On Wed, Sep 09, 2015 at 11:33:29AM +0200, Matthias Walther wrote: > Dear Daniel, > > thanks for your quick reply. What's the alternative? > > I thought maybe using standard encryption within the virtual machine > might be slow. What's the best practice? LUKS / dm-crypt is the only viable option right now - either set it up on your host and unlock it before starting the guest, or run it inside your guest. If you make sure the guest is configured with a host-model CPU, then the guest CPU will have the 'aes' flag available and performance should be pretty decent for guest filesystem encryption. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :| _______________________________________________ virt-tools-list mailing list virt-tools-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/virt-tools-list
