mirror of
https://github.com/ceph/ceph
synced 2025-03-11 02:39:05 +00:00
Change ceph-disk default to use LUKS for encrypted partitions
LUKS allows for validation of the key at mount time (rather than simply mounting a random partition), specification of the encryption parameters in the header and key rollover of the slot key (the one that needs to be stored). The previous default, plain mode (rather than using LUKS) is available by setting 'osd dmcrypt type = plain' Existing encrypted OSDs are still recognised and used, only new OSDs now use LUKS. Signed-off-by: Andrew Bartlett <abartlet@catalyst.net.nz>
This commit is contained in:
parent
c83a288ab8
commit
998b461536
@ -1582,7 +1582,7 @@ def main_prepare(args):
|
||||
)
|
||||
|
||||
if dmcrypt_type is None:
|
||||
dmcrypt_type = "plain"
|
||||
dmcrypt_type = "luks"
|
||||
|
||||
if dmcrypt_type == "plain":
|
||||
if dmcrypt_keysize_str is None:
|
||||
|
Loading…
Reference in New Issue
Block a user