On Thu, Mar 29, 2018 at 01:51:08PM +0200, Peter Krempa wrote:
The old qcow2 encryption format was buggy, so the new approach is to
use
luks inside qcow2. As it turns out, it didn't require that many changes.
It was necessary to fix the command line formatter to stop mangling the
format when secrets are present and specify the encryption format and
secret in correct format.
Signed-off-by: Peter Krempa <pkrempa(a)redhat.com>
---
You can easily create a qcow2+luks disk image by:
qemu-img create --object secret,id=sec0,data=asdf -f qcow2 \
-o encrypt.format=luks,encrypt.key-secret=sec0 luks.qcow2 10M
src/qemu/qemu_command.c | 16 ++++++++++++----
1 file changed, 12 insertions(+), 4 deletions(-)
ACK
Jano