Re: [Qemu-block] [PATCH 00/17] Framework for securely passing secrets to QEMU

2015-10-23 Thread Stefan Hajnoczi
On Mon, Oct 19, 2015 at 04:09:32PM +0100, Daniel P. Berrange wrote: > There are a variety of places where QEMU needs to have access > to passwords, encryption keys or similar kinds of secrets. > > - VNC / SPICE user passwords > - Curl block http / proxy passwords > - RBD auth password > - iSCS

[Qemu-block] [PATCH 00/17] Framework for securely passing secrets to QEMU

2015-10-19 Thread Daniel P. Berrange
There are a variety of places where QEMU needs to have access to passwords, encryption keys or similar kinds of secrets. - VNC / SPICE user passwords - Curl block http / proxy passwords - RBD auth password - iSCSI CHAP password - x509 private key password - QCow/QCow2 encryption key QEMU ha