NuKVM/libvirt
3
0
Fork 0
mirror of https://github.com/libvirt/libvirt.git synced 2025-02-25 18:55:26 -06:00
Code Issues Packages Projects Releases Wiki Activity

backup: Allow 'encryption' of backups and scratch images

Browse Source 
Add the appropriate entries into the schema to allow encryption of the
backup or scratch image. Since we use blockdev internals for everything
no changes to the code are actually necessary.

https://bugzilla.redhat.com/show_bug.cgi?id=1811906

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Erik Skultety <eskultet@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
This commit is contained in:
Peter Krempa
2020-04-09 15:50:40 +02:00
parent 30d2491d8b
commit a7db0b757d
7 changed files with 184 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
tests/domainbackupxml2xmlin/backup-pull-encrypted.xml Normal file
View File

@@ -0,0 +1,30 @@
<domainbackup mode="pull">
<incremental>1525889631</incremental>
<server transport='tcp' name='localhost' port='10809'/>
<disks>
<disk name='vda' type='file' exportname='test-vda' exportbitmap='blah'>
<driver type='qcow2'/>
<scratch file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' uuid='0a81f5b2-8403-7b23-c8d6-21ccc2f80d6f'/>
</encryption>
</scratch>
</disk>
<disk name='vdb' type='file' exportname='test-vda' exportbitmap='blah'>
<driver type='qcow2'/>
<scratch file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdb'/>
</encryption>
</scratch>
</disk>
<disk name='vdc' type='block'>
<driver type='qcow2'/>
<scratch dev='/dev/block'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdc'/>
</encryption>
</scratch>
</disk>
</disks>
</domainbackup>

29
tests/domainbackupxml2xmlin/backup-push-encrypted.xml Normal file
View File

@@ -0,0 +1,29 @@
<domainbackup mode="push">
<incremental>1525889631</incremental>
<disks>
<disk name='vda' type='file'>
<driver type='qcow2'/>
<target file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' uuid='0a81f5b2-8403-7b23-c8d6-21ccc2f80d6f'/>
</encryption>
</target>
</disk>
<disk name='vdb' type='file'>
<driver type='raw'/>
<target file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdb'/>
</encryption>
</target>
</disk>
<disk name='vdc' type='block'>
<driver type='qcow2'/>
<target dev='/dev/block'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdc'/>
</encryption>
</target>
</disk>
</disks>
</domainbackup>