Roman Mohr

@drakkan I am not sure if you need client or server support, but client support got merged a few days ago. Bumping golang.org/x/crypto should fix client issues.

I guess this is not an issue for kubevirt, since kubevirt only vendors the api of cdi and that does not pull in shared libraries and libnbd go binaries. So...

/lifecycle frozen I want this too :) I think this is essential. For containerDisks this is kind of built-in (at least I hope that skopeo does these checks).

> [This](https://stackoverflow.com/a/41963206) stackoverflow answer may provide an elegant way to integrate hashing into our stream readers. Can confirm that this pattern works great. We use it for instance here: https://github.com/kubevirt/containerdisks/blob/main/pkg/http/http.go#L38

> IMO it is not secure to compute the checksum at t0 and assume it is the same at t1. Especially with http (no s) url. Could you explain what...

> Yeah, for example we can currently directly stream a qcow2 file to raw via http. This requires no scratch space. To validate the qcow2 checksum will require downloading the...

> [nbdkit ](https://github.com/libguestfs/nbdkit) is used to give CDI one interface to a bunch of files/formats on the other end of a url. My assumption is that when checksum is provided...

> If nbdkit does not access the file sequentially I don't think that we will be able to efficiently compute checksums. And I'm pretty sure it does not access qcow...

/remove-lifecycle stale

@muradhajiyev I can barely remember having written this conversion registration feature, but let me see if I can help :) According to the docs I created I think the registration...