Ask Your Question
2

Does cinder in Kilo supports encryption with ceph?

asked 2015-08-18 12:42:41 -0500

arcimboldo gravatar image

I'm using ceph as volume provider for Cinder, I'm running Kilo on Ubuntu. Documentation on encrypted types is very basic, and it seems that encryption is implemented dm-crypt. My question is: does cinder supports encryption of the volume when the volume is implemented as RBD volume in ceph?

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
1

answered 2015-08-20 17:15:55 -0500

thingee gravatar image

Yes this feature is supported for Ceph, but not until the Liberty release.

It was noticed in the Liberty development cycle that this didn't really work and the tests weren't looking at things properly to catch the issue to begin with. This https://bugs.launchpad.net/cinder/+bug/1440227 (bug) has been resolved, but unfortunately will not be available until Liberty.

As you've already noted, but so others know, you can follow the config reference doc on http://docs.openstack.org/kilo/config-reference/content/section_volume-encryption.html (volume type encryption) to use this feature with your storage choice backend.

edit flag offensive delete link more

Comments

According to https://bugs.launchpad.net/cinder/+bu..., Ceph volume encryption is not supported as of Newton, though a fix has been released for Cinder. On the Nova side, the fix seems to be in the works.

Bernd Bausch gravatar imageBernd Bausch ( 2016-10-13 01:12:15 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

Stats

Asked: 2015-08-18 12:42:41 -0500

Seen: 657 times

Last updated: Aug 18 '15