Jan Orel 73c27a9dd2 F 1345: Allow using LUKS volumes for KVM (#808) ... * F #1345: KVM support for persistent luks volmes Support for attaching a persistent qemu luks encrypted disk, created as per the libvirt/qemu documentation. Private secret must be defined on the hypervisor for decryption and the image should contain "LUKS_SECRET" attribute. 1) Create the image and import into datastore: # qemu-img create --object secret,id=sec0,data=secretphrase -o key-secret=sec0 -f luks volume 1G 2) Create the secret on the hypervisor: # virsh secret-define volume-secret.xml # MYSECRET=`printf %s "secretphrase" | base64` # virsh secret-set-value $MYUUID $MYSECRET # virsh secret-dumpxml $MYUUID <secret ephemeral='no' private='yes'> <uuid>$MYUUID</uuid> <description>luks key</description> <usage type='volume'> <volume>rbd:one/one-123</volume> </usage> </secret> 3) Set the UUID in the image attributes, ie: # oneimage show 123 |grep LUKS LUKS_SECRET="$MYUUID" This should allow the disk attach to decryt the luks image and use as a normal disk within the VM. Co-authored-by: Laurence <laurencegill@users.noreply.github.com>		2021-02-18 18:32:23 +01:00
..
cron.d	F #1473: Update SSH config and sockets (#4733)	2020-05-15 18:51:04 +02:00
sysctl.d	Feature #4448: rename	2016-05-04 13:05:44 +02:00
defaultrc	M #-: Bump year to 2021 (#778)	2021-02-09 16:07:56 +01:00
oned.conf	F 1345: Allow using LUKS volumes for KVM (#808)	2021-02-18 18:32:23 +01:00