The key is stored in the ceph cluster config db. It can be retrieved by

KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} 
--keyring $OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks`

September 22, 2020 2:25 AM, "Janne Johansson" <icepic...@gmail.com> wrote:

> Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <m.r...@f1-outsourcing.eu>:
> 
>> When I create a new encrypted osd with ceph volume[1]
>> 
>> Q4: Where is this luks passphrase stored?
> 
> I think the OSD asks the mon for it after auth:ing, so "in the mon DBs"
> somewhere.
> 
> --
> May the most significant bit of your life be positive.
> _______________________________________________
> ceph-users mailing list -- ceph-users@ceph.io
> To unsubscribe send an email to ceph-users-le...@ceph.io
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to