mirror of
https://github.com/ceph/ceph
synced 2025-01-04 18:19:48 +00:00
88836135fd
This adds the required changes to ceph-volume and cephadm in order to support
deploying tpm2 token enrolled encrypted OSDs.
Adding `--with-tpm` when deploying with `--dmcrypt` will enroll a tpm2
token to the corresponding LUKS2 devices.
Example of a osd service spec:
```
service_type: osd
service_id: tpm2_osds
placement:
host_pattern: '*'
spec:
data_devices:
paths:
- /dev/sdb
encrypted: true
tpm2: true
```
Signed-off-by: Guillaume Abrioux <gabrioux@ibm.com>
|
||
|---|---|---|
| .. | ||
| services | ||
| adoption.rst | ||
| client-setup.rst | ||
| compatibility.rst | ||
| host-management.rst | ||
| index.rst | ||
| install.rst | ||
| operations.rst | ||
| troubleshooting.rst | ||
| upgrade.rst | ||