Re: OSD with dm-crypt?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Not possible to set after the fact, to my knowledge.  The OSD must be set
to dm-crypt at the creation stage.

--
Alex Gorbachev
ISS/Storcium



On Mon, Feb 26, 2024 at 11:45 PM Michael Worsham <
mworsham@xxxxxxxxxxxxxxxxxx> wrote:

> I was setting up the Ceph cluster via this URL (
> https://computingforgeeks.com/install-ceph-storage-cluster-on-ubuntu-linux-servers/)
> and didn't know if there was a way to do it via the "ceph orch daemon add
> osd ceph-osd-01:/dev/sdb" command or not?
>
> Is it possible to set the OSD to encryption after the fact or does that
> involve some other process?
>
> -- Michael
>
>
>
> Get Outlook for Android <https://aka.ms/AAb9ysg>
> ------------------------------
> *From:* Alex Gorbachev <ag@xxxxxxxxxxxxxxxxxxx>
> *Sent:* Monday, February 26, 2024 11:10:54 PM
> *To:* Michael Worsham <mworsham@xxxxxxxxxxxxxxxxxx>
> *Cc:* ceph-users@xxxxxxx <ceph-users@xxxxxxx>
> *Subject:* Re:  OSD with dm-crypt?
>
> This is an external email. Please take care when clicking links or opening
> attachments. When in doubt, check with the Help Desk or Security.
>
> If you are using a service spec, just set
>
> encrypted: true
>
> If using ceph-volume, pass this flag:
>
> --dmcrypt
>
> You can verify similar to
> https://smithfarm-thebrain.blogspot.com/2020/03/how-to-verify-that-encrypted-osd-is.html
> --
> Alex Gorbachev
> ISS/Storcium
>
>
>
> On Mon, Feb 26, 2024 at 10:25 PM Michael Worsham <
> mworsham@xxxxxxxxxxxxxxxxxx> wrote:
>
> Is there a how-to document or cheat sheet on how to enable OSD encryption
> using dm-crypt?
>
> -- Michael
>
> This message and its attachments are from Data Dimensions and are intended
> only for the use of the individual or entity to which it is addressed, and
> may contain information that is privileged, confidential, and exempt from
> disclosure under applicable law. If the reader of this message is not the
> intended recipient, or the employee or agent responsible for delivering the
> message to the intended recipient, you are hereby notified that any
> dissemination, distribution, or copying of this communication is strictly
> prohibited. If you have received this communication in error, please notify
> the sender immediately and permanently delete the original email and
> destroy any copies or printouts of this email as well as any attachments.
> _______________________________________________
> ceph-users mailing list -- ceph-users@xxxxxxx
> To unsubscribe send an email to ceph-users-leave@xxxxxxx
>
> This message and its attachments are from Data Dimensions and are intended
> only for the use of the individual or entity to which it is addressed, and
> may contain information that is privileged, confidential, and exempt from
> disclosure under applicable law. If the reader of this message is not the
> intended recipient, or the employee or agent responsible for delivering the
> message to the intended recipient, you are hereby notified that any
> dissemination, distribution, or copying of this communication is strictly
> prohibited. If you have received this communication in error, please notify
> the sender immediately and permanently delete the original email and
> destroy any copies or printouts of this email as well as any attachments.
>
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx




[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux