v1.1.2
stableRestores Nova servers onto an existing server, keeps the encryption key of restored volumes, and drops Glance images from the inventory.
New
- Nova servers can now be restored onto an existing server, with
openstack-instance://<server-id>. Every backed-up disk, including the root disk, is restored as a new Cinder volume and attached to that server, and no server is created. (#250)
Improvements
- The inventory no longer lists Glance images. (#254)
Fixes
- Restoring an encrypted volume now reuses the encryption key of the original volume. Before, Cinder encrypted the restored data again under a new key, and the volume appeared as a raw LUKS device instead of mounting its filesystem. Only the key ID is kept in the backup, so the keys themselves have to be secured separately to decrypt the volume after a restore. (#244)
Security
- The inventory configuration now rejects empty credentials, and restores validate the disk IDs read from a backup. Neither gap was exploitable, and both align with the hardening already applied elsewhere in the integration. (#240)