[virt-tools-list] Start encrypted Image with virt-manager
Daniel P. Berrange
berrange at redhat.com
Wed Sep 9 09:38:20 UTC 2015
On Wed, Sep 09, 2015 at 11:33:29AM +0200, Matthias Walther wrote:
> Dear Daniel,
> thanks for your quick reply. What's the alternative?
> I thought maybe using standard encryption within the virtual machine
> might be slow. What's the best practice?
LUKS / dm-crypt is the only viable option right now - either set it up
on your host and unlock it before starting the guest, or run it inside
your guest. If you make sure the guest is configured with a host-model
CPU, then the guest CPU will have the 'aes' flag available and performance
should be pretty decent for guest filesystem encryption.
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|
More information about the virt-tools-list