Ask Your Question
0

Does openstack swift support object shredding at deletion?

asked 2013-10-27 08:38:19 -0600

b_sullivan gravatar image

When I issue a delete command I would like the Storage Nodes to securely delete ("shred", overwrite the file a certain # of times) the object/file. The only info I found on delete is that the storage node creates a 0 byte tombstone and unlinks the existing file.

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2013-10-27 15:46:56 -0600

torgomatic gravatar image

Deletion in Swift is only unlink + tombstone, as you've found out.

Given that some block devices will allocate new sectors on write (SSDs do this), the only way to even come close to file shredding is to unlink the file and then overwrite all the free space on the filesystem, but this (a) will take a really really long time, and (b) requires running as root, so the probability of Swift supporting that is roughly zero.

If you need to ensure that data is truly non-recoverable, the best way is probably to encrypt the data client-side with a unique key for each object, and then destroy the key after deleting the object.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

Stats

Asked: 2013-10-27 08:38:19 -0600

Seen: 262 times

Last updated: Oct 27 '13