QCOW2 Images

As of 14 August 2024 importing and uploading of custom QCOW2 images is DISABLED in SWITCHengines.

In July this year, a security vulnerability in OpenStack was disclosed [CVE-2024-32498], which could be exploited through custom images in QCOW2 format.

As an immediate measure, we need to deactivate the import of QCOW2 images in SWITCHengines.

Converting QCOW2 Image to RAW before uploading

If your custom image is in QCOW2 format, and need to upload it into SWITCHengines, you must first convert it to RAW, and then upload it.

Using the qemu-img command line tool, you can locally convert your custom QCOW2 image to RAW:

qemu-img convert -f qcow2 -O raw my-image.qcow2 my-image.raw

Once your custom image have been converted to RAW, you can then proceed to the upload of the image.

qemu-img Tool

The qemu-img tool, required to convert QCOW2 image to RAW image, is available for: