Hello,
New Here. I am experimenting with Disk Encryption [1] and getting a 'No
data available when trying to access data.
I followed these steps:
* Create a new volume:
```
# gluster volume create str01-cl-vol disperse 3
str0{1..6}:/data/glusterfs/brick1/str01-cl-vol
```
* Enable encryption on it:
```
# gluster volume set str01-cl-vol encryption on
```
* Disable performance indicators:
```
# for OPT in quick-read write-behind open-behind; do gluster volume set
str01-cl-vol performance.${OPT} off; done
volume set: success
volume set: success
volume set: success
```
* Set the location of the master encryption key:
```
# gluster volume set str01-cl-vol encryption.master-key
/data/glusterfs/private/str01-cl-vol/encryption.master-key
```
* Generate the master encryption key:
```
# openssl rand -hex 32 >
/data/glusterfs/private/str01-cl-vol/encryption.master-key
```
* Set the key size to 512 bits (default is 256):
```
# gluster volume set str01-cl-vol encryption.data-key-size 512
```
* Start the volume:
```
# gluster volume start str01-cl-vol
```
* Verify:
```
# gluster volume info str01-cl-vol
Volume Name: str01-cl-vol
Type: Distributed-Disperse
Volume ID: 85ed34b2-9057-4f27-9594-168cb8343e25
Status: Started
Snapshot Count: 0
Number of Bricks: 2 x (2 + 1) = 6
Transport-type: tcp
Bricks:
Brick1: str01:/data/glusterfs/brick1/str01-cl-vol
Brick2: str02:/data/glusterfs/brick1/str01-cl-vol
Brick3: str03:/data/glusterfs/brick1/str01-cl-vol
Brick4: str04:/data/glusterfs/brick1/str01-cl-vol
Brick5: str05:/data/glusterfs/brick1/str01-cl-vol
Brick6: str06:/data/glusterfs/brick1/str01-cl-vol
Options Reconfigured:
encryption.data-key-size: 512
encryption.master-key:
/data/glusterfs/private/str01-cl-vol/encryption.master-key
performance.open-behind: off
performance.write-behind: off
performance.quick-read: off
features.encryption: on
transport.address-family: inet
performance.readdir-ahead: on
nfs.disable: on
```
* Mount the volume (on localhost):
```
mount -t glusterfs -o
xlator-option=str01-cl-vol.master-key=/data/glusterfs/private/str01-cl.vol-encryption.master-key,log-file=gluster.log
localhost:/str01-cl-vol /mnt
```
Log says:
https://pastebin.com/fxQaGjF1
* Listing the files:
```
root@str01:/mnt# ls -la
ls: reading directory '.': Input/output error
total 4
-rw-r--r-- 1 root root 0 Dec 10 13:28 test123
-rw-r--r-- 1 root root 0 Dec 10 13:33 test543
-rw-r--r-- 1 root root 0 Dec 10 13:27 test.txt
drwxr-xr-x 3 root root 4096 Dec 10 13:27 .trashcan
```
* Creating a file:
```
root@str01:/mnt# echo test > test987
bash: test987: Invalid argument
```
* Readding a file fails (and is very slow):
```
root@str01:/mnt# time cat test987
cat: test987: No data available
real 0m2.018s
user 0m0.000s
sys 0m0.000s
```
Glusterfs version is (installed from Debian stretch repos):
```
root@str01:/mnt# gluster --version
glusterfs 3.8.8 built on Jan 11 2017 14:07:11
Repository revision: git://git.gluster.com/glusterfs.git
Copyright (c) 2006-2011 Gluster Inc. <http://www.gluster.com>
GlusterFS comes with ABSOLUTELY NO WARRANTY.
You may redistribute copies of GlusterFS under the terms of the GNU
General Public License.
```
Can you see something wrong in my workflow?
References:
-----------
[1]
https://github.com/gluster/glusterfs-specs/blob/master/done/GlusterFS%203.5/Disk%20Encryption.md
[2]
https://keithseahus.github.io/sphinx/build/html/technology/glusterfs/new_features/3.5/disk_encryption.html
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Gluster-users mailing list Gluster-users@xxxxxxxxxxx https://lists.gluster.org/mailman/listinfo/gluster-users
