QCOW2 Images
As of 14 August 2024 importing and uploading of custom QCOW2 images is DISABLED in SWITCHengines.
In July this year, a security vulnerability in OpenStack was disclosed [CVE-2024-32498], which could be exploited through custom images in QCOW2 format.
As an immediate measure, we need to deactivate the import of QCOW2 images in SWITCHengines.
Converting QCOW2 Image to RAW before uploading
If your custom image is in QCOW2 format, and need to upload it into SWITCHengines, you must first convert it to RAW, and then upload it.
Using the qemu-img command line tool, you can locally convert your custom QCOW2 image to RAW:
qemu-img convert -f qcow2 -O raw my-image.qcow2 my-image.raw
Once your custom image have been converted to RAW, you can then proceed to the upload of the image.
qemu-img Tool
The qemu-img tool, required to convert QCOW2 image to RAW image, is available for:
- Linux (qemu-img or qemu-utils package from your distribution repository)
- MacOS (Homebrew or MacPorts)
- Windows (qemu-img for Windows)