On 5/7/21 3:46 PM, Daniel P. Berrangé wrote:
On Fri, May 07, 2021 at 03:43:32PM +0200, Michal Prívozník wrote:
> On 5/7/21 2:33 PM, Daniel P. Berrangé wrote:
>> I'm not going to apply this yet as I realized that I have broken
>> internal secrets with monolithic libvirtd instead :-(
>
> You did? I've tested it (by starting a pool with a secret) and it worked.
Secrets aren't used when starting a pool with merely encrypted vols present.
They're only needed to perform I/O, so would have to test starting a guest,
or cloning a encrypted vol. Alternatively starting a RBD/iSCSI pool that
requires auth.
Yeah, it's an iSCSI pool that requires auth. But okay, I'll try
I'm testing with starting a QEMU guest with an encrypted vol
this for v2.
Michal