block/rbd: Add support for rbd image encryption
authorOr Ozeri <oro@il.ibm.com>
Sun, 27 Jun 2021 11:46:35 +0000 (14:46 +0300)
committerKevin Wolf <kwolf@redhat.com>
Fri, 9 Jul 2021 10:26:05 +0000 (12:26 +0200)
commit42e4ac9ef5a65f1714dd6f332de160eb63e0d6a4
tree89c82b16e3f3197eac300bd8f51dfcc2c32fbda5
parent0725570b2dcaeedff3031fc271b0d731a7382bfd
block/rbd: Add support for rbd image encryption

Starting from ceph Pacific, RBD has built-in support for image-level encryption.
Currently supported formats are LUKS version 1 and 2.

There are 2 new relevant librbd APIs for controlling encryption, both expect an
open image context:

rbd_encryption_format: formats an image (i.e. writes the LUKS header)
rbd_encryption_load: loads encryptor/decryptor to the image IO stack

This commit extends the qemu rbd driver API to support the above.

Signed-off-by: Or Ozeri <oro@il.ibm.com>
Message-Id: <20210627114635.39326-1-oro@il.ibm.com>
Reviewed-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
block/rbd.c
qapi/block-core.json