Bug 1625597

Summary: [Test-Only: OSP-16/RHEL8] [RFE] Secure data transport between QEMU servers live migration
Product: Red Hat OpenStack Reporter: Lee Yarwood <lyarwood>
Component: openstack-novaAssignee: Kashyap Chamarthy <kchamart>
Status: CLOSED DUPLICATE QA Contact: OSP DFG:Compute <osp-dfg-compute>
Severity: high Docs Contact:
Priority: high    
Version: 16.0 (Train)CC: dasmith, egallen, eglynn, fduthill, jhakimra, kchamart, lyarwood, mbooth, mburns, nova-maint, owalsh, sbauza, sgordon, srevivo, vromanso
Target Milestone: Upstream M2Keywords: FutureFeature, Triaged
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 1301025
: 1664790 (view as bug list) Environment:
Last Closed: 2019-05-17 09:34:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1300769, 1300772, 1544869    
Bug Blocks: 1301025, 1414999, 1415007, 1664790    
Attachments:
Description Flags
Setup instructions for NBD over TLS none

Comment 1 Kashyap Chamarthy 2018-09-06 15:20:54 UTC 
The related libvirt bugs:

  - https://bugzilla.redhat.com/show_bug.cgi?id=1544869 -- "RFE: add
    support for native TLS encryption for NBD disk access"

  - https://bugzilla.redhat.com/show_bug.cgi?id=1300772#c6 -- "RFE: add
    support for native TLS encryption on NBD for disk migration"
     - The comment #6 has QE verification detail
Comment 3 Kashyap Chamarthy 2018-12-14 19:47:16 UTC 
Blueprint:

  https://blueprints.launchpad.net/nova/+spec/support-qemu-native-tls-for-live-migration
  "Support QEMU Native TLS for migration and disks over NBD Edit"
Comment 4 Kashyap Chamarthy 2019-01-08 15:13:23 UTC 
Created attachment 1519220 [details]
Setup instructions for NBD over TLS
Comment 7 Kashyap Chamarthy 2019-05-15 13:59:28 UTC 
Docs:

https://opendev.org/openstack/nova/src/branch/master/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst
Comment 9 Erwan Gallen 2019-05-17 09:34:50 UTC 

*** This bug has been marked as a duplicate of bug 1301025 ***