I was setting up the Ceph cluster via this URL 
(https://computingforgeeks.com/install-ceph-storage-cluster-on-ubuntu-linux-servers/)
 and didn't know if there was a way to do it via the "ceph orch daemon add osd 
ceph-osd-01:/dev/sdb" command or not?

Is it possible to set the OSD to encryption after the fact or does that involve 
some other process?

-- Michael



Get Outlook for Android<https://aka.ms/AAb9ysg>
________________________________
From: Alex Gorbachev <a...@iss-integration.com>
Sent: Monday, February 26, 2024 11:10:54 PM
To: Michael Worsham <mwors...@datadimensions.com>
Cc: ceph-users@ceph.io <ceph-users@ceph.io>
Subject: Re: [ceph-users] OSD with dm-crypt?

This is an external email. Please take care when clicking links or opening 
attachments. When in doubt, check with the Help Desk or Security.

If you are using a service spec, just set

encrypted: true

If using ceph-volume, pass this flag:

--dmcrypt

You can verify similar to 
https://smithfarm-thebrain.blogspot.com/2020/03/how-to-verify-that-encrypted-osd-is.html
--
Alex Gorbachev
ISS/Storcium



On Mon, Feb 26, 2024 at 10:25 PM Michael Worsham 
<mwors...@datadimensions.com<mailto:mwors...@datadimensions.com>> wrote:
Is there a how-to document or cheat sheet on how to enable OSD encryption using 
dm-crypt?

-- Michael

This message and its attachments are from Data Dimensions and are intended only 
for the use of the individual or entity to which it is addressed, and may 
contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, or the employee or agent responsible for delivering the 
message to the intended recipient, you are hereby notified that any 
dissemination, distribution, or copying of this communication is strictly 
prohibited. If you have received this communication in error, please notify the 
sender immediately and permanently delete the original email and destroy any 
copies or printouts of this email as well as any attachments.
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io<mailto:ceph-users@ceph.io>
To unsubscribe send an email to 
ceph-users-le...@ceph.io<mailto:ceph-users-le...@ceph.io>
This message and its attachments are from Data Dimensions and are intended only 
for the use of the individual or entity to which it is addressed, and may 
contain information that is privileged, confidential, and exempt from 
disclosure under applicable law. If the reader of this message is not the 
intended recipient, or the employee or agent responsible for delivering the 
message to the intended recipient, you are hereby notified that any 
dissemination, distribution, or copying of this communication is strictly 
prohibited. If you have received this communication in error, please notify the 
sender immediately and permanently delete the original email and destroy any 
copies or printouts of this email as well as any attachments.
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to