Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-27 Thread Ilya Dryomov
On Sun, Jun 27, 2021 at 1:09 PM Or Ozeri wrote: > > Should I still leave the encryption format part of the state, and just not > report it? or should I also remove it from the state? I'd remove it, reverting to the previous version of the patch except instead of fetching the size with

RE: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-27 Thread Or Ozeri
everything else for now.>> Thanks,> Or>> -"Or Ozeri" <o...@il.ibm.com> wrote: -> To: qemu-devel@nongnu.org> From: "Or Ozeri" <o...@il.ibm.com>> Date: 06/27/2021 11:31AM> Cc: qemu-bl...@nongnu.org, o...@il.ibm.com, kw...@redhat.com

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-27 Thread Ilya Dryomov
and drop everything else for now. > > Thanks, > Or > > -"Or Ozeri" wrote: - > To: qemu-devel@nongnu.org > From: "Or Ozeri" > Date: 06/27/2021 11:31AM > Cc: qemu-bl...@nongnu.org, o...@il.ibm.com, kw...@redhat.com, > to.my.troc...@gmail.com, dan...@il.ibm.c

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-27 Thread Or Ozeri
Ilya,I fixed according to your suggestions, except for the passphrase zeroing.Looks like it's not a one-liner, but rather a long list of ifdefs to try and cover all possible platforms/compilers (this is what I've seen they do in k5-int.h).I didn't want to copy this into rbd.c.I guess that the

[PATCH] block/rbd: Add support for rbd image encryption

2021-06-27 Thread Or Ozeri
Starting from ceph Pacific, RBD has built-in support for image-level encryption. Currently supported formats are LUKS version 1 and 2. There are 2 new relevant librbd APIs for controlling encryption, both expect an open image context: rbd_encryption_format: formats an image (i.e. writes the LUKS

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-26 Thread Ilya Dryomov
On Mon, Jun 21, 2021 at 4:49 PM Or Ozeri wrote: > > Starting from ceph Pacific, RBD has built-in support for image-level > encryption. > Currently supported formats are LUKS version 1 and 2. > > There are 2 new relevant librbd APIs for controlling encryption, both expect > an > open image

[PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Or Ozeri
Starting from ceph Pacific, RBD has built-in support for image-level encryption. Currently supported formats are LUKS version 1 and 2. There are 2 new relevant librbd APIs for controlling encryption, both expect an open image context: rbd_encryption_format: formats an image (i.e. writes the LUKS

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread no-reply
Patchew URL: https://patchew.org/QEMU/20210621142103.1417408-1-...@il.ibm.com/ Hi, This series seems to have some coding style problems. See output below for more information: Type: series Message-id: 20210621142103.1417408-1-...@il.ibm.com Subject: [PATCH] block/rbd: Add support for rbd

[PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Or Ozeri
Starting from ceph Pacific, RBD has built-in support for image-level encryption. Currently supported formats are LUKS version 1 and 2. There are 2 new relevant librbd APIs for controlling encryption, both expect an open image context: rbd_encryption_format: formats an image (i.e. writes the LUKS

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Ilya Dryomov
On Mon, Jun 21, 2021 at 1:27 PM Daniel P. Berrangé wrote: > > On Mon, Jun 21, 2021 at 01:23:46PM +0200, Ilya Dryomov wrote: > > On Mon, Jun 21, 2021 at 1:04 PM Daniel P. Berrangé > > wrote: > > > > > > On Mon, Jun 21, 2021 at 12:59:37PM +0200, Ilya Dryomov wrote: > > > > On Mon, Jun 21, 2021 at

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Daniel P . Berrangé
On Mon, Jun 21, 2021 at 01:23:46PM +0200, Ilya Dryomov wrote: > On Mon, Jun 21, 2021 at 1:04 PM Daniel P. Berrangé > wrote: > > > > On Mon, Jun 21, 2021 at 12:59:37PM +0200, Ilya Dryomov wrote: > > > On Mon, Jun 21, 2021 at 10:32 AM Daniel P. Berrangé > > > wrote: > > > > > > > > On Sat, Jun

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Ilya Dryomov
On Mon, Jun 21, 2021 at 1:04 PM Daniel P. Berrangé wrote: > > On Mon, Jun 21, 2021 at 12:59:37PM +0200, Ilya Dryomov wrote: > > On Mon, Jun 21, 2021 at 10:32 AM Daniel P. Berrangé > > wrote: > > > > > > On Sat, Jun 19, 2021 at 09:44:32PM +0200, Ilya Dryomov wrote: > > > > On Thu, Jun 17, 2021

