[virt-tools-list] Start encrypted Image with virt-manager

[Daniel P. Berrange]

On Wed, Sep 09, 2015 at 11:33:29AM +0200, Matthias Walther wrote:
> Dear Daniel,
> 
> thanks for your quick reply. What's the alternative? 
> 
> I thought maybe using standard encryption within the virtual machine
> might be slow. What's the best practice?

LUKS / dm-crypt is the only viable option right now - either set it up
on your host and unlock it before starting the guest, or run it inside
your guest. If you make sure the guest is configured with a host-model
CPU, then the guest CPU will have the 'aes' flag available and performance
should be pretty decent for guest filesystem encryption.

Regards,
Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|