[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH v9 1/2] block/vxhs.c: Add support for a new bloc
|
From: |
Daniel P. Berrange |
|
Subject: |
Re: [Qemu-devel] [PATCH v9 1/2] block/vxhs.c: Add support for a new block device type called "vxhs" |
|
Date: |
Mon, 20 Feb 2017 14:27:39 +0000 |
|
User-agent: |
Mutt/1.7.1 (2016-10-04) |
On Mon, Feb 20, 2017 at 02:21:43PM +0000, Stefan Hajnoczi wrote:
> On Sun, Feb 19, 2017 at 02:30:53PM -0800, Ashish Mittal wrote:
> > v9 changelog:
> > (1) Fixes for all the review comments from v8. I have left the definition
> > of VXHS_UUID_DEF unchanged pending a better suggestion.
>
> If I understand correctly libvxhs has a global instance ID for choosing
> the SSL client certificate.
That's a bad idea as it forces a cert usage policy onto people deploying
QEMU. Admins should be free to use the same certificate for multiple VMs,
and a single VM should be able to use different certs for connecting to
different storage servers.
Regards,
Daniel
--
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://entangle-photo.org -o- http://search.cpan.org/~danberr/ :|