Yrurtj

I can't figure out how to make encrypted storage volume (managed by libvirt) for a volume which sits on 'logical' pool type (ie. on LVM).

# virsh vol-create ocz-5ef92v58m9be7jo9 /tmp/in

error: Failed to create vol from /tmp/in

error: unsupported configuration: storage pool does not support encrypted volumes

Any example? See http://libvirt.org/formatstorageencryption.html

My current (plaintext) volume and pool.

[root@host2 ~]# virsh vol-dumpxml --pool ocz-5ef92v58m9be7jo9 win1                                                                                                                                                  

<volume type='block'>

  <name>win1</name>

  <key>c4f8Of-XYnj-YwA7-VUDe-y7BI-AEr1-S84NWT</key>

  <source>

    <device path='/dev/sda3'>

      <extent start='0' end='32212254720'/>

    </device>

  </source>

  <capacity unit='bytes'>32212254720</capacity>

  <allocation unit='bytes'>32212254720</allocation>

  <target>

    <path>/dev/ocz-5ef92v58m9be7jo9/win1</path>

    <permissions>

      <mode>0600</mode>

      <owner>0</owner>

      <group>6</group>

      <label>system_u:object_r:fixed_disk_device_t:s0</label>

    </permissions>

    <timestamps>

      <atime>1488029824.526381599</atime>

      <mtime>1488029824.526381599</mtime>

      <ctime>1488029824.526381599</ctime>

    </timestamps>

  </target>

</volume>



[root@host2 ~]# virsh pool-dumpxml ocz-5ef92v58m9be7jo9                                                                                                                                                             

<pool type='logical'>

  <name>ocz-5ef92v58m9be7jo9</name>

  <uuid>64607ea8-f2a2-4c9c-9d48-0d7f32486b2d</uuid>

  <capacity unit='bytes'>111388131328</capacity>

  <allocation unit='bytes'>32212254720</allocation>

  <available unit='bytes'>79175876608</available>

  <source>

    <device path='/dev/sda3'/>

    <name>ocz-5ef92v58m9be7jo9</name>

    <format type='lvm2'/>

  </source>

  <target>

    <path>/dev/ocz-5ef92v58m9be7jo9</path>

  </target>

</pool>

Sorry, I have no enough reputation to comment, can only post like this.

I know we can use qemu-img command to create a luks image file as VM disk.

However, I really want to use libvirt volume command to do same thing on LVM.

Do you have any new findings on this topic?

Thanks.