Loic Dachary 1ec58fcfc8 ceph-disk: implement lockbox key management ... Instead of storing the dmcrypt keys in the /etc/ceph/dmcrypt-keys directory, they are stored in the monitor. If a machine with OSDs created with ceph-disk prepare --dmcrypt is lost, it does not contain the key that would allow to decrypt their content. The dmcrypt key is retrieved from the monitor using a different keyring for each OSD. It is stored in a small partition called the lockbox. At boot time the lockbox is mounted /var/lib/ceph/osd-lockbox/$uuid and used when the $uuid partition is detected by udev to map it with cryptsetup. The OSDs that were prepared prior to the lockbox implementation are supported by looking up the key found in /etc/ceph/dmcrypt-keys before looking in /var/lib/ceph/osd-lockbox/$uuid. http://tracker.ceph.com/issues/14669 Fixes: #14669 Signed-off-by: Loic Dachary <loic@dachary.org>		2016-03-04 09:13:35 +07:00
..
50-rbd.rules
60-ceph-partuuid-workaround.rules	udev: add devicemapper to partuuid-workaround	2015-08-29 02:36:56 +02:00
95-ceph-osd-alt.rules
95-ceph-osd.rules	ceph-disk: implement lockbox key management	2016-03-04 09:13:35 +07:00