Project

General

Profile

Actions
Copy link

Feature #44911

closed

support dmcrypt device that is already encrypted by user

Added by Satoru Takeuchi about 4 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Target version:
Ceph - v16.0.0
% Done:

0%

Source:
Tags:
Backport:
Reviewed:
Affected Versions:
Ceph - v16.0.0
Pull request ID:

Description

I need to create OSDs on top of dmcrypt HDDs. Although ceph-volume provides
a way to encrypt by itself, it does not match my use-case. It's because I make
use of TPM to encrypt HDDs1 and ceph-volume doesn't support any options
to tweak the encryption method.

I consider it's better to allow the dmcrypt disks, that are encrypted by users,
instead of complicating ceph-volume to support many encryption methods
one by one.

[1]: https://github.com/cybozu-go/sabakan/blob/9093551170dfcffe9be47e95af3748a21b479be0/docs/disk_encryption.md#disk-encryption

Related issues 1 (0 open — 1 closed)

Related to ceph-volume - Bug #45443: ceph-volume: support mode-specific availability fields in inventory subcommandWon't FixSatoru Takeuchi

Actions
Actions
Copy link

Also available in: Atom PDF