So I think we have one more path that allows for a problem but affects only raw backend (as qcow is not affected and _live_snapshot is enabled only for file backed instances):
this creates an overlay on top of whatever is read from the image by calling libvirt_utils.get_disk_backing_file, and then image_create (in case of raw it could have been tampered with). The code then proceeds to call blockRebase and finally qemu-image convert to whatever was detected.
It would be good to try to reproduce this path as well as we'll want to fix the issue with the
So I think we have one more path that allows for a problem but affects only raw backend (as qcow is not affected and _live_snapshot is enabled only for file backed instances):
https:/ /github. com/openstack/ nova/blob/ 240df4285964d34 1239376d8ea355c 1b3763007a/ nova/virt/ libvirt/ driver. py#L1567- L1571
this creates an overlay on top of whatever is read from the image by calling libvirt_ utils.get_ disk_backing_ file, and then image_create (in case of raw it could have been tampered with). The code then proceeds to call blockRebase and finally qemu-image convert to whatever was detected.
It would be good to try to reproduce this path as well as we'll want to fix the issue with the