mirror of
https://github.com/ceph/ceph
synced 2025-01-04 18:19:48 +00:00
88836135fd
This adds the required changes to ceph-volume and cephadm in order to support
deploying tpm2 token enrolled encrypted OSDs.
Adding `--with-tpm` when deploying with `--dmcrypt` will enroll a tpm2
token to the corresponding LUKS2 devices.
Example of a osd service spec:
```
service_type: osd
service_id: tpm2_osds
placement:
host_pattern: '*'
spec:
data_devices:
paths:
- /dev/sdb
encrypted: true
tpm2: true
```
Signed-off-by: Guillaume Abrioux <gabrioux@ibm.com>
|
||
|---|---|---|
| .. | ||
| lvm | ||
| simple | ||
| zfs | ||
| drive-group.rst | ||
| index.rst | ||
| intro.rst | ||
| inventory.rst | ||
| systemd.rst | ||