[libvirt] Fwd: libvirt secret support password or encryption keys?

Eric Blake eblake at redhat.com
Tue Jun 19 22:22:08 UTC 2012


On 06/19/2012 03:38 AM, Zhimou Peng wrote:
> FWD
> 
> Hi, all
> PLS help, i'm reviewing man doc of libvirt secrets
> 
> # man virsh
> ...
> SECRET COMMMANDS
>        The following commands manipulate "secrets" (e.g. passwords, passphrases       -----> secret-set-value only support base64 "passphrases"

secret-set-value supports _all_ types of secrets, since a secret is
_any_ base64-encoded text.  Whether you use that secret information as a
password, a passphrase, and encryption key, or something else is up to
how you have connected that secret to the rest of your virtual machine
management.

>        and encryption keys).  Libvirt can store secrets independently from their              
>        use, and other objects (e.g. volumes or domains) can refer to the secrets           
>        for encryption or possibly other uses.  Secrets are identified using an
>        UUID.  See <http://libvirt.org/formatsecret.html> for documentation of
>        the XML format used to represent properties of secrets.
> ...
> 
> So, I want to know that if libvirt support other 2 kinds of "secrets". And if so, How to use password and encrytion keys ? If libvirt not support that, i will file a bug of this man doc.

I'm not sure where you are getting confused; would it help if the man
page for 'secret-set-value' used the term 'secret' instead of
'passphrase', since 'secret' is the generic term for any base64-encoded
data that must be kept secret?  You are welcome to submit a patch
yourself; the man page source is in tools/virsh.pod.

-- 
Eric Blake   eblake at redhat.com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 620 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20120619/1f7b7ddc/attachment-0001.sig>


More information about the libvir-list mailing list