only wired up to
> > permit use of the legacy QCow encryption format. Users who wish
> > to have the strong LUKS format should switch to qcow2 instead.
> >
> > With this change it is now required to use the QCryptoSecret
> > object for providing passwords, instead of the current block
> > password APIs / interactive prompting.
> >
> > $QEMU \
> > -object secret,id=sec0,filename=/home/berrange/encrypted.pw \
> > -drive file=/home/berrange/encrypted.qcow,encrypt.format=qcow,\
>
> Still should be encrypt.format=aes, but, well... Let's just give it a
Opps, yes. Fixed that now for real.
>
> Reviewed-by: Max Reitz <mreitz@redhat.com>
Regards,
Daniel
--
|: https://berrange.com -o- https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org -o- https://fstop138.berrange.com :|
|: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|
next prev parent reply other threads:[~2017-06-23 10:07 UTC|newest]
Thread overview: 31+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-06-19 17:34 [Qemu-devel] [PATCH v9 00/20] Convert QCow[2] to QCryptoBlock & add LUKS support Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 01/20] block: expose crypto option names / defs to other drivers Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 02/20] block: add ability to set a prefix for opt names Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 03/20] qcow: document another weakness of qcow AES encryption Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 04/20] qcow: require image size to be > 1 for new images Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 05/20] iotests: skip 042 with qcow which dosn't support zero sized images Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 06/20] iotests: skip 048 with qcow which doesn't support resize Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 07/20] block: deprecate "encryption=on" in favor of "encrypt.format=aes" Daniel P. Berrange
2017-06-20 11:44 ` Alberto Garcia
2017-06-20 12:02 ` Daniel P. Berrange
2017-06-20 14:07 ` Alberto Garcia
2017-06-23 10:08 ` Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 08/20] qcow: make encrypt_sectors encrypt in place Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 09/20] qcow: convert QCow to use QCryptoBlock for encryption Daniel P. Berrange
2017-06-21 14:29 ` Max Reitz
2017-06-23 10:06 ` Daniel P. Berrange [this message]
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 10/20] qcow2: make qcow2_encrypt_sectors encrypt in place Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 11/20] qcow2: convert QCow2 to use QCryptoBlock for encryption Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 12/20] qcow2: extend specification to cover LUKS encryption Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 13/20] qcow2: add support for LUKS encryption format Daniel P. Berrange
2017-06-21 14:42 ` Max Reitz
2017-06-21 14:46 ` Max Reitz
2017-06-21 14:59 ` Max Reitz
2017-06-23 10:06 ` Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 14/20] qcow2: add iotests to cover LUKS encryption support Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 15/20] iotests: enable tests 134 and 158 to work with qcow (v1) Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 16/20] block: rip out all traces of password prompting Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 17/20] block: remove all encryption handling APIs Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 18/20] block: pass option prefix down to crypto layer Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 19/20] qcow2: report encryption specific image information Daniel P. Berrange
2017-06-19 17:34 ` [Qemu-devel] [PATCH v9 20/20] docs: document encryption options for qcow, qcow2 and luks Daniel P. Berrange
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170623100659.GE28635@redhat.com \
--to=berrange@redhat.com \
--cc=berto@igalia.com \
--cc=eblake@redhat.com \
--cc=kwolf@redhat.com \
--cc=mreitz@redhat.com \
--cc=qemu-block@nongnu.org \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).