[libvirt PATCH 0/9] make internal only secrets work with split daemons

Daniel P. Berrangé berrange at redhat.com
Fri May 7 14:08:02 UTC 2021


On Fri, May 07, 2021 at 03:48:42PM +0200, Michal Prívozník wrote:
> On 5/7/21 3:46 PM, Daniel P. Berrangé wrote:
> > On Fri, May 07, 2021 at 03:43:32PM +0200, Michal Prívozník wrote:
> >> On 5/7/21 2:33 PM, Daniel P. Berrangé wrote:
> >>> I'm not going to apply this yet as I realized that I have broken
> >>> internal secrets with monolithic libvirtd instead :-(
> >>
> >> You did? I've tested it (by starting a pool with a secret) and it worked.
> > 
> > Secrets aren't used when starting a pool with merely encrypted vols present.
> > 
> > They're only needed to perform I/O, so would have to test starting a guest,
> > or cloning a encrypted vol. Alternatively starting a RBD/iSCSI pool that
> > requires auth.
> 
> Yeah, it's an iSCSI pool that requires auth. But okay, I'll try

You did have the secret marked with  private="yes" ?


Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|




More information about the libvir-list mailing list