Re: qemu-img convert gets 403 from s3 presigned urls

Re: qemu-img convert gets 403 from s3 presigned urls

[Philippe Mathieu-Daudé]

Cc'ing the qemu-block@ list.

On 13/7/23 04:03, Ross Vandegrift wrote:
> Hi folks,
> 
> I'm trying to qemu-img convert a source that's hoted on s3, via a
> presigned url.  When qemu-img hits it, s3 returns a 403.  But curl works
> fine with the same url.
> 
> I didn't see any debugging or verbose output options in the man page.
> Is there a way to get more info on the requests as they're made?
> 
> Assuming that awscli is installed and setup with credentials, the issue
> looks like:
> 
> $ disk_url=$(aws s3 presign s3://bucket/path/to/image.qcow2)
> $ qemu-img convert -f qcow2 -O raw "$disk_url" image.raw
> qemu-img: Could not open 'https://bucket.s3.us-east-2.amazonaws.com/path/to/image.qcow2?X-Amz-Algorithm=AWS4-HMAC-SHA256...[redacted]': CURL: Error opening file: The requested URL returned error: 403
> $ curl -o image.qcow2 "$disk_url"
>    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
>                                   Dload  Upload   Total   Spent    Left  Speed
>    4 3322M    4  160M    0     0  13.5M      0  0:04:04  0:00:11  0:03:53 15.2M
> 
> Thanks for any pointers,
> Ross
> 
> PS - please CC me, as I'm not subscribed.  Thanks!
>