mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-23 06:05:27 +00:00
70d2758a9c
Originally there was only the secret for authentication so we didn't use any suffix to tell it apart. With the introduction of encryption we added a 'luks' suffix for the encryption secrets. Since encryption is really generic and authentication is not the only secret modify the aliases for the secrets to better describe what they are used for. This is possible as we store the disk secrets in the status XML thus only new machines will use the new secrets. Signed-off-by: Peter Krempa <pkrempa@redhat.com> Reviewed-by: Ján Tomko <jtomko@redhat.com>
88 lines
3.9 KiB
Plaintext
88 lines
3.9 KiB
Plaintext
LC_ALL=C \
|
|
PATH=/bin \
|
|
HOME=/tmp/lib/domain--1-gentoo \
|
|
USER=test \
|
|
LOGNAME=test \
|
|
XDG_DATA_HOME=/tmp/lib/domain--1-gentoo/.local/share \
|
|
XDG_CACHE_HOME=/tmp/lib/domain--1-gentoo/.cache \
|
|
XDG_CONFIG_HOME=/tmp/lib/domain--1-gentoo/.config \
|
|
QEMU_AUDIO_DRV=none \
|
|
/usr/bin/qemu-system-x86_64 \
|
|
-name gentoo \
|
|
-S \
|
|
-object secret,id=masterKey0,format=raw,\
|
|
file=/tmp/lib/domain--1-gentoo/master-key.aes \
|
|
-machine pc-i440fx-1.4,accel=kvm,usb=off,dump-guest-core=off \
|
|
-m 4096 \
|
|
-realtime mlock=off \
|
|
-smp 4,sockets=4,cores=1,threads=1 \
|
|
-object memory-backend-file,id=ram-node0,prealloc=yes,\
|
|
mem-path=/dev/hugepages1G/libvirt/qemu/-1-gentoo,size=1073741824 \
|
|
-numa node,nodeid=0,cpus=0,memdev=ram-node0 \
|
|
-object memory-backend-file,id=ram-node1,prealloc=yes,\
|
|
mem-path=/dev/hugepages1G/libvirt/qemu/-1-gentoo,size=1073741824 \
|
|
-numa node,nodeid=1,cpus=1,memdev=ram-node1 \
|
|
-object memory-backend-file,id=ram-node2,prealloc=yes,\
|
|
mem-path=/dev/hugepages1G/libvirt/qemu/-1-gentoo,size=1073741824 \
|
|
-numa node,nodeid=2,cpus=2,memdev=ram-node2 \
|
|
-object memory-backend-file,id=ram-node3,prealloc=yes,\
|
|
mem-path=/dev/hugepages1G/libvirt/qemu/-1-gentoo,size=1073741824 \
|
|
-numa node,nodeid=3,cpus=3,memdev=ram-node3 \
|
|
-uuid a75aca4b-a02f-2bcb-4a91-c93cd848c34b \
|
|
-no-user-config \
|
|
-nodefaults \
|
|
-chardev socket,id=charmonitor,path=/tmp/lib/domain--1-gentoo/monitor.sock,\
|
|
server,nowait \
|
|
-mon chardev=charmonitor,id=monitor,mode=control \
|
|
-rtc base=utc \
|
|
-no-shutdown \
|
|
-global PIIX4_PM.disable_s3=0 \
|
|
-global PIIX4_PM.disable_s4=0 \
|
|
-device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x8 \
|
|
-usb \
|
|
-device usb-ccid,id=ua-myCCID,bus=ua-SomeWeirdController.0,port=1 \
|
|
-device usb-ccid,id=ua-myCCID2,bus=ua-SomeWeirdController.0,port=2 \
|
|
-drive file=/var/lib/libvirt/images/fd.img,format=raw,if=none,\
|
|
id=drive-ua-myDisk1,cache=none \
|
|
-drive file=/var/lib/libvirt/images/gentoo.qcow2,format=qcow2,if=none,\
|
|
id=drive-ua-myDisk2 \
|
|
-device virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-ua-myDisk2,id=ua-myDisk2,\
|
|
bootindex=1 \
|
|
-object secret,id=ua-myEncryptedDisk1-encryption-secret0,\
|
|
data=9eao5F8qtkGt+seB1HYivWIxbtwUu6MQtg1zpj/oDtUsPr1q8wBYM91uEHCn6j/1,\
|
|
keyid=masterKey0,iv=AAECAwQFBgcICQoLDA0ODw==,format=base64 \
|
|
-drive file=/var/lib/libvirt/images/OtherDemo.img,encrypt.format=luks,\
|
|
encrypt.key-secret=ua-myEncryptedDisk1-encryption-secret0,format=qcow2,if=none,\
|
|
id=drive-ua-myEncryptedDisk1 \
|
|
-device virtio-blk-pci,bus=pci.0,addr=0x7,drive=drive-ua-myEncryptedDisk1,\
|
|
id=ua-myEncryptedDisk1 \
|
|
-drive file=/home/zippy/tmp/install-amd64-minimal-20140619.iso,format=raw,\
|
|
if=none,id=drive-ua-WhatAnAwesomeCDROM,readonly=on,cache=none \
|
|
-device ide-cd,bus=ide.1,unit=0,drive=drive-ua-WhatAnAwesomeCDROM,\
|
|
id=ua-WhatAnAwesomeCDROM,bootindex=2 \
|
|
-global isa-fdc.driveA=drive-ua-myDisk1 \
|
|
-netdev tap,fd=3,id=hostua-CheckoutThisNIC,vhost=on,vhostfd=44 \
|
|
-device virtio-net-pci,netdev=hostua-CheckoutThisNIC,id=ua-CheckoutThisNIC,\
|
|
mac=52:54:00:d6:c0:0b,bus=pci.0,addr=0x3 \
|
|
-netdev socket,listen=127.0.0.1:1234,id=hostua-WeCanAlsoDoServerMode \
|
|
-device rtl8139,netdev=hostua-WeCanAlsoDoServerMode,\
|
|
id=ua-WeCanAlsoDoServerMode,mac=52:54:00:22:c9:42,bus=pci.0,addr=0x9 \
|
|
-netdev socket,connect=127.0.0.1:1234,id=hostua-AndAlsoClientMode \
|
|
-device rtl8139,netdev=hostua-AndAlsoClientMode,id=ua-AndAlsoClientMode,\
|
|
mac=52:54:00:8c:b1:f8,bus=pci.0,addr=0xa \
|
|
-device ccid-card-emulated,backend=nss-emulated,id=smartcard0,bus=ua-myCCID.0 \
|
|
-chardev pty,id=charserial0 \
|
|
-device isa-serial,chardev=charserial0,id=serial0 \
|
|
-chardev pty,id=charserial1 \
|
|
-device isa-serial,chardev=charserial1,id=serial1 \
|
|
-chardev socket,id=charchannel0,\
|
|
path=/var/lib/libvirt/qemu/channel/target/gentoo.org.qemu.guest_agent.0,server,\
|
|
nowait \
|
|
-device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,\
|
|
id=channel0,name=org.qemu.guest_agent.0 \
|
|
-vnc 127.0.0.1:0 \
|
|
-vga cirrus \
|
|
-device intel-hda,id=sound0,bus=pci.0,addr=0x4 \
|
|
-device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 \
|
|
-device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x6
|