OpenStack Compute (nova)

  1. Series queens
  2. Bug #1749418
  3. Comment #0

Comment 0 for bug 1749418

Revision history for this message
Lee Yarwood (lyarwood) wrote : swap volume not blocked between an decrypted and encrypted volume while using QEMU to natively decrypt

Description
===========
The original check [1] introduced in Queens only handles cases where we are swapping from an encrypted LUKS volume and does not handle swapping from an unencrypted volume to an encrypted LUKS volume. This still need to be blocked pending additional QEMU/libvirt wiring to allow LUKS disks to be rebased while using QEMU to natively decrypt the disk.

[1] https://review.openstack.org/#/c/523958/18/nova/virt/libvirt/driver.py@1487

Steps to reproduce
==================
Swap between an unencrypted volume to a LUKS encrypted volume in >=Queens with the native QEMU decryption requirements met (QEMU >=2.6 and Libvirt >=2.2.0 ).

Expected result
===============
This is blocked by n-cpu with a NotImplementedError raised.

Actual result
=============
This is allowed but ultimately fails due to Libvirt being unable to rebase the into the encrypted disk.