Qemu Dirty Bitmap backup to encrypted target

[Craig Mull]

How can have QEMU backup write the output to an encrypted target?

 

Blocks in the dirty bitmap are unencrypted, and as such when I write them with QEMU backup they are written to the target unencrypted.

 

I've experimented with providing a json string as the target but with no luck.

 

transaction='{ "execute": "transaction", 

  "arguments": { 

    "actions": [

      {"type": "block-dirty-bitmap-add", 

       "data": {"node": "drive-virtio-disk0", "granularity": 2097152, "name": "mybitmap"} },

      {"type": "drive-backup",

       "data": {"device": "drive-virtio-disk0", "target": "json:{\"encrypt.format\": \"luks\", \"encrypt.key-secret\": \"virtio-disk0-luks-secret0\", \"driver\": \"qcow2\", \"file\": {\"driver\": \"file\", \"filename\": \"/tmp/target-encrypt-test.qcow2\"}}",

                "sync": "full", "format": "qcow2"} } 

    ] 

  } 

}'

 

virsh -c qemu:///system qemu-monitor-command --pretty 28 $transaction

 

{

  "id": "libvirt-45",

  "error": {

    "class": "GenericError",

    "desc": "Unknown protocol 'json'"

  }

}

_______________________________
Craig Mull
VPC Storage Architect
address@hidden