> >> > Why is this needed? > > Security? I don't want that another process can write nonsense into my > backup. > > They can already write nonsense to your iSCSI target, can't they?
I am more concerned about software bugs. You need to find a free port, and then pass that port to kvm. If the original server dies, it is likely that another process start using the same port ... > But you can always sandbox using SELinux, if you care about that, or use a > Unix > socket + SCM_CREDENTIALS. unix sockets works with qemu nbd code?