22 Sep
2020
22 Sep
'20
8:25 a.m.
Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <M.Roos(a)f1-outsourcing.eu>eu>:
When I create a new encrypted osd with ceph volume[1]
Q4: Where is this luks passphrase stored?
I think the OSD asks the mon for it after auth:ing, so "in the mon DBs"
somewhere.
--
May the most significant bit of your life be positive.
22 Sep
22 Sep
2:04 p.m.
New subject: Understanding what ceph-volume does, with bootstrap-osd/ceph.keyring, tmpfs
The key is stored in the ceph cluster config db. It can be retrieved by
KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} --keyring
$OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks`
September 22, 2020 2:25 AM, "Janne Johansson" <icepic.dz(a)gmail.com>
wrote:
> Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <M.Roos(a)f1-outsourcing.eu>eu>:
>
>> When I create a new encrypted osd with ceph volume[1]
>>
>> Q4: Where is this luks passphrase stored?
>
> I think the OSD asks the mon for it after auth:ing, so "in the mon DBs"
> somewhere.
>
> --
> May the most significant bit of your life be positive.
> _______________________________________________
> ceph-users mailing list -- ceph-users(a)ceph.io
> To unsubscribe send an email to ceph-users-leave(a)ceph.io
6:29 p.m.
New subject: Understanding what ceph-volume does, with bootstrap-osd/ceph.keyring, tmpfs
Tbh ceph caused us more problems than it tried to fix ymmv good luck
On 22 Sep 2020, at 13:04, tri(a)postix.net wrote:
The key is stored in the ceph cluster config db. It can be retrieved by
KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} --keyring
$OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks`
September 22, 2020 2:25 AM, "Janne Johansson" <icepic.dz(a)gmail.com>
wrote:
Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos
<M.Roos(a)f1-outsourcing.eu>eu>:
_______________________________________________
ceph-users mailing list -- ceph-users(a)ceph.io
To unsubscribe send an email to ceph-users-leave(a)ceph.io When I create a new encrypted osd with ceph
volume[1]
Q4: Where is this luks passphrase stored?
I think the OSD asks the mon for it after auth:ing, so "in the mon DBs"
somewhere.
--
May the most significant bit of your life be positive.
_______________________________________________
ceph-users mailing list -- ceph-users(a)ceph.io
To unsubscribe send an email to ceph-users-leave(a)ceph.io 
30 Sep
30 Sep
8:25 p.m.
New subject: Understanding what ceph-volume does, with bootstrap-osd/ceph.keyring, tmpfs
Thanks!
-----Original Message-----
To: Janne Johansson; Marc Roos
Cc: ceph-devel; ceph-users
Subject: Re: [ceph-users] Re: Understanding what ceph-volume does, with
bootstrap-osd/ceph.keyring, tmpfs
The key is stored in the ceph cluster config db. It can be retrieved by
KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID}
--keyring $OSD_PATH/lockbox.keyring config-key get
dm-crypt/osd/$OSD_FSID/luks`
1298
days inactive
1306
days old
3 comments
4 participants
participants (4)
-
Janne Johansson -
Kevin Myers -
Marc Roos -
tri＠postix.net