From nobody Sat Oct 24 20:18:35 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) client-ip=38.145.34.151; envelope-from=devel-bounces@lists.libvirt.org; helo=lists.libvirt.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) smtp.mailfrom=devel-bounces@lists.libvirt.org; dmarc=pass(p=none dis=none) header.from=undertheprinter.com ARC-Seal: i=1; a=rsa-sha256; t=1791923738; cv=none; d=zohomail.com; s=zohoarc; b=cYlqZJx/NrVe64dwbOu+gdNk559e2XPtZibXV77bsVGiXLh/BXOHz/027+PVjcP3cVcFhvBmW5eafBsGT6Ifri7LfZsfra8tR/ztrplF1i3z3Y6ZJHh3C+/XDXzFf7a+r29aQXBbKW3fSulqWzuchIOPxZIzl9wrE8dqgYLJV6I= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1791923738; h=Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:List-Subscribe:List-Post:List-Owner:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:Subject:Subject:To:To:Message-Id:Reply-To; bh=0TJx53j7OTFXHTrxTV+SuHO6gZqsJw5raY3zzJ7bepg=; b=J0dVJ100+Sk+RxR0GpwRas4igw8XKoi8aIs46HHExsR5VZps5E5AoBTpG0bfYNXQQqfPToMxgILM74AVHwG9WVG1Yo+oeluqQTfeyiDKBIykE9osVRvGc9HMOo0a6RLufRe+wcrzUYxRthnxmcHxKmme1gEW2cDwgC/53sH84ZM= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.libvirt.org designates 38.145.34.151 as permitted sender) smtp.mailfrom=devel-bounces@lists.libvirt.org; dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists.libvirt.org (lists.libvirt.org [38.145.34.151]) by mx.zohomail.com with SMTPS id 1791923738140639.364191612916; Tue, 13 Oct 2026 13:35:38 -0700 (PDT) Received: by lists.libvirt.org (Postfix, from userid 993) id 692FC3F97B; Tue, 13 Oct 2026 16:35:36 -0400 (EDT) Received: from [172.19.199.16] (unknown [10.16.107.18]) by lists.libvirt.org (Postfix) with ESMTP id 0979741AF6; Tue, 13 Oct 2026 16:34:21 -0400 (EDT) Received: by lists.libvirt.org (Postfix, from userid 993) id CE67D3F874; Tue, 13 Oct 2026 16:34:12 -0400 (EDT) Received: from mout-p-102.mailbox.org (mout-p-102.mailbox.org [IPv6:2001:67c:2050:0:465::102]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (3072 bits) server-digest SHA256) (No client certificate requested) by lists.libvirt.org (Postfix) with ESMTPS id ADF243F337 for ; Tue, 13 Oct 2026 16:34:11 -0400 (EDT) Received: from smtp2.mailbox.org (smtp2.mailbox.org [IPv6:2001:67c:2050:b231:465::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519MLKEM768 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-102.mailbox.org (Postfix) with ESMTPS id 4j45f61tFPzKqJs; Tue, 13 Oct 2026 22:34:06 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on lists.libvirt.org X-Spam-Level: X-Spam-Status: No, score=-2.8 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_PASS autolearn=unavailable autolearn_force=no version=4.0.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=undertheprinter.com; s=MBO0001; t=1791923646; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=0TJx53j7OTFXHTrxTV+SuHO6gZqsJw5raY3zzJ7bepg=; b=B3HGOHuPnN1SPxIQaT0kEA26//oUMrilXlfV1IG3v6AIdBv8EJ4VyPxoYrSOY4Ate87v8y cEsw1BKwxMcfz18J5/IvuXrvNhW1DfsJXp9AVqhDYvriVUUy2nts4F/r3e9JDC5BJNQhHO rz8looL6iKWp8J8YNBfFehzJ+rXzDyVyv5GQWnFMZI9tkf+xniy5g2TjuSclGhwDimdMaj ESRp1eVZcc4jWl3eXosOBY95uzdj1AozIis2kU2as46z88bxYz6scYA1WH1g6Urkn3eY9z ZBRthpURrltfls/XThKThotcqli7SXwNrDnuzHXIcQEV+vX1nM71mLjcmxkpAg== Authentication-Results: outgoing_mbo_mout; dkim=none; spf=pass (outgoing_mbo_mout: domain of janis.heims@undertheprinter.com designates 2001:67c:2050:b231:465::2 as permitted sender) smtp.mailfrom=janis.heims@undertheprinter.com From: Janis Heims To: devel@lists.libvirt.org Subject: [PATCH v2] replace rbd option auth_supported with auth_*_required Date: Tue, 13 Oct 2026 22:23:37 +0200 Message-ID: <20261013203328.31084-1-janis.heims@undertheprinter.com> X-Mailer: git-send-email 2.54.0 MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 4j45f61tFPzKqJs Message-ID-Hash: Y23SRAIEQJEZYSQZQHFN7KNSPUW2YNFT X-Message-ID-Hash: Y23SRAIEQJEZYSQZQHFN7KNSPUW2YNFT X-MailFrom: janis.heims@undertheprinter.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-devel.lists.libvirt.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: Janis Heims X-Mailman-Version: 3.3.10 Precedence: list List-Id: Development discussions about the libvirt library & tools Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-ZohoMail-DKIM: pass (identity @undertheprinter.com) X-ZM-MESSAGEID: 1791923738752158500 Content-Type: text/plain; charset="utf-8" As stated in Yusuke Fujimaki's patch, Ceph recently removed the deprecated auth_supported option that is still used by libvirt, causing errors when attempting to start a storage pool on a newer Ceph server: https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/RELD= VG6A3LAA4IFA32EOFQ5OJPMI6OGR/ https://github.com/ceph/ceph/commit/350cc71d7d9e9cd6239d24080082de7ac9bf8b70 This patch addresses the issue by replacing the deprecated option with auth_client_required. While all three replacement options (auth_cluster_required, auth_service_required and auth_client_required) were previously set by Ceph, it really only makes sense to keep the last in libvirt as the other options are only relevant on the server side. See the discussion here: https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/3TVM= 5DVH3MOIQAM6ZUS5TYBLNSA6UA7K/ Resolves: https://gitlab.com/libvirt/libvirt/-/work_items/918 Signed-off-by: Janis Heims --- Changes since v1: - Removed auth_cluster_required and auth_service_required src/libxl/libxl_conf.c | 7 +++---- src/libxl/xen_xl.c | 2 +- src/storage/storage_backend_rbd.c | 6 ++++-- tests/xlconfigdata/test-rbd-multihost-noauth.cfg | 2 +- 4 files changed, 9 insertions(+), 8 deletions(-) diff --git a/src/libxl/libxl_conf.c b/src/libxl/libxl_conf.c index 3bb5c1e591..9050caf400 100644 --- a/src/libxl/libxl_conf.c +++ b/src/libxl/libxl_conf.c @@ -1087,11 +1087,10 @@ libxlMakeNetworkDiskSrcStr(virStorageSource *src, =20 if (username) { virBufferEscape(&buf, '\\', ":", ":id=3D%s", username); - virBufferEscape(&buf, '\\', ":", - ":key=3D%s:auth_supported=3Dcephx\\;none", - secret); + virBufferEscape(&buf, '\\', ":", ":key=3D%s", secret); + virBufferAddLit(&buf, ":auth_client_required=3Dcephx\\;none"); } else { - virBufferAddLit(&buf, ":auth_supported=3Dnone"); + virBufferAddLit(&buf, ":auth_client_required=3Dnone"); } =20 if (src->nhosts > 0) { diff --git a/src/libxl/xen_xl.c b/src/libxl/xen_xl.c index d05972af5b..5a31fc6939 100644 --- a/src/libxl/xen_xl.c +++ b/src/libxl/xen_xl.c @@ -1478,7 +1478,7 @@ xenFormatXLDiskSrcNet(virStorageSource *src) =20 virBufferStrcat(&buf, "rbd:", src->path, NULL); =20 - virBufferAddLit(&buf, ":auth_supported=3Dnone"); + virBufferAddLit(&buf, ":auth_client_required=3Dnone"); =20 if (src->nhosts > 0) { virBufferAddLit(&buf, ":mon_host=3D"); diff --git a/src/storage/storage_backend_rbd.c b/src/storage/storage_backen= d_rbd.c index 25cad4a28d..64ea11a7f5 100644 --- a/src/storage/storage_backend_rbd.c +++ b/src/storage/storage_backend_rbd.c @@ -241,17 +241,19 @@ virStorageBackendRBDOpenRADOSConn(virStorageBackendRB= DState *ptr, goto cleanup; =20 if (virStorageBackendRBDRADOSConfSet(ptr->cluster, - "auth_supported", "cephx") < = 0) + "auth_client_required", "ceph= x") < 0) goto cleanup; } else { VIR_DEBUG("Not using cephx authorization"); if (rados_create(&ptr->cluster, NULL) < 0) { virReportError(VIR_ERR_INTERNAL_ERROR, "%s", _("failed to create the RADOS cluster")); goto cleanup; } + if (virStorageBackendRBDRADOSConfSet(ptr->cluster, - "auth_supported", "none") < 0) + "auth_client_required", "none= ") < 0) goto cleanup; } =20 diff --git a/tests/xlconfigdata/test-rbd-multihost-noauth.cfg b/tests/xlcon= figdata/test-rbd-multihost-noauth.cfg index 5906865047..8ff1878885 100644 --- a/tests/xlconfigdata/test-rbd-multihost-noauth.cfg +++ b/tests/xlconfigdata/test-rbd-multihost-noauth.cfg @@ -22,4 +22,4 @@ parallel =3D "none" serial =3D "none" builder =3D "hvm" boot =3D "d" -disk =3D [ "format=3Draw,vdev=3Dhda,access=3Drw,backendtype=3Dphy,target= =3D/dev/HostVG/XenGuest2", "format=3Draw,vdev=3Dhdb,access=3Drw,backendtype= =3Dqdisk,target=3Drbd:pool/image:auth_supported=3Dnone:mon_host=3Dmon1.exam= ple.org\\:6321\\;mon2.example.org\\:6322\\;mon3.example.org\\:6322" ] +disk =3D [ "format=3Draw,vdev=3Dhda,access=3Drw,backendtype=3Dphy,target= =3D/dev/HostVG/XenGuest2", "format=3Draw,vdev=3Dhdb,access=3Drw,backendtype= =3Dqdisk,target=3Drbd:pool/image:auth_client_required=3Dnone:mon_host=3Dmon= 1.example.org\\:6321\\;mon2.example.org\\:6322\\;mon3.example.org\\:6322" ] base-commit: 215fab8ab1d912f6b25e60ab4d2ad59000f2eaff --=20 2.54.0