libvirt/tests/storagevolxml2argvdata/qcow2-luks-convert-encrypt2fileqcow2.argv
Daniel P. Berrangé ecfc4094d8 storage: add support for qcow2 LUKS encryption
The storage driver was wired up to support creating raw volumes in LUKS
format, but was never adapted to support LUKS-in-qcow2. This is trivial
as it merely requires the encryption properties to be prefixed with
the "encrypt." prefix, and "encrypt.format=luks" when creating the
volume.

Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2020-09-18 11:22:28 +01:00

15 lines
450 B
Plaintext

qemu-img \
create \
-f qcow2 \
-o compat=0.10 /var/lib/libvirt/images/sparse-qcow2.img 1073741824K
qemu-img \
convert \
--image-opts \
-n \
--target-image-opts \
--object secret,id=OtherDemoLuksConvert.img_encrypt0,\
file=/path/to/inputSecretFile driver=qcow2,\
file.filename=/var/lib/libvirt/images/OtherDemoLuksConvert.img,\
encrypt.key-secret=OtherDemoLuksConvert.img_encrypt0 driver=qcow2,\
file.filename=/var/lib/libvirt/images/sparse-qcow2.img