On Thu, 2019-09-26 at 12:46 +0000, Craig Mull wrote:

How do you change the passphrase for QCOW2 native encrypted volume?

I've played with qemu-img create and it appears I can only add a passphrase to slot 0 at volume creation time. I don't believe cryptsetup is supported with QCOW2 native encryption to manage LUKS slots.

Hi!

Currently you can't change the pass-phrase for qcow2 luks encrypted files, but I am working on this exact feature,

and it will suport both luks images (as an alternative to cryptosetup, and qcow2 luks images).

I expect that soon it will be merged upstream.

Best regards,

Maxim Levitsky