[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH RFC v3 for-2.9 09/11] rbd: Revert -blockdev para
From: |
Jeff Cody |
Subject: |
Re: [Qemu-devel] [PATCH RFC v3 for-2.9 09/11] rbd: Revert -blockdev parameter password-secret |
Date: |
Mon, 27 Mar 2017 22:32:40 -0400 |
User-agent: |
Mutt/1.5.24 (2015-08-30) |
On Mon, Mar 27, 2017 at 03:26:33PM +0200, Markus Armbruster wrote:
> This reverts a part of commit 8a47e8e. We're having second thoughts
> on the QAPI schema (and thus the external interface), and haven't
> reached consensus, yet. Issues include:
>
> * BlockdevOptionsRbd member @password-secret isn't actually a
> password, it's a key generated by Ceph.
>
> * We're not sure where member @password-secret belongs (see the
> previous commit).
>
> * How @password-secret interacts with settings from a configuration
> file specified with @conf is undocumented. I suspect it's untested,
> too.
It's tested, at least to some extent -- it works on my setup; it will
override whatever is set in the conf or the keyring. I can alternate
between /etc/ceph/keyring, or password-secret, or override the user present
in /etc/cep/keyring with a different key via password-secret.
So I'd suggest dropping that blurb from the commit message.
I agree with the overall reasoning though behind remove all parameters not
needed for now, so:
Reviewed-by: Jeff Cody <address@hidden>
>
> Let's avoid painting ourselves into a corner now, and revert the
> feature for 2.9.
>
> Note that users can still configure an authentication key with a
> configuration file. They probably do that anyway if they use Ceph
> outside QEMU as well.
>
> Signed-off-by: Markus Armbruster <address@hidden>
> ---
> qapi/block-core.json | 3 ---
> 1 file changed, 3 deletions(-)
>
> diff --git a/qapi/block-core.json b/qapi/block-core.json
> index 6a7ca0b..2e60ab5 100644
> --- a/qapi/block-core.json
> +++ b/qapi/block-core.json
> @@ -2618,9 +2618,6 @@
> # @server: Monitor host address and port. This maps
> # to the "mon_host" Ceph option.
> #
> -# @password-secret: The ID of a QCryptoSecret object providing
> -# the password for the login.
> -#
> # Since: 2.9
> ##
> { 'struct': 'BlockdevOptionsRbd',
> --
> 2.7.4
>
- Re: [Qemu-devel] [PATCH RFC v3 for-2.9 04/11] rbd: Clean up after the previous commit, (continued)
- [Qemu-devel] [PATCH RFC v3 for-2.9 01/11] rbd: Reject -blockdev server.*.{numeric, to, ipv4, ipv6}, Markus Armbruster, 2017/03/27
- Re: [Qemu-devel] [PATCH RFC v3 for-2.9 01/11] rbd: Reject -blockdev server.*.{numeric, to, ipv4, ipv6}, Max Reitz, 2017/03/27
- Re: [Qemu-devel] [PATCH RFC v3 for-2.9 01/11] rbd: Reject -blockdev server.*.{numeric, to, ipv4, ipv6}, Jeff Cody, 2017/03/27
- [Qemu-devel] [PATCH RFC v3 for-2.9 05/11] rbd: Don't accept -drive driver=rbd, keyvalue-pairs=..., Markus Armbruster, 2017/03/27
- [Qemu-devel] [PATCH RFC v3 for-2.9 02/11] rbd: Fix to cleanly reject -drive without pool or image, Markus Armbruster, 2017/03/27