Does cinder in Kilo supports encryption with ceph?

asked 2015-08-18 12:42:41 -0600

arcimboldo gravatar image

I'm using ceph as volume provider for Cinder, I'm running Kilo on Ubuntu. Documentation on encrypted types is very basic, and it seems that encryption is implemented dm-crypt. My question is: does cinder supports encryption of the volume when the volume is implemented as RBD volume in ceph?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2015-08-20 17:15:55 -0600

thingee gravatar image

Yes this feature is supported for Ceph, but not until the Liberty release.

It was noticed in the Liberty development cycle that this didn't really work and the tests weren't looking at things properly to catch the issue to begin with. This (bug) has been resolved, but unfortunately will not be available until Liberty.

As you've already noted, but so others know, you can follow the config reference doc on (volume type encryption) to use this feature with your storage choice backend.

edit flag offensive delete link more


According to, Ceph volume encryption is not supported as of Newton, though a fix has been released for Cinder. On the Nova side, the fix seems to be in the works.

Bernd Bausch gravatar imageBernd Bausch ( 2016-10-13 01:12:15 -0600 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools


Asked: 2015-08-18 12:42:41 -0600

Seen: 723 times

Last updated: Aug 18 '15