So, I'm converting my existing Ceph cluster to use Skyflake. One issue that is stopping me from using it to deploy OSDs with, however, is that I require full disk encryption for each OSD.
I deployed my OSDs via ceph-volume create, with the --dmcrypt flag. This sets up each OSD to be encrypted via LUKS. At boot, ceph-volume activate grabs the LUKS keys from a Ceph monitor, passes them to dm-crypt, and then proceeds as normal in activating the OSDs.
Existing OSDs can be easily converted to use ceph-volume; so is it possible to change the OSD management logic to use ceph-volume instead? I suspect it would greatly simplify the implementation.
So, I'm converting my existing Ceph cluster to use Skyflake. One issue that is stopping me from using it to deploy OSDs with, however, is that I require full disk encryption for each OSD.
I deployed my OSDs via
ceph-volume create, with the--dmcryptflag. This sets up each OSD to be encrypted via LUKS. At boot,ceph-volume activategrabs the LUKS keys from a Ceph monitor, passes them todm-crypt, and then proceeds as normal in activating the OSDs.Existing OSDs can be easily converted to use
ceph-volume; so is it possible to change the OSD management logic to useceph-volumeinstead? I suspect it would greatly simplify the implementation.