I agree, I think we're good for VMDK and I might be worrying too early:
I haven't tested it yet but reading the code it looks like we could convert other less-used formats to raw (qed, or qcow for example). My worry is that qed, for example, is no longer developed and I imagine hasn't been as scrutinized as qcow2 (or vmdk, for that matter).
To be on the safe side, I would further restrict the formats we accept to convert from, but I am not sure to what extend that is feasible.
I agree, I think we're good for VMDK and I might be worrying too early:
I haven't tested it yet but reading the code it looks like we could convert other less-used formats to raw (qed, or qcow for example). My worry is that qed, for example, is no longer developed and I imagine hasn't been as scrutinized as qcow2 (or vmdk, for that matter).
To be on the safe side, I would further restrict the formats we accept to convert from, but I am not sure to what extend that is feasible.