83648951d7
Allow callers to opt-out of 'qemu-img' autodetecting the format. Currently not supported to be done together with untrusted, because it can lead to less checks being done. Could be further refined (e.g. disallow only untrusted together with format being 'raw') should the need arise. For 'subvol' format, the checking is handled outside of 'qemu-img' of course, based on whether it is a directory or not. Currently, there is a fallback to 'raw' should the format not be among the ones allowed for the 'pve-qm-image-format' standard option. This is to reduce potential for fallout, in particular for the plan to change the base plugin's volume_size_info() to pass in the expected format when calling file_size_info() too. While not explicitly part of the storage plugin API, the 'untrusted' parameter is now in a different place, so a compat check is added for external plugins that might've still used it. Breaks for qemu-server needed (if we don't want to just rely on the compat check). Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>