mirror of
https://github.com/ceph/ceph
synced 2025-01-06 19:20:49 +00:00
88836135fd
This adds the required changes to ceph-volume and cephadm in order to support
deploying tpm2 token enrolled encrypted OSDs.
Adding `--with-tpm` when deploying with `--dmcrypt` will enroll a tpm2
token to the corresponding LUKS2 devices.
Example of a osd service spec:
```
service_type: osd
service_id: tpm2_osds
placement:
host_pattern: '*'
spec:
data_devices:
paths:
- /dev/sdb
encrypted: true
tpm2: true
```
Signed-off-by: Guillaume Abrioux <gabrioux@ibm.com>
|
||
|---|---|---|
| .. | ||
| custom-container.rst | ||
| index.rst | ||
| iscsi.rst | ||
| mds.rst | ||
| mgmt-gateway.rst | ||
| mgr.rst | ||
| mon.rst | ||
| monitoring.rst | ||
| nfs.rst | ||
| osd.rst | ||
| rgw.rst | ||
| smb.rst | ||
| snmp-gateway.rst | ||
| tracing.rst | ||