Re: [libvirt] [PATCH v2 2/3] qemu: domain: Add support for TLS for NBD

https://bugzilla.redhat.com/show_bug.cgi?id=1544869 Signed-off-by: Peter Krempa <pkrempa(a)redhat.com&gt; --- docs/formatdomain.html.in | 8 ++++- docs/schemas/domaincommon.rng | 5 +++ src/qemu/qemu_command.c | 5 +++ src/qemu/qemu_domain.c | 38 ++++++++++++++++++++-- .../disk-drive-network-tlsx509.args | 9 ++++- .../disk-drive-network-tlsx509.xml | 8 +++++ tests/qemuxml2argvtest.c | 2 +- .../disk-drive-network-tlsx509.xml | 8 +++++ 8 files changed, 78 insertions(+), 5 deletions(-) diff --git a/docs/formatdomain.html.in b/docs/formatdomain.html.in index b5a6e33bfe..dccabe7f35 100644 --- a/docs/formatdomain.html.in +++ b/docs/formatdomain.html.in @@ -2786,7 +2786,13 @@ is mandatory to specify which volume/image will be used. </p> - <p>For "nbd", the <code>name</code> attribute is optional. + <p>For "nbd", the <code>name</code> attribute is optional. TLS + transport for NBD can be enabled by using the <code>tls</code>

+ attribute. For the QEMU hypervisor, usage of a TLS environment can + lso be globally controlled on the host by the + <code>nbd_tls</code> and <code>nbd_tls_x509_cert_dir</code> in + /etc/libvirt/qemu.conf. + ('tls' <span class="since">Since 4.5.0</span>) </p> <p>For "iscsi" (<span class="since">since 1.0.4</span>), the