]> git.ipfire.org Git - thirdparty/libvirt.git/commit
qemu: add support for librbd layered encryption
authorOr Ozeri <oro@il.ibm.com>
Mon, 13 Mar 2023 09:50:21 +0000 (04:50 -0500)
committerPeter Krempa <pkrempa@redhat.com>
Thu, 16 Mar 2023 14:19:36 +0000 (15:19 +0100)
commit77c9663d72d03158e117fe96be8a483e0164b5e2
tree23d67192e5316a3fdac04d335870159c1d85b479
parent1992ae40fac90c315d0d8d1a9c6f880bd0a39b57
qemu: add support for librbd layered encryption

This commit enables libvirt users to use layered encryption
of RBD images, using the librbd encryption engine.
This allows opening of an encrypted cloned image
whose parent is encrypted with a possibly different encryption key.
To open such images, multiple encryption secrets are expected
to be defined under the encryption XML tag.

Signed-off-by: Or Ozeri <oro@il.ibm.com>
Reviewed-by: Peter Krempa <pkrempa@redhat.com>
docs/formatstorageencryption.rst
src/conf/schemas/storagecommon.rng
src/qemu/qemu_block.c
src/qemu/qemu_domain.c
src/qemu/qemu_validate.c
tests/qemuxml2argvdata/disk-network-rbd-encryption-layering.x86_64-7.2.0.err [new file with mode: 0644]
tests/qemuxml2argvdata/disk-network-rbd-encryption-layering.x86_64-latest.args [new file with mode: 0644]
tests/qemuxml2argvdata/disk-network-rbd-encryption-layering.xml [new file with mode: 0644]
tests/qemuxml2argvtest.c
tests/qemuxml2xmloutdata/disk-network-rbd-encryption-layering.x86_64-latest.xml [new file with mode: 0644]
tests/qemuxml2xmltest.c