Re: Understanding what ceph-volume does, with bootstrap-osd/ceph.keyring, tmpfs
Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <M.Roos@f1-outsourcing.eu>:
When I create a new encrypted osd with ceph volume[1]
Q4: Where is this luks passphrase stored?
I think the OSD asks the mon for it after auth:ing, so "in the mon DBs" somewhere. -- May the most significant bit of your life be positive.
The key is stored in the ceph cluster config db. It can be retrieved by KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} --keyring $OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks` September 22, 2020 2:25 AM, "Janne Johansson" <icepic.dz@gmail.com> wrote:
Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <M.Roos@f1-outsourcing.eu>:
When I create a new encrypted osd with ceph volume[1]
Q4: Where is this luks passphrase stored?
I think the OSD asks the mon for it after auth:ing, so "in the mon DBs" somewhere.
-- May the most significant bit of your life be positive. _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
Tbh ceph caused us more problems than it tried to fix ymmv good luck
On 22 Sep 2020, at 13:04, tri@postix.net wrote:
The key is stored in the ceph cluster config db. It can be retrieved by
KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} --keyring $OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks`
September 22, 2020 2:25 AM, "Janne Johansson" <icepic.dz@gmail.com> wrote:
Den mån 21 sep. 2020 kl 16:15 skrev Marc Roos <M.Roos@f1-outsourcing.eu>:
When I create a new encrypted osd with ceph volume[1]
Q4: Where is this luks passphrase stored?
I think the OSD asks the mon for it after auth:ing, so "in the mon DBs" somewhere.
-- May the most significant bit of your life be positive. _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
Thanks! -----Original Message----- To: Janne Johansson; Marc Roos Cc: ceph-devel; ceph-users Subject: Re: [ceph-users] Re: Understanding what ceph-volume does, with bootstrap-osd/ceph.keyring, tmpfs The key is stored in the ceph cluster config db. It can be retrieved by KEY=`/usr/bin/ceph --cluster ceph --name client.osd-lockbox.${OSD_FSID} --keyring $OSD_PATH/lockbox.keyring config-key get dm-crypt/osd/$OSD_FSID/luks`
participants (4)
-
Janne Johansson
-
Kevin Myers
-
Marc Roos
-
tri＠postix.net