]> git.proxmox.com Git - mirror_qemu.git/commit
block/rbd: Add support for layered encryption
authorOr Ozeri <oro@il.ibm.com>
Sun, 29 Jan 2023 11:31:20 +0000 (05:31 -0600)
committerKevin Wolf <kwolf@redhat.com>
Thu, 23 Feb 2023 18:49:35 +0000 (19:49 +0100)
commit0f385a2420d2c3f8ae7ed65fbe2712027664059e
treed905bdcbc1c0a79bb22ada3431bf95162aee320f
parentb8f218ef6036d4d62968f6da9319c9d0663539dd
block/rbd: Add support for layered encryption

Starting from ceph Reef, RBD has built-in support for layered encryption,
where each ancestor image (in a cloned image setting) can be possibly
encrypted using a unique passphrase.

A new function, rbd_encryption_load2, was added to librbd API.
This new function supports an array of passphrases (via "spec" structs).

This commit extends the qemu rbd driver API to use this new librbd API,
in order to support this new layered encryption feature.

Signed-off-by: Or Ozeri <oro@il.ibm.com>
Message-Id: <20230129113120.722708-4-oro@oro.sl.cloud9.ibm.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
block/rbd.c
qapi/block-core.json