From mboxrd@z Thu Jan  1 00:00:00 1970
From: Marcus Sorensen <shadowsor@gmail.com>
Subject: Re: on disk encryption
Date: Thu, 31 Jan 2013 16:42:56 -0700
Message-ID: <CALFpzo5WBnRa=LTVqnqo+iG4FziyCxJxjYVp=tvE=aYJEBw4zw@mail.gmail.com>
References: <alpine.DEB.2.00.1209150428490.16190@cobra.newdream.net>
	<CANT6BaObaeTF9giuTi-f=2gjW4BUVHyZxRSvETNhunqAta=6FA@mail.gmail.com>
	<50C5A894.8020507@ubuntu.com>
	<6EACA8977B8949FE9A17B74B37772B4A@inktank.com>
	<50FF0478.7020702@ubuntu.com>
	<alpine.DEB.2.00.1301221603360.17154@cobra.newdream.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Return-path: <ceph-devel-owner@vger.kernel.org>
Received: from mail-vb0-f47.google.com ([209.85.212.47]:57320 "EHLO
	mail-vb0-f47.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
	with ESMTP id S1751752Ab3AaXm5 (ORCPT
	<rfc822;ceph-devel@vger.kernel.org>); Thu, 31 Jan 2013 18:42:57 -0500
Received: by mail-vb0-f47.google.com with SMTP id e21so2085044vbm.6
        for <ceph-devel@vger.kernel.org>; Thu, 31 Jan 2013 15:42:57 -0800 (PST)
In-Reply-To: <alpine.DEB.2.00.1301221603360.17154@cobra.newdream.net>
Sender: ceph-devel-owner@vger.kernel.org
List-ID: <ceph-devel.vger.kernel.org>
To: Sage Weil <sage@inktank.com>
Cc: James Page <james.page@ubuntu.com>, Gregory Farnum <greg@inktank.com>, Peter Reiher <reiher@inktank.com>, Dustin Kirkland <dustin.kirkland@gazzang.com>, ceph-devel@vger.kernel.org

Yes, anyone could do this now by setting up the OSDs on top of
dm-crypted disks, correct? This would just automate the process, and
manage keys for us?

On Tue, Jan 22, 2013 at 5:04 PM, Sage Weil <sage@inktank.com> wrote:
> On Tue, 22 Jan 2013, James Page wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>> On 10/12/12 09:53, Gregory Farnum wrote:
>> [...]
>> >>>>> I love the idea of btrfs supporting encryption natively
>> >>>>> much like it does compression. It may be some time before
>> >>>>> that happens, so in the meantime, I'd love to see Ceph
>> >>>>> support dm-crypt and/or eCryptfs beneath.
>> >>>
>> >>>
>> >>>
>> >>> Has this discussion progressed into any sort of implementation
>> >>> yet? It sounds like this is going to be a key feature for users
>> >>> who want top-to-bottom encryption of data right down to the
>> >>> block level.
>> >
>> > Peter is working on this now ? I'll let him discuss the details.
>> > :)
>>
>> Hey Peter - any update on the on-disk encryption work for Ceph?
>
> This was put on hold for now.
>
> At this point we're mostly just envisioning a very simple key storage
> service via the ceph montiors (e.g., ceph key get <name>, ceph key put
> <name>), and hooks in the startup scripts (sysvinit and/or upstart) to
> configure dm-crypt.
>
> sage
>
>
>>
>> Cheers
>>
>> James
>>
>> - --
>> James Page
>> Ubuntu Core Developer
>> Debian Maintainer
>> james.page@ubuntu.com
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.12 (GNU/Linux)
>> Comment: Using GnuPG with undefined - http://www.enigmail.net/
>>
>> iQIcBAEBCAAGBQJQ/wR4AAoJEL/srsug59jD4jAQAIByoFQ3rrbon/BsxqD+KUMZ
>> xlGbviVxGIiHtLyUIwaXPerrEqnpuQCKbg/ZBXH0F9NUCRw3SZN74YuOjNz8c0Tr
>> aAy1Wkx+lFCwt2FtiwC3pXx5++GO2qTbK7jsOeqJazxUN1J8EmoUv73jq3u+MmMo
>> NV5k4e04g7leap3o5f13ONyJmTZC48XDZWdpa2HoYO7h1Er04y2tqOVTHwAd4PS5
>> 26NaT2Cz4c+GMnDoTu608WrUJPv+pbi/WWf3RotRqXC3YX9VIDu6UxEc/tZHA+VP
>> PcbfgtKGhzj7ooxdHsanhPtUtHv9o9Q2DZFbzvATDC0s3K5Rpav8C1vnC2ODq6fr
>> LXCiRmVcjXz8e9TIQvSeQZLpK7Sy+WN4PTFdGsQqiVtw+iakw9qSn3EermAsCNIj
>> EEeHlt6GcWgFF4oVxeZ5EDJHUobz/vyl+R0ZjJgNK3aYv0zDw4w249ARpvjmoIPS
>> FHYrukgSIHxv1CFSh4AxA4mgRseGM4B7H69+jdzp+3LNaCnHQBnT5cfsVrpoqCam
>> te5tytclC4gQ3xJh5L2lMH8D/ikSSZZjO+7cJ4ZEW5ebu7ChuonWMj0TQc2gPpUG
>> qqI0aV4QxRYaE5oRJlxoSlylKd6tWvHc/44TDqUPFWVnqLB1c8WEEZnDviTz5BCC
>> NYqJJb+2p+pzt2bK0p4r
>> =+Uvt
>> -----END PGP SIGNATURE-----
>> --
>> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
>> the body of a message to majordomo@vger.kernel.org
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>
>>
> --
> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html