[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ceph-users
Subject:    [ceph-users] Re: OSD with dm-crypt?
From:       Alex Gorbachev <ag () iss-integration ! com>
Date:       2024-02-27 16:09:52
Message-ID: CADb9453P1y68ey2J5JDSuahGz+Oj1PHF=R3vB-Kbpd66EK2j8Q () mail ! gmail ! com
[Download RAW message or body]

Not possible to set after the fact, to my knowledge.  The OSD must be set
to dm-crypt at the creation stage.

--
Alex Gorbachev
ISS/Storcium



On Mon, Feb 26, 2024 at 11:45 PM Michael Worsham <
mworsham@datadimensions.com> wrote:

> I was setting up the Ceph cluster via this URL (
> https://computingforgeeks.com/install-ceph-storage-cluster-on-ubuntu-linux-servers/)
> and didn't know if there was a way to do it via the "ceph orch daemon add
> osd ceph-osd-01:/dev/sdb" command or not?
>
> Is it possible to set the OSD to encryption after the fact or does that
> involve some other process?
>
> -- Michael
>
>
>
> Get Outlook for Android <https://aka.ms/AAb9ysg>
> ------------------------------
> *From:* Alex Gorbachev <ag@iss-integration.com>
> *Sent:* Monday, February 26, 2024 11:10:54 PM
> *To:* Michael Worsham <mworsham@datadimensions.com>
> *Cc:* ceph-users@ceph.io <ceph-users@ceph.io>
> *Subject:* Re: [ceph-users] OSD with dm-crypt?
>
> This is an external email. Please take care when clicking links or opening
> attachments. When in doubt, check with the Help Desk or Security.
>
> If you are using a service spec, just set
>
> encrypted: true
>
> If using ceph-volume, pass this flag:
>
> --dmcrypt
>
> You can verify similar to
> https://smithfarm-thebrain.blogspot.com/2020/03/how-to-verify-that-encrypted-osd-is.html
> --
> Alex Gorbachev
> ISS/Storcium
>
>
>
> On Mon, Feb 26, 2024 at 10:25 PM Michael Worsham <
> mworsham@datadimensions.com> wrote:
>
> Is there a how-to document or cheat sheet on how to enable OSD encryption
> using dm-crypt?
>
> -- Michael
>
> This message and its attachments are from Data Dimensions and are intended
> only for the use of the individual or entity to which it is addressed, and
> may contain information that is privileged, confidential, and exempt from
> disclosure under applicable law. If the reader of this message is not the
> intended recipient, or the employee or agent responsible for delivering the
> message to the intended recipient, you are hereby notified that any
> dissemination, distribution, or copying of this communication is strictly
> prohibited. If you have received this communication in error, please notify
> the sender immediately and permanently delete the original email and
> destroy any copies or printouts of this email as well as any attachments.
> _______________________________________________
> ceph-users mailing list -- ceph-users@ceph.io
> To unsubscribe send an email to ceph-users-leave@ceph.io
>
> This message and its attachments are from Data Dimensions and are intended
> only for the use of the individual or entity to which it is addressed, and
> may contain information that is privileged, confidential, and exempt from
> disclosure under applicable law. If the reader of this message is not the
> intended recipient, or the employee or agent responsible for delivering the
> message to the intended recipient, you are hereby notified that any
> dissemination, distribution, or copying of this communication is strictly
> prohibited. If you have received this communication in error, please notify
> the sender immediately and permanently delete the original email and
> destroy any copies or printouts of this email as well as any attachments.
>
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-leave@ceph.io

[prev in list] [next in list] [prev in thread] [next in thread]