mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-01-24 06:03:52 +03:00
18458e8fd1
iscsi and rbd support authentication of the connection. Combine it with
encryption of qcow2.
The top level disk image would generate the following '-drive' cmdline:
-drive file=rbd:rbdpool/rbdimg:id=testuser-rbd:auth_supported=cephx\;none:
mon_host=host1.example.com\;host2.example.com,
file.password-secret=node-a-s-secalias,encrypt.format=luks,
encrypt.key-secret=node-b-f-encalias,format=qcow2,
if=none,id=drive-dummy
-device virtio-blk-pci,scsi=off,drive=drive-dummy,id=dummy
Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: John Ferlan <jferlan@redhat.com>
52 lines
1020 B
JSON
52 lines
1020 B
JSON
{
|
|
"node-name": "node-b-f",
|
|
"read-only": false,
|
|
"driver": "qcow2",
|
|
"encrypt": {
|
|
"format": "luks",
|
|
"key-secret": "node-b-f-encalias"
|
|
},
|
|
"file": {
|
|
"driver": "rbd",
|
|
"pool": "rbdpool",
|
|
"image": "rbdimg",
|
|
"server": [
|
|
{
|
|
"host": "host1.example.com",
|
|
"port": "0"
|
|
},
|
|
{
|
|
"host": "host2.example.com",
|
|
"port": "0"
|
|
}
|
|
],
|
|
"user": "testuser-rbd",
|
|
"node-name": "node-a-s",
|
|
"read-only": false,
|
|
"discard": "unmap"
|
|
},
|
|
"backing": "node-b-f"
|
|
}
|
|
{
|
|
"node-name": "node-b-f",
|
|
"read-only": true,
|
|
"driver": "qcow2",
|
|
"encrypt": {
|
|
"format": "aes",
|
|
"key-secret": "node-b-f-encalias"
|
|
},
|
|
"file": {
|
|
"driver": "iscsi",
|
|
"portal": "example.org:3260",
|
|
"target": "iqn.2016-09.com.example:iscsitarget",
|
|
"lun": 1,
|
|
"transport": "tcp",
|
|
"user": "testuser-iscsi",
|
|
"password-secret": "node-b-s-secalias",
|
|
"node-name": "node-b-s",
|
|
"read-only": true,
|
|
"discard": "unmap"
|
|
},
|
|
"backing": null
|
|
}
|