The key is stored in the ceph cluster config db. It can be retrieved by
KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} --keyring $OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks`
September 22, 2020 2:25 AM, "Janne Johansson" <icepic.dz@xxxxxxxxx> wrote:
> Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <M.Roos@xxxxxxxxxxxxxxxxx>:
>
>> When I create a new encrypted osd with ceph volume[1]
>>
>> Q4: Where is this luks passphrase stored?
>
> I think the OSD asks the mon for it after auth:ing, so "in the mon DBs"
> somewhere.
>
> --
> May the most significant bit of your life be positive.
> _______________________________________________
> ceph-users mailing list -- ceph-users@xxxxxxx
> To unsubscribe send an email to ceph-users-leave@xxxxxxx
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
