Skip to content

Commit

Permalink
Rework ceph-disk to allow LUKS for encrypted partitions
Browse files Browse the repository at this point in the history
LUKS allows for validation of the key at mount time (rather than
simply mounting a random partition), specification of the encryption
parameters in the header and key rollover of the slot key (the one
that needs to be stored).

New parameters 'osd cryptsetup parameters' and 'osd dmcrypt key size' are
added.  These allow these important policy choices to be overridden or
kept consistent per-site.

The previous default plain mode (rather than using LUKS) remains, select
LUKS by setting 'osd dmcrypt type = luks'

Signed-off-by: Andrew Bartlett <[email protected]>
  • Loading branch information
Andrew Bartlett authored and abartlet committed Jan 30, 2015
1 parent 707c78b commit c83a288
Show file tree
Hide file tree
Showing 3 changed files with 231 additions and 34 deletions.
Loading

0 comments on commit c83a288

Please sign in to comment.