Re: [openstack-dev] [ironic] Disk Eraser

2014-01-20 Thread Devananda van der Veen
On Sun, Jan 19, 2014 at 9:30 PM, Robert Collins wrote: > On 20 January 2014 18:10, Alan Kavanagh > wrote: > > +1, that is another point Rob. When I started this thread my main > interest was disk and then firmware. It is clear we really need to have a > clear discussion on this, as imho I would n

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-19 Thread Robert Collins
On 20 January 2014 18:10, Alan Kavanagh wrote: > +1, that is another point Rob. When I started this thread my main interest > was disk and then firmware. It is clear we really need to have a clear > discussion on this, as imho I would not be supportive or lease baremetal to > tenants if I can n

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-19 Thread Alan Kavanagh
customer. /Alan -Original Message- From: Robert Collins [mailto:robe...@robertcollins.net] Sent: January-18-14 12:55 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [ironic] Disk Eraser On 18 January 2014 12:21, Chris Friesen wrote: >

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-18 Thread Pádraig Brady
On 01/15/2014 02:42 PM, Alexei Kornienko wrote: > If you are working on linux system following can help you: > > dd if=/dev/urandom of=/dev/sda bs=4k That's going to be slow. The shred tool should be already installed on most Linux systems, and uses an internal PRNG to write either zeros or rando

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Robert Collins
On 18 January 2014 12:21, Chris Friesen wrote: > On 01/17/2014 04:20 PM, Devananda van der Veen wrote: > >> tl;dr, We should not be recycling bare metal nodes between untrusted >> tenants at this time. There's a broader discussion about firmware >> security going on, which, I think, will take a wh

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Devananda van der Veen
On Fri, Jan 17, 2014 at 3:21 PM, Chris Friesen wrote: > On 01/17/2014 04:20 PM, Devananda van der Veen wrote: > > tl;dr, We should not be recycling bare metal nodes between untrusted >> tenants at this time. There's a broader discussion about firmware >> security going on, which, I think, will ta

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Chris Friesen
On 01/17/2014 04:20 PM, Devananda van der Veen wrote: tl;dr, We should not be recycling bare metal nodes between untrusted tenants at this time. There's a broader discussion about firmware security going on, which, I think, will take a while for the hardware vendors to really address. What can

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Devananda van der Veen
On Fri, Jan 17, 2014 at 12:35 PM, Alan Kavanagh wrote: > Hi Rob > > Then apart from the disk eraser and reinstalling the blade from scratch > everytime it is returned from lease, and ensure network isolation, what are > the other many concerns you are worried about for sharing the bare metal > the

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Alan Kavanagh
s are" that you see? /Aaln -Original Message- From: Robert Collins [mailto:robe...@robertcollins.net] Sent: January-17-14 3:15 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [ironic] Disk Eraser On 16 January 2014 03:31, Alan Kavan

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Clark, Robert Graham
On 17/01/2014 08:19, Robert Collins wrote: > On 16 January 2014 03:31, Alan Kavanagh wrote: >> Hi fellow OpenStackers >> >> >> >> Does anyone have any recommendations on open source tools for disk >> erasure/data destruction software. I have so far looked at DBAN and disk >> scrubber and was wonde

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Gareth
Hi guys I have another question about erasing all data from disk. When using dd from /dev/zero could set bytes to zero from LBA0 on a disk. But dd a whole disk will cost very very long time and the custom way is to dd key data on the disk, for example the first 512B as MBR. But this is not enough

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-17 Thread Robert Collins
On 16 January 2014 03:31, Alan Kavanagh wrote: > Hi fellow OpenStackers > > > > Does anyone have any recommendations on open source tools for disk > erasure/data destruction software. I have so far looked at DBAN and disk > scrubber and was wondering if ironic team have some better recommendations

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-16 Thread Alan Kavanagh
ull | base64)" -nosalt < /dev/zero > randomfile.bin Hope this helps. -- Best regards, Oleg Gelbukh /Alan From: Oleg Gelbukh [mailto:ogelb...@mirantis.com<mailto:ogelb...@mirantis.com>] Sent: January-15-14 10:30 AM To: OpenStack Development Mailing List (not for usage questions) Subject

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-16 Thread Alan Kavanagh
has tried to do any data recovery after doing dd on the local disk? /Alan From: Chris Jones [mailto:c...@tenshu.net] Sent: January-16-14 6:33 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [ironic] Disk Eraser Hi https://code.google.com/p

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-16 Thread Chris Jones
Hi https://code.google.com/p/diskscrub/ If you need more than /dev/zero, scrub should be packaged in most distros and offers a choice of high grade algorithms. Cheers, -- Chris Jones > On 15 Jan 2014, at 14:31, Alan Kavanagh wrote: > > Hi fellow OpenStackers > > Does anyone have any recomm

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-16 Thread Oleg Gelbukh
> randomfile.bin Hope this helps. -- Best regards, Oleg Gelbukh /Alan > > > > *From:* Oleg Gelbukh [mailto:ogelb...@mirantis.com] > *Sent:* January-15-14 10:30 AM > *To:* OpenStack Development Mailing List (not for usage questions) > *Subject:* Re: [openstack-dev] [iro

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-15 Thread John Griffith
Stack Development Mailing List (not for usage questions) > Subject: Re: [openstack-dev] [ironic] Disk Eraser > > > > > > On Wed, Jan 15, 2014 at 6:42 PM, Alexei Kornienko > wrote: > > If you are working on linux system following can help you: > > dd if=/dev/ura

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-15 Thread Alan Kavanagh
Cheers Guys So what would you recommend Oleg. Yes its for linux system. /Alan From: Oleg Gelbukh [mailto:ogelb...@mirantis.com] Sent: January-15-14 10:30 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [ironic] Disk Eraser On Wed, Jan 15, 2014

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-15 Thread Oleg Gelbukh
On Wed, Jan 15, 2014 at 6:42 PM, Alexei Kornienko < alexei.kornie...@gmail.com> wrote: > If you are working on linux system following can help you: > > dd if=/dev/urandom of=/dev/sda bs=4k > I would not recommend that as /dev/urandom is real slow (10-15 MB/s). -- Best regards, Oleg Gelbukh >

Re: [openstack-dev] [ironic] Disk Eraser

2014-01-15 Thread Alexei Kornienko
If you are working on linux system following can help you: dd if=/dev/urandom of=/dev/sda bs=4k :) Best Regards, On 01/15/2014 04:31 PM, Alan Kavanagh wrote: Hi fellow OpenStackers Does anyone have any recommendations on open source tools for disk erasure/data destruction software. I have s