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Daniel P . Berrangé
On Mon, Jun 21, 2021 at 12:59:37PM +0200, Ilya Dryomov wrote: > On Mon, Jun 21, 2021 at 10:32 AM Daniel P. Berrangé > wrote: > > > > On Sat, Jun 19, 2021 at 09:44:32PM +0200, Ilya Dryomov wrote: > > > On Thu, Jun 17, 2021 at 6:05 PM Or Ozeri wrote: > > > > > > > > Starting from ceph Pacific,

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Ilya Dryomov
On Mon, Jun 21, 2021 at 10:32 AM Daniel P. Berrangé wrote: > > On Sat, Jun 19, 2021 at 09:44:32PM +0200, Ilya Dryomov wrote: > > On Thu, Jun 17, 2021 at 6:05 PM Or Ozeri wrote: > > > > > > Starting from ceph Pacific, RBD has built-in support for image-level > > > encryption. > > > Currently

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-21 Thread Daniel P . Berrangé
On Sat, Jun 19, 2021 at 09:44:32PM +0200, Ilya Dryomov wrote: > On Thu, Jun 17, 2021 at 6:05 PM Or Ozeri wrote: > > > > Starting from ceph Pacific, RBD has built-in support for image-level > > encryption. > > Currently supported formats are LUKS version 1 and 2. > > > > There are 2 new relevant

RE: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-20 Thread Or Ozeri
Thanks for your review!Regarding the last point:I currently don't have any plans for adding new luks2-only options, but they do exist. See in cryptsetup, for example the sector size which is configurable in luks2 only.In the librbd API we followed the same spirit and split luks1 and luks2 option

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-20 Thread Ilya Dryomov
On Sat, Jun 19, 2021 at 9:44 PM Ilya Dryomov wrote: > > On Thu, Jun 17, 2021 at 6:05 PM Or Ozeri wrote: > > > > Starting from ceph Pacific, RBD has built-in support for image-level > > encryption. > > Currently supported formats are LUKS version 1 and 2. > > > > There are 2 new relevant librbd

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-06-19 Thread Ilya Dryomov
On Thu, Jun 17, 2021 at 6:05 PM Or Ozeri wrote: > > Starting from ceph Pacific, RBD has built-in support for image-level > encryption. > Currently supported formats are LUKS version 1 and 2. > > There are 2 new relevant librbd APIs for controlling encryption, both expect > an > open image

[PATCH] block/rbd: Add support for rbd image encryption

2021-06-17 Thread Or Ozeri
Starting from ceph Pacific, RBD has built-in support for image-level encryption. Currently supported formats are LUKS version 1 and 2. There are 2 new relevant librbd APIs for controlling encryption, both expect an open image context: rbd_encryption_format: formats an image (i.e. writes the LUKS

[PATCH] block/rbd: Add support for rbd image encryption

2021-05-05 Thread Or Ozeri
Starting from ceph Pacific, RBD has built-in support for image-level encryption. Currently supported formats are LUKS version 1 and 2. There are 2 new relevant librbd APIs for controlling encryption, both expect an open image context: rbd_encryption_format: formats an image (i.e. writes the LUKS

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-05-05 Thread Daniel P . Berrangé
]qemu-devel@nongnu.org, [5]kw...@redhat.com, >[6]to.my.troc...@gmail.com, [7]qemu-bl...@nongnu.org, [8]dan...@il.ibm.com >Subject: [EXTERNAL] Re: [PATCH] block/rbd: Add support for rbd image >encryption > >On Sun, May 02, 2021 at 10:36:17AM +0300, Or Ozeri wrote: >

RE: [PATCH] block/rbd: Add support for rbd image encryption

2021-05-05 Thread Or Ozeri
Thanks Daniel!I prepared a modified patch addressing all of your suggestions (including resizing after formatting to increase the image size).The only thing I'm not sure about is your last point regarding reporting image is encrypted.When I followed the flow of "qemu-img info" on an

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-05-04 Thread Daniel P . Berrangé
On Sun, May 02, 2021 at 10:36:17AM +0300, Or Ozeri wrote: > Starting from ceph Pacific, RBD has built-in support for image-level > encryption. > Currently supported formats are LUKS version 1 and 2. > > There are 2 new relevant librbd APIs for controlling encryption, both expect > an > open

Re: [PATCH] block/rbd: Add support for rbd image encryption

2021-05-02 Thread no-reply
Patchew URL: https://patchew.org/QEMU/20210502073617.2978836-1-...@il.ibm.com/ Hi, This series seems to have some coding style problems. See output below for more information: Type: series Message-id: 20210502073617.2978836-1-...@il.ibm.com Subject: [PATCH] block/rbd: Add support for rbd

[PATCH] block/rbd: Add support for rbd image encryption

2021-05-02 Thread Or Ozeri
Starting from ceph Pacific, RBD has built-in support for image-level encryption. Currently supported formats are LUKS version 1 and 2. There are 2 new relevant librbd APIs for controlling encryption, both expect an open image context: rbd_encryption_format: formats an image (i.e. writes the LUKS