[libvirt] [PATCH v2 2/3] qemu: domain: Add support for TLS for NBD

Ján Tomko jtomko at redhat.com
Sat Jun 2 15:11:25 UTC 2018


On Thu, May 31, 2018 at 08:51:13PM +0200, Peter Krempa wrote:
>https://bugzilla.redhat.com/show_bug.cgi?id=1544869
>
>Signed-off-by: Peter Krempa <pkrempa at redhat.com>
>---
> docs/formatdomain.html.in                          |  8 ++++-
> docs/schemas/domaincommon.rng                      |  5 +++
> src/qemu/qemu_command.c                            |  5 +++
> src/qemu/qemu_domain.c                             | 38 ++++++++++++++++++++--
> .../disk-drive-network-tlsx509.args                |  9 ++++-
> .../disk-drive-network-tlsx509.xml                 |  8 +++++
> tests/qemuxml2argvtest.c                           |  2 +-
> .../disk-drive-network-tlsx509.xml                 |  8 +++++
> 8 files changed, 78 insertions(+), 5 deletions(-)
>
>diff --git a/docs/formatdomain.html.in b/docs/formatdomain.html.in
>index b5a6e33bfe..dccabe7f35 100644
>--- a/docs/formatdomain.html.in
>+++ b/docs/formatdomain.html.in
>@@ -2786,7 +2786,13 @@
>               is mandatory to specify which volume/image will be used.
>               </p>
>
>-              <p>For "nbd", the <code>name</code> attribute is optional.
>+              <p>For "nbd", the <code>name</code> attribute is optional. TLS
>+              transport for NBD can be enabled by using the <code>tls</code>

can be enabled by setting the <code>tls</code> attribute to yes

>+              attribute. For the QEMU hypervisor, usage of a TLS environment can
>+              lso be globally controlled on the host by the
>+              <code>nbd_tls</code> and <code>nbd_tls_x509_cert_dir</code> in
>+              /etc/libvirt/qemu.conf.
>+              ('tls' <span class="since">Since 4.5.0</span>)
>               </p>
>
>               <p>For "iscsi" (<span class="since">since 1.0.4</span>), the

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20180602/386aca23/attachment-0001.sig>


More information about the libvir-list mailing list