[Qemu-devel] [Bug 1843941] [NEW] RBD Namespaces are not supported

[Gregory O'Neill]

Public bug reported:

Ceph Nautilus (v14.2.0) introduced the Namespaces concept for RADOS
Block Devices. This provides a logical separation within a RADOS Pool
for RBD images which enables granular access control. See
https://docs.ceph.com/docs/nautilus/releases/nautilus/ for additional
details.

librados and librbd support this, however qemu does not. The rbd man
page defines how rbd images within a namespace can be referenced.
https://docs.ceph.com/docs/nautilus/man/8/rbd/#image-snap-group-and-
journal-specs

Adding support for RBD namespaces would be beneficial for security and
reducing the impact of a hypervisor being compromised and putting an
entire Ceph pool or cluster at risk.

** Affects: qemu
     Importance: Undecided
         Status: New


** Tags: rbd

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1843941

Title:
  RBD Namespaces are not supported

Status in QEMU:
  New

Bug description:
  Ceph Nautilus (v14.2.0) introduced the Namespaces concept for RADOS
  Block Devices. This provides a logical separation within a RADOS Pool
  for RBD images which enables granular access control. See
  https://docs.ceph.com/docs/nautilus/releases/nautilus/ for additional
  details.

  librados and librbd support this, however qemu does not. The rbd man
  page defines how rbd images within a namespace can be referenced.
  https://docs.ceph.com/docs/nautilus/man/8/rbd/#image-snap-group-and-
  journal-specs

  Adding support for RBD namespaces would be beneficial for security and
  reducing the impact of a hypervisor being compromised and putting an
  entire Ceph pool or cluster at risk.

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1843941/+subscriptions