github-actions[bot] commented on issue #14663: URL: https://github.com/apache/cloudstack/issues/14663#issuecomment-6802607067
> [!WARNING] > threat detection engine error > The threat detection engine encountered an error and could not complete analysis. This is a tooling failure, not a security finding. > > <!-- gh-aw-threat-engine-error --> > > <details> > <summary>What happened</summary> > > The threat detection engine failed to produce results. > > Review the [workflow run logs](https://github.com/apache/cloudstack/actions/runs/43029422543) for details. > > </details> ## 🎯 Triage report On KVM, a volume created from an encrypted offering on a SharedMountPoint pool is created with `qemu-img`-less libvirt creation and no LUKS header. The attach XML still includes `<encryption format='luks'>`, so attach fails with "No encryption in image header". The reporter traced this to `createPhysicalDisk` routing SharedMountPoint to the libvirt path in 4.22.1.1. A maintainer comment says #13537 fixes this, and the fix is in the 4.22.2.0 RC and in 4.23.0.0 according to the reporter's reading of the tags. ### 📊 Assessment | Dimension | Value | Reasoning | | --- | --- | --- | | **Type** | type:bug | Encrypted attach fails with a clear libvirt error | | **Component** | component:kvm, component:primary-storage | Disk creation path for SharedMountPoint pools on KVM | | **Severity** | Severity:Major | Encrypted volumes cannot be attached on this pool type in 4.22.1.1 | | **Labels** | type:bug, component:kvm, component:primary-storage, Severity:Major | | | **Coding agent** | Not suitable | Already addressed by merged #13537; a follow-up (#14667) is open | ### 🔗 Similar issues - #14662 (related) — same encrypted offering on a manually selected pool, which gets no encryption and no error - #13055 (related, closed) — earlier encrypted volume work on NFS and RBD <details> <summary>💡 Notes and suggestions</summary> - Retest on a build that includes #13537 (the reporter has said they will). Close only after that confirmation. - Please check whether the same routing applies to other pool types that skip `qemu-img`. </details> > Generated by [Daily Issue Triage](https://github.com/apache/cloudstack/actions/runs/43029422543) · copilot · haiku55 · \~6 AIC · ⊞ 3.8K · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-issue-triage%22&type=issues) <details> <summary><sub>Add this agentic workflow to your repo</sub></summary> To install this agentic workflow, run ``` gh aw add githubnext/agentics/workflows/daily-issue-triage.md@139fa09ef17cde4135e696ff8e7af09bc5ddfa6e ``` </details> <!-- gh-aw-workflow-call-id: apache/cloudstack/daily-issue-triage --> <!-- gh-aw-agentic-workflow: Daily Issue Triage, engine: copilot, model: claude-haiku-5.5, id: 43029422543, workflow_id: daily-issue-triage, run: https://github.com/apache/cloudstack/actions/runs/43029422543 --> <!-- gh-aw-execution: {"version":1,"repo_id":"9759448","repository":"apache/cloudstack","aw_workflow_id":"daily-issue-triage","run_id":"43029422543","run_attempt":"1","run_url":"https://github.com/apache/cloudstack/actions/runs/43029422543","publishing_job":{"key":"safe_outputs","check_run_id":"130687254582"}} --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
