[PATCH v6 3/3] block/rbd: Add support for layered encryption

2023-01-30 Thread o...@il.ibm.com
From: Or Ozeri Starting from ceph Reef, RBD has built-in support for layered encryption, where each ancestor image (in a cloned image setting) can be possibly encrypted using a unique passphrase. A new function, rbd_encryption_load2, was added to librbd API. This new function supports an array o

[PATCH v6 2/3] block/rbd: Add luks-any encryption opening option

2023-01-30 Thread o...@il.ibm.com
From: Or Ozeri Ceph RBD encryption API required specifying the encryption format for loading encryption. The supported formats were LUKS (v1) and LUKS2. Starting from Reef release, RBD also supports loading with "luks-any" format, which works for both versions of LUKS. This commit extends the q

[PATCH v6 1/3] block/rbd: Remove redundant stack variable passphrase_len

2023-01-30 Thread o...@il.ibm.com
From: Or Ozeri Signed-off-by: Or Ozeri --- block/rbd.c | 16 ++-- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/block/rbd.c b/block/rbd.c index 3aa6aae0e0..cfec0f2862 100644 --- a/block/rbd.c +++ b/block/rbd.c @@ -385,7 +385,6 @@ static int qemu_rbd_encryption_forma

[PATCH v6 0/3] block/rbd: Add support for layered encryption

2023-01-29 Thread o...@il.ibm.com
v6: nit fixes v5: nit fixes v4: split to multiple commits add support for more than just luks-any in layered encryption nit fixes v3: further nit fixes suggested by @idryomov v2: nit fixes suggested by @idryomov Or Ozeri (3): block/rbd: Remove redundant stack variable passphrase_len bl