qcow2磁盘加密及libvirt访问

1.创建qcow2加密磁盘
[root@Coc-5 test_encrypt]# qemu-img convert -f qcow2 -O qcow2 -o encryption template_xp encry1.qcow2
Disk image 'encry1.qcow2' is encrypted.
password:   //这里输入密码 123456


[root@Coc-5 test_encrypt]# qemu-img info encry1.qcow2 
image: encry1.qcow2
file format: qcow2
virtual size: 10G (10737418240 bytes)
disk size: 2.1G
encrypted: yes
cluster_size: 65536


2.virsh edit修改配置文件，将磁盘改为encry1.qcow2 


3.virsh start 显示错误
virsh # start instance-00000009
error: Failed to start domain instance-00000009
error: internal error: unable to execute QEMU command 'cont': 'drive-virtio-disk0' (/usr/local/noc/var/lib/noc/instances/test_encrypt/encry1.qcow2) is encrypted


4.在本地创建一个秘钥xml
[root@Coc-5 test_encrypt]# cat secret.xml 
<secret ephemeral=&#