Re: [libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-15 Thread Richard W.M. Jones
On Mon, Apr 15, 2013 at 12:39:30PM +0100, Daniel P. Berrange wrote: > On Mon, Apr 15, 2013 at 12:18:43PM +0100, Richard W.M. Jones wrote: > > - How should host_key_check be modelled via the libvirt XML / API? > > I'm not sure - what does that do ? Three settings: (1) host_key_check=no turns off

Re: [libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-15 Thread Daniel P. Berrange
On Mon, Apr 15, 2013 at 12:18:43PM +0100, Richard W.M. Jones wrote: > On Mon, Apr 15, 2013 at 11:31:08AM +0100, Daniel P. Berrange wrote: > > Yep, that would make it easier. Also if you did SSH key auth, but allowed > > passphrases to be passed in, instead of pulled from an agent (in same way > > S

Re: [libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-15 Thread Richard W.M. Jones
On Mon, Apr 15, 2013 at 11:31:08AM +0100, Daniel P. Berrange wrote: > Yep, that would make it easier. Also if you did SSH key auth, but allowed > passphrases to be passed in, instead of pulled from an agent (in same way > SSH does if no agent is running). Because qemu is running as a different use

Re: [libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-15 Thread Daniel P. Berrange
On Mon, Apr 15, 2013 at 11:18:26AM +0100, Richard W.M. Jones wrote: > On Mon, Apr 15, 2013 at 11:11:10AM +0100, Daniel P. Berrange wrote: > > On Wed, Apr 10, 2013 at 03:09:18PM +0100, Richard W.M. Jones wrote: > > > - Not sure how best to deal with the ssh-agent authentication socket > > >prob

Re: [libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-15 Thread Richard W.M. Jones
On Mon, Apr 15, 2013 at 11:11:10AM +0100, Daniel P. Berrange wrote: > On Wed, Apr 10, 2013 at 03:09:18PM +0100, Richard W.M. Jones wrote: > > - Not sure how best to deal with the ssh-agent authentication socket > >problem. Use libvirt secrets? If so, how? > > The way that works, is that the

Re: [libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-15 Thread Daniel P. Berrange
On Wed, Apr 10, 2013 at 03:09:18PM +0100, Richard W.M. Jones wrote: > This patch allows you to use the qemu Secure Shell (ssh) block device. > This is not upstream yet, but you can find my latest version here: > > http://lists.nongnu.org/archive/html/qemu-devel/2013-04/threads.html#01703 > > Th

[libvirt] [PATCH 0/1] qemu: Add Secure Shell (ssh) network block device.

2013-04-10 Thread Richard W.M. Jones
This patch allows you to use the qemu Secure Shell (ssh) block device. This is not upstream yet, but you can find my latest version here: http://lists.nongnu.org/archive/html/qemu-devel/2013-04/threads.html#01703 This patch lets you specify a ssh device like this: