xref: /qemu/tests/qemu-iotests/tests/qcow2-encryption (revision c302660920acf48425a1317d56122ea8af60fbc4)
1#!/usr/bin/env bash
2# group: rw quick
3#
4# Test case for encryption support in qcow2
5#
6# Copyright (C) 2025 Red Hat, Inc.
7#
8# This program is free software; you can redistribute it and/or modify
9# it under the terms of the GNU General Public License as published by
10# the Free Software Foundation; either version 2 of the License, or
11# (at your option) any later version.
12#
13# This program is distributed in the hope that it will be useful,
14# but WITHOUT ANY WARRANTY; without even the implied warranty of
15# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16# GNU General Public License for more details.
17#
18# You should have received a copy of the GNU General Public License
19# along with this program.  If not, see <http://www.gnu.org/licenses/>.
20#
21
22# creator
23owner=kwolf@redhat.com
24
25seq="$(basename $0)"
26echo "QA output created by $seq"
27
28status=1	# failure is the default!
29
30_cleanup()
31{
32	_cleanup_test_img
33}
34trap "_cleanup; exit \$status" 0 1 2 3 15
35
36# get standard environment, filters and checks
37. ../common.rc
38. ../common.filter
39
40# This tests qcow2-specific low-level functionality
41_supported_fmt qcow2
42_supported_proto file
43_require_working_luks
44
45IMG_SIZE=64M
46
47echo
48echo "=== Create an encrypted image ==="
49echo
50
51_make_test_img --object secret,id=sec0,data=123456 -o encrypt.format=luks,encrypt.key-secret=sec0 $IMG_SIZE
52$PYTHON ../qcow2.py "$TEST_IMG" dump-header-exts
53_img_info
54$QEMU_IMG check \
55    --object secret,id=sec0,data=123456 \
56    --image-opts file.filename="$TEST_IMG",encrypt.key-secret=sec0 \
57    | _filter_qemu_img_check
58
59echo
60echo "=== Remove the header extension ==="
61echo
62
63$PYTHON ../qcow2.py "$TEST_IMG" del-header-ext 0x0537be77
64$PYTHON ../qcow2.py "$TEST_IMG" dump-header-exts
65_img_info
66$QEMU_IMG check \
67    --object secret,id=sec0,data=123456 \
68    --image-opts file.filename="$TEST_IMG",encrypt.key-secret=sec0 2>&1 \
69    | _filter_qemu_img_check \
70    | _filter_testdir
71
72# success, all done
73echo "*** done"
74rm -f $seq.full
75status=0
76