Provision Config/Secrets to XenStore from XO
-
Is there a way to insert data into xenstore through XO when creating a VM?
I’m interested in inserting configuration (like Fedora CoreOS Ignition) or secrets (e.g. a vault token) into a VM.
Would xenstore be a “safe” place for secrets? It seems it is only accessible by the root user of the guest, so a good start. I assume it’s also properly isolated from other guests?
-
Hi,
- Indeed, only root user in the guest can read it
- Any user that can see the XAPI object will be able to read it
So I would say it's "reasonably safe", but it all depends on your global usage context and level of confidentiality you need.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login