Re: qemu-img commit an encrypted snapshot

[Max Reitz]

On 27.01.20 22:17, Sofia Enriquez wrote:
> Hello
> I'm using Devstack (OpenStack) and I'm facing an error while trying to
> commit an encrypted snapshot:
> 
> qemu-img commit -d 
> /mnt/817322e72ebfe57/volume-213948924.snapshot431d-8942-0d1a01e0a346 
> --image-opts encrypt.key-secret=***
> Stderr: "qemu-img: Expecting one image file name\nTry 'qemu-img --help' for 
> more information\n"
> 
> But if I omit the encrypt.key-secret:
> 
> Stderr: "qemu-img: Could not open <path-to-snapshot>: Parameter 
> 'encrypt.key-secret' is required for cipher\n"
> 
> I've read the documentation, and I thought that passing an object with
> the encryption key was going to help but same error:
> 
> qemu-img commit --object
> secret,id=secret,format=raw,file=/to/luks/data/luks_imm3k3im -d
> /mnt/89672ebfe57/volume-8509-929ad75134f4.snapshot4431d-8942-0d1a01e0a346 
> --image-opts
> encrypt.format=luks,file.filename=/mnt/89672ebfe57/volume-8509-929ad75134f4.snapshot4431d-8942-0d1a01e0a346,encrypt.key-secret=***
> Stderr: "qemu-img: Expecting one image file name\nTry 'qemu-img --help'
> for more information\n"

Hi,

If you specify --image-opts, then that means the whole filename will be
interpreted as an option string.  Instead, you specified the filename
and some options (encrypt.key-secret=X) separately.  (I realize the
error message isn’t very helpful.  It does say “*one* image file name”,
but, well...)

I suppose the following should work:

qemu-img commit -d --image-opts \
    driver=qcow2,file.filename=/path/to/image,encrypt.key-secret=X

Max

signature.asc
Description: OpenPGP digital signature