yahoo-eng-team team mailing list archive

[Lee Yarwood <lyarwood@xxxxxxxxxx>]

Public bug reported:

Description
===========
The original check [1] introduced in Queens only handles cases where we are swapping from an encrypted LUKS volume and does not handle swapping from an unencrypted volume to an encrypted LUKS volume. This still need to be blocked pending additional QEMU/libvirt wiring to allow LUKS disks to be rebased while using QEMU to natively decrypt the disk.

[1]
https://review.openstack.org/#/c/523958/18/nova/virt/libvirt/driver.py@1487

Steps to reproduce
==================
Swap between an unencrypted volume to a LUKS encrypted volume in >=Queens with the native QEMU decryption requirements met (QEMU >=2.6 and Libvirt >=2.2.0 ).

Expected result
===============
This is blocked by n-cpu with a NotImplementedError raised.

Actual result
=============
This is allowed but ultimately fails due to Libvirt being unable to rebase the into the encrypted disk.

** Affects: nova
     Importance: Undecided
     Assignee: Lee Yarwood (lyarwood)
         Status: In Progress

** Summary changed:

- swap volume not blocked between an decrypted and encrypted volume while using QEMU to natively decrypt
+ swap volume not blocked between an unencrypted and encrypted volume while using QEMU to natively decrypt

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1749418

Title:
  swap volume not blocked between an unencrypted and encrypted volume
  while using QEMU to natively decrypt

Status in OpenStack Compute (nova):
  In Progress

Bug description:
  Description
  ===========
  The original check [1] introduced in Queens only handles cases where we are swapping from an encrypted LUKS volume and does not handle swapping from an unencrypted volume to an encrypted LUKS volume. This still need to be blocked pending additional QEMU/libvirt wiring to allow LUKS disks to be rebased while using QEMU to natively decrypt the disk.

  [1]
  https://review.openstack.org/#/c/523958/18/nova/virt/libvirt/driver.py@1487

  Steps to reproduce
  ==================
  Swap between an unencrypted volume to a LUKS encrypted volume in >=Queens with the native QEMU decryption requirements met (QEMU >=2.6 and Libvirt >=2.2.0 ).

  Expected result
  ===============
  This is blocked by n-cpu with a NotImplementedError raised.

  Actual result
  =============
  This is allowed but ultimately fails due to Libvirt being unable to rebase the into the encrypted disk.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1749418/+subscriptions