Public bug reported: Description =========== The original check [1] introduced in Queens only handles cases where we are swapping from an encrypted LUKS volume and does not handle swapping from an unencrypted volume to an encrypted LUKS volume. This still need to be blocked pending additional QEMU/libvirt wiring to allow LUKS disks to be rebased while using QEMU to natively decrypt the disk.
[1] https://review.openstack.org/#/c/523958/18/nova/virt/libvirt/driver.py@1487 Steps to reproduce ================== Swap between an unencrypted volume to a LUKS encrypted volume in >=Queens with the native QEMU decryption requirements met (QEMU >=2.6 and Libvirt >=2.2.0 ). Expected result =============== This is blocked by n-cpu with a NotImplementedError raised. Actual result ============= This is allowed but ultimately fails due to Libvirt being unable to rebase the into the encrypted disk. ** Affects: nova Importance: Undecided Assignee: Lee Yarwood (lyarwood) Status: In Progress ** Summary changed: - swap volume not blocked between an decrypted and encrypted volume while using QEMU to natively decrypt + swap volume not blocked between an unencrypted and encrypted volume while using QEMU to natively decrypt -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1749418 Title: swap volume not blocked between an unencrypted and encrypted volume while using QEMU to natively decrypt Status in OpenStack Compute (nova): In Progress Bug description: Description =========== The original check [1] introduced in Queens only handles cases where we are swapping from an encrypted LUKS volume and does not handle swapping from an unencrypted volume to an encrypted LUKS volume. This still need to be blocked pending additional QEMU/libvirt wiring to allow LUKS disks to be rebased while using QEMU to natively decrypt the disk. [1] https://review.openstack.org/#/c/523958/18/nova/virt/libvirt/driver.py@1487 Steps to reproduce ================== Swap between an unencrypted volume to a LUKS encrypted volume in >=Queens with the native QEMU decryption requirements met (QEMU >=2.6 and Libvirt >=2.2.0 ). Expected result =============== This is blocked by n-cpu with a NotImplementedError raised. Actual result ============= This is allowed but ultimately fails due to Libvirt being unable to rebase the into the encrypted disk. To manage notifications about this bug go to: https://bugs.launchpad.net/nova/+bug/1749418/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
