mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-22 17:34:18 +03:00
70d2758a9c
Originally there was only the secret for authentication so we didn't use any suffix to tell it apart. With the introduction of encryption we added a 'luks' suffix for the encryption secrets. Since encryption is really generic and authentication is not the only secret modify the aliases for the secrets to better describe what they are used for. This is possible as we store the disk secrets in the status XML thus only new machines will use the new secrets. Signed-off-by: Peter Krempa <pkrempa@redhat.com> Reviewed-by: Ján Tomko <jtomko@redhat.com>
111 lines
5.8 KiB
Plaintext
111 lines
5.8 KiB
Plaintext
LC_ALL=C \
|
|
PATH=/bin \
|
|
HOME=/tmp/lib/domain--1-encryptdisk \
|
|
USER=test \
|
|
LOGNAME=test \
|
|
XDG_DATA_HOME=/tmp/lib/domain--1-encryptdisk/.local/share \
|
|
XDG_CACHE_HOME=/tmp/lib/domain--1-encryptdisk/.cache \
|
|
XDG_CONFIG_HOME=/tmp/lib/domain--1-encryptdisk/.config \
|
|
QEMU_AUDIO_DRV=none \
|
|
/usr/bin/qemu-system-x86_64 \
|
|
-name guest=encryptdisk,debug-threads=on \
|
|
-S \
|
|
-object secret,id=masterKey0,format=raw,\
|
|
file=/tmp/lib/domain--1-encryptdisk/master-key.aes \
|
|
-machine pc-i440fx-2.1,accel=tcg,usb=off,dump-guest-core=off \
|
|
-cpu qemu64 \
|
|
-m 1024 \
|
|
-overcommit mem-lock=off \
|
|
-smp 1,sockets=1,cores=1,threads=1 \
|
|
-uuid 496898a6-e6ff-f7c8-5dc2-3cf410945ee9 \
|
|
-display none \
|
|
-no-user-config \
|
|
-nodefaults \
|
|
-chardev socket,id=charmonitor,fd=1729,server,nowait \
|
|
-mon chardev=charmonitor,id=monitor,mode=control \
|
|
-rtc base=utc \
|
|
-no-shutdown \
|
|
-no-acpi \
|
|
-boot strict=on \
|
|
-device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 \
|
|
-object secret,id=libvirt-7-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"file","filename":"/storage/guest_disks/encryptdisk",\
|
|
"node-name":"libvirt-7-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-7-format","read-only":false,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-7-format-encryption-secret0"},\
|
|
"file":"libvirt-7-storage"}' \
|
|
-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive=libvirt-7-format,\
|
|
id=virtio-disk0,bootindex=1 \
|
|
-object secret,id=libvirt-6-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"file","filename":"/storage/guest_disks/encryptdisk2",\
|
|
"node-name":"libvirt-6-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-6-format","read-only":false,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-6-format-encryption-secret0"},\
|
|
"file":"libvirt-6-storage"}' \
|
|
-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=libvirt-6-format,\
|
|
id=virtio-disk1 \
|
|
-object secret,id=libvirt-5-storage-auth-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-object secret,id=libvirt-5-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"iscsi","portal":"example.org:6000",\
|
|
"target":"iqn.1992-01.com.example:storage","lun":1,"transport":"tcp",\
|
|
"user":"myname","password-secret":"libvirt-5-storage-auth-secret0",\
|
|
"node-name":"libvirt-5-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-5-format","read-only":false,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-5-format-encryption-secret0"},\
|
|
"file":"libvirt-5-storage"}' \
|
|
-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x2,drive=libvirt-5-format,\
|
|
id=virtio-disk2 \
|
|
-object secret,id=libvirt-4-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"iscsi","portal":"iscsi.example.com:3260",\
|
|
"target":"demo-target","lun":3,"transport":"tcp",\
|
|
"node-name":"libvirt-4-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-4-format","read-only":false,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-4-format-encryption-secret0"},\
|
|
"file":"libvirt-4-storage"}' \
|
|
-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=libvirt-4-format,\
|
|
id=virtio-disk3 \
|
|
-object secret,id=libvirt-3-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"rbd","pool":"pool","image":"image",\
|
|
"server":[{"host":"mon1.example.org","port":"6321"},{"host":"mon2.example.org",\
|
|
"port":"6322"},{"host":"mon3.example.org","port":"6322"}],\
|
|
"node-name":"libvirt-3-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-3-format","read-only":false,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-3-format-encryption-secret0"},\
|
|
"file":"libvirt-3-storage"}' \
|
|
-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x7,drive=libvirt-3-format,\
|
|
id=virtio-disk4 \
|
|
-object secret,id=libvirt-2-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"file","filename":"/storage/guest_disks/base.qcow2",\
|
|
"node-name":"libvirt-2-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-2-format","read-only":true,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-2-format-encryption-secret0"},\
|
|
"file":"libvirt-2-storage","backing":null}' \
|
|
-object secret,id=libvirt-1-format-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-blockdev '{"driver":"file","filename":"/storage/guest_disks/encryptdisk5",\
|
|
"node-name":"libvirt-1-storage","auto-read-only":true,"discard":"unmap"}' \
|
|
-blockdev '{"node-name":"libvirt-1-format","read-only":false,"driver":"qcow2",\
|
|
"encrypt":{"format":"luks","key-secret":"libvirt-1-format-encryption-secret0"},\
|
|
"file":"libvirt-1-storage","backing":"libvirt-2-format"}' \
|
|
-device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x8,drive=libvirt-1-format,\
|
|
id=virtio-disk5 \
|
|
-device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3 \
|
|
-sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,\
|
|
resourcecontrol=deny \
|
|
-msg timestamp=on
|