[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-block] [PATCH v10 0/4] Improve convert and dd commands
From: |
Max Reitz |
Subject: |
Re: [Qemu-block] [PATCH v10 0/4] Improve convert and dd commands |
Date: |
Mon, 15 May 2017 19:50:09 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.0 |
On 2017-05-15 18:47, Daniel P. Berrange wrote:
> Update to
>
> v1: https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg05699.html
> v2: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00728.html
> v3: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04391.html
> v4: https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg02153.html
> v5: https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04109.html
> v6: https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg00215.html
> v7: https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg00242.html
> v8: https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg02028.html
> v9: https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03504.html
>
> This series is in response to Max pointing out that you cannot
> use 'convert' for an encrypted target image.
>
> The 'convert' and 'dd' commands need to first create the image
> and then open it. The bdrv_create() method takes a set of options
> for creating the image, which let us provide a key-secret for the
> encryption key. When the commands then open the new image, they
> don't provide any options, so the image is unable to be opened
> due to lack of encryption key. It is also not possible to use
> the --image-opts argument to provide structured options in the
> target image name - it must be a plain filename to satisfy the
> bdrv_create() API contract.
>
> This series addresses these problems to some extent
>
> - Adds a new --target-image-opts flag which is used to say
> that the target filename is using structured options.
> It is *only* permitted to use this when -n is also set.
> ie the target image must be pre-created so convert/dd
> don't need to run bdrv_create().
>
> - When --target-image-opts is not used, add special case
> code that identifies options passed to bdrv_create()
> named "*key-secret" and adds them to the options used
> to open the new image
>
> In future it is desirable to make --target-image-opts work even when -n is
> *not* given. This requires considerable work to create a new bdrv_create()
> API impl.
>
> The first patch fixes a bug in the 'dd' command while the second adds support
> for the missing '--object' arg to 'dd', allowing it to reference secrets when
> opening files. The last two patches implement the new features described
> above
> for the 'convert' command.
Thanks,
Reviewed-by: Max Reitz <address@hidden>
...and applied to my block branch:
https://github.com/XanClic/qemu/commits/block
Max
signature.asc
Description: OpenPGP digital signature