From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-18.6 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id A4FD8C4338F for ; Thu, 19 Aug 2021 16:24:21 +0000 (UTC) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 317F9610E6 for ; Thu, 19 Aug 2021 16:24:21 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 317F9610E6 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=redhat.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=nongnu.org Received: from localhost ([::1]:51820 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mGkq4-0004EH-EB for qemu-devel@archiver.kernel.org; Thu, 19 Aug 2021 12:24:20 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:54286) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mGkp7-0003LW-IJ for qemu-devel@nongnu.org; Thu, 19 Aug 2021 12:23:21 -0400 Received: from us-smtp-delivery-124.mimecast.com ([170.10.129.124]:21360) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mGkp3-0006pT-EM for qemu-devel@nongnu.org; Thu, 19 Aug 2021 12:23:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1629390196; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=URZxcOpSU0q03czY2VT3//55huAVzhbBs42cBq3Uqyc=; b=ZT0cVDTThwnSuMEv5CR7VXA3qi5F+2wCn/TCwCDQ6R+nXa+CjqTkFC/timEtTMhX58H+bO H3HCGikmNv6Q4aX60W5EjL7X+kPjclTbk+PBw22jCVABNLiZrdvpSMIDu+WQ2Qm1zKzsJO i8T4hxWKFYeTjx30kU/9vJXuMHXv/fE= Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-5-VzxX0QVwOAyUXpdfu5Rg2A-1; Thu, 19 Aug 2021 12:23:14 -0400 X-MC-Unique: VzxX0QVwOAyUXpdfu5Rg2A-1 Received: from smtp.corp.redhat.com (int-mx07.intmail.prod.int.phx2.redhat.com [10.5.11.22]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 3565A1082921 for ; Thu, 19 Aug 2021 16:23:13 +0000 (UTC) Received: from localhost (unknown [10.39.195.5]) by smtp.corp.redhat.com (Postfix) with ESMTP id BE74A1017CE6; Thu, 19 Aug 2021 16:23:12 +0000 (UTC) Date: Thu, 19 Aug 2021 17:23:06 +0100 From: Stefan Hajnoczi To: Hanna Reitz Subject: Re: [qemu-web PATCH] Add a blog post about FUSE block exports Message-ID: References: <20210819102501.69638-1-hreitz@redhat.com> MIME-Version: 1.0 In-Reply-To: <20210819102501.69638-1-hreitz@redhat.com> X-Scanned-By: MIMEDefang 2.84 on 10.5.11.22 Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=stefanha@redhat.com X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="PST/LGVDfqwT3I5M" Content-Disposition: inline Received-SPF: pass client-ip=170.10.129.124; envelope-from=stefanha@redhat.com; helo=us-smtp-delivery-124.mimecast.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.7, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Kevin Wolf , qemu-devel@nongnu.org Errors-To: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Sender: "Qemu-devel" --PST/LGVDfqwT3I5M Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Aug 19, 2021 at 12:25:01PM +0200, Hanna Reitz wrote: > This post explains when FUSE block exports are useful, how they work, > and that it is fun to export an image file on its own path so it looks > like your image file (in whatever format it was) is a raw image now. >=20 > Signed-off-by: Hanna Reitz > --- > You can also find this patch here: > https://gitlab.com/hreitz/qemu-web fuse-blkexport-v1 >=20 > My first patch to qemu-web, so I hope I am not doing anything overly > stupid here (adding SVGs with extremely long lines comes to mind)... > --- > _posts/2021-08-18-fuse-blkexport.md | 488 ++++++++++++++++++++++ > screenshots/2021-08-18-block-graph-a.svg | 2 + > screenshots/2021-08-18-block-graph-b.svg | 2 + > screenshots/2021-08-18-block-graph-c.svg | 2 + > screenshots/2021-08-18-block-graph-d.svg | 2 + > screenshots/2021-08-18-block-graph-e.svg | 2 + > screenshots/2021-08-18-root-directory.svg | 2 + > screenshots/2021-08-18-root-file.svg | 2 + > 8 files changed, 502 insertions(+) > create mode 100644 _posts/2021-08-18-fuse-blkexport.md > create mode 100644 screenshots/2021-08-18-block-graph-a.svg > create mode 100644 screenshots/2021-08-18-block-graph-b.svg > create mode 100644 screenshots/2021-08-18-block-graph-c.svg > create mode 100644 screenshots/2021-08-18-block-graph-d.svg > create mode 100644 screenshots/2021-08-18-block-graph-e.svg > create mode 100644 screenshots/2021-08-18-root-directory.svg > create mode 100644 screenshots/2021-08-18-root-file.svg Great! Two ideas: It would be nice to include a shoutout to libguestfs and mention that libguestfs avoids exposing the host kernel's file systems and partion code to untrusted disk images. If you don't mount the image then the FUSE export has similar security properties. This is a long blog post. One idea is to show a quickstart qemu-storage-daemon FUSE export command-line in the beginning before explaining all the details. That way people who just want to see what this is about can get an idea without learning all the background first. --PST/LGVDfqwT3I5M Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhpWov9P5fNqsNXdanKSrs4Grc8gFAmEehWoACgkQnKSrs4Gr c8gQsQgAgSZbsz09KyMKfv81nV1mwfrTkoWRaZSDgsPyQ4oEUl+YRdQT8IFsVdgw r/vnZBXsb7MOqo4pmCBzmC/PnSxPtDG+lwbTHV/L2zPyZxEZY/KpqmjHEKodXQ/b G5YL2Ews/VhiTn1xFBPABsB/JOHMjlcfTP9x2VNXZvwXtyhhGW6dPg4vg3cORsVf 9JF/m/cqdhgIWb2pf+MidIGIbwLdGSF7zw5pDDRQaNka7nP9tz9CLjmwZUw3/Wep 7Cdas4kXzmHbDYfa9CNJz24N4046MXtF3KimzbvIRyalwCQATIcJ8iqeKAhSGmhi HakCroxsxmLeAX8ZfQ3gR2pTHQLzzQ== =5dVK -----END PGP SIGNATURE----- --PST/LGVDfqwT3I5M--