backup: Allow 'encryption' of backups and scratch images

Add the appropriate entries into the schema to allow encryption of the
backup or scratch image. Since we use blockdev internals for everything
no changes to the code are actually necessary.

https://bugzilla.redhat.com/show_bug.cgi?id=1811906

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Erik Skultety <eskultet@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
This commit is contained in:
Peter Krempa committed 2020-04-14 18:49:41 +02:00
1 parent 30d2491d8b
commit a7db0b757d
7 files changed
+184 -14

No files matched your search

@@ -0,0 +1,30 @@
<domainbackup mode='pull'>
<incremental>1525889631</incremental>
<server transport='tcp' name='localhost' port='10809'/>
<disks>
<disk name='vda' backup='yes' type='file' exportname='test-vda' exportbitmap='blah'>
<driver type='qcow2'/>
<scratch file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' uuid='0a81f5b2-8403-7b23-c8d6-21ccc2f80d6f'/>
</encryption>
</scratch>
</disk>
<disk name='vdb' backup='yes' type='file' exportname='test-vda' exportbitmap='blah'>
<driver type='qcow2'/>
<scratch file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdb'/>
</encryption>
</scratch>
</disk>
<disk name='vdc' backup='yes' type='block'>
<driver type='qcow2'/>
<scratch dev='/dev/block'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdc'/>
</encryption>
</scratch>
</disk>
</disks>
</domainbackup>
@@ -0,0 +1,29 @@
<domainbackup mode='push'>
<incremental>1525889631</incremental>
<disks>
<disk name='vda' backup='yes' type='file'>
<driver type='qcow2'/>
<target file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' uuid='0a81f5b2-8403-7b23-c8d6-21ccc2f80d6f'/>
</encryption>
</target>
</disk>
<disk name='vdb' backup='yes' type='file'>
<driver type='raw'/>
<target file='/path/to/file'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdb'/>
</encryption>
</target>
</disk>
<disk name='vdc' backup='yes' type='block'>
<driver type='qcow2'/>
<target dev='/dev/block'>
<encryption format='luks'>
<secret type='passphrase' usage='/storage/backup/vdc'/>
</encryption>
</target>
</disk>
</disks>
</domainbackup>