Re: Tpm2 in squid

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,


Tpm is working just fine out of ceph and i can connect to tpm device and
verify it.

If you look at the error even ceph-volume complains about the tpm flag
missing on version 19.2.0

What I noticed in this commit , the tps related changes are introduced.

https://github.com/ceph/ceph/commit/88836135fd03d28131c58a7440f51de244076166

But when i check the release 19.2.0 version this commit is not included.


--------------
Kind Regards
<http://about.me/ehsan310?promo=email_sig>


Ehsan Golpayegani
[image: https://]www.ehsan.pw
<https://ehsan.pw?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=plaintext>
SAVE PAPER - THINK BEFORE YOU PRINT!



On Sat, 28 Dec 2024 at 09:44, Frédéric Nass <frederic.nass@xxxxxxxxxxxxxxxx>
wrote:

> Hi,
>
> Ceph is using systemd-cryptenroll for tpm2 token enrollment. Have you
> check the requirements for hardware configuration (UEFI mode), kernel and
> systemd support for TPM 2.0?
>
> You can check for 'tpm' in the output of 'dmesg | grep -i tpm' and the
> presence of a /dev/tpmrm0 device.
>
> Maybe try using TPM 2.0 directly (outside of Ceph) and see how it goes.
>
> Regards,
> Frédéric
>
> ------------------------------
> *De :* Ehsan Golpayegani <e.golpayegani@xxxxxxxxx>
> *Envoyé :* vendredi 27 décembre 2024 05:04
> *À :* ceph-users@xxxxxxx
> *Objet :*  Tpm2 in squid
>
> Hi ceph users,
>
> Has anyone successfully installed Ceph Squid with TPM2 enabled on an OSD?
> I'm encountering an error during installation: "stderr_lines": ["Error
> EINVAL: Failed to validate OSD spec "<unnamed>": Feature `tpm2` is not
> supported"].
>
> I've also attempted to prepare the disks with TPM2 before adding them to
> the cluster, but I receive the following error: "/usr/bin/podman: stderr
> ceph-volume lvm prepare: error: unrecognized arguments: --with-tpm".
>
> For reference, my cluster is deployed via Cephadm and I'm using Squid
> 19.2.0. Any guidance would be greatly appreciated.
>
> Thanks,
> Ehsan
>
>
> --------------
> Kind Regards
> <http://about.me/ehsan310?promo=email_sig>
>
>
> Ehsan Golpayegani
> [image: https://]www.ehsan.pw
> <
> https://ehsan.pw?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=edit_panel&utm_content=plaintext>
>
> SAVE PAPER - THINK BEFORE YOU PRINT!
> _______________________________________________
> ceph-users mailing list -- ceph-users@xxxxxxx
> To unsubscribe send an email to ceph-users-leave@xxxxxxx
>
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx




[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Ceph Dev]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux