Re: [PATCH for discussion] doc: Define a standard URI syntax for NBD URIs.
On Sun, May 26, 2019 at 12:20:20PM +0100, Richard W.M. Jones wrote:
> On Sun, May 26, 2019 at 12:19:08PM +0200, Wouter Verhelst wrote:
> > On Sun, May 26, 2019 at 10:00:18AM +0100, Richard W.M. Jones wrote:
> > > ). If we were to specify every file by name then it would require
> > > probably 3 or 4 extra parameters (CA cert, client cert, client private
> > > key file, and optionally revocation list).
> >
> > That's what nbd-client and nbd-server expect, FWIW.
>
> It's unfortunate that qemu went with the "directory of named files"
> approach, because the two approaches are incompatible. Personally I
> think nbd-client gets this right and qemu should change.
After thinking about this a bit more and trying to implement
individual files in libnbd, I think I was wrong about this.
I think there's value in having a standard directory format with
particular standard named files in it. The alternative is the
complexity of having to specify up to 4 files individually for TLS,
and possibly having those files given many different names which will
further confuse users.
TLS X.509 is confusing enough (I'm fairly convinced it's an NSA plot
to stop us from using encryption :-) without adding more potential
incompatibility.
Rich.
--
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-p2v converts physical machines to virtual machines. Boot with a
live CD or over the network (PXE) and turn machines into KVM guests.
http://libguestfs.org/virt-v2v
Reply to: