Hi Tommi,
I was looking for a way to pass a keyfile, just found it

--keyfile  (both rbd and qemu drive option)


Better indeed ;)



----- Mail original ----- 

De: "Tommi Virtanen" <t...@inktank.com> 
À: "Alexandre DERUMIER" <aderum...@odiso.com> 
Cc: ceph-devel@vger.kernel.org 
Envoyé: Mercredi 30 Mai 2012 19:40:46 
Objet: Re: rbd command : is it possible to pass authkey in argument ? 

On Wed, May 30, 2012 at 2:15 AM, Alexandre DERUMIER <aderum...@odiso.com> 
wrote: 
> Is it possible to pass authkey as argument in rbd command line ? (I can do in 
> with qemu-rbd drive option) 

I see you got an answer for your actual question. I wanted to take a 
different angle. 

You should really avoid putting secrets on command lines, or in 
process environment. Those are readable to all local users. This is 
why I advocate keyring files. 

Alternatively, with qemu, the monitor command mechanism they have 
would let you add the drives, before starting up the vm, without the 
secrets being visible to others. 



-- 

-- 




        Alexandre D erumier 
Ingénieur Système 
Fixe : 03 20 68 88 90 
Fax : 03 20 68 90 81 
45 Bvd du Général Leclerc 59100 Roubaix - France 
12 rue Marivaux 75002 Paris - France 
        
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to