8 Jun
2023
8 Jun
'23
7:43 a.m.
I bumped into an very interesting challenge, how to secure erase a rbd image data without any encryption?
The motivation is to ensure that there is no information leak on OSDs after deleting a user specified rbd image, without the extra burden of using rbd encryption.
any ideas, suggestions are highly appreciated,
what about something this? Maybe even via qemu-agent-command? find /home -type f -exec shred -n 1 {} \; Why are you not encrypting the osd? I thought that was the most efficient way of using encryption.