[SOLVED] encrypt existing osds

[Gastondc]

Dear,

I am trying to enable the encryption flag of the OSD.

I was successful pulling out an OSD, writing zeros, and re-adding.

But in this link it says that I can encrypt existing osd.

I don't realize how

https://docs.ceph.com/en/latest/ceph-volume/lvm/prepare/#existing-osds

https://access.redhat.com/documenta.../using-the-ceph-volume-utility-to-deploy-osds


I no understand if is posible encrypt existing osds and how is the process.

Thanks!

 

[dcsapak]

if you create an osd via the pve gui, there is a checkbox 'encrypt', nothing more to do than checking it

 

[Gastondc]

Thanks.

I couldn't find a way to encrypt existing disks.

Nor did I have the option to restart the server. So I let you do what I did.

Make the decision to remove each ODS and re-add it with the "encrypt" option

Use the web GUI, on the node in question -> disk. I had 3 different behaviors when removing ODS:

1 - Some disks that I took out, I was able to add them without doing anything.

2 - If the disk was listed as lvm2_member

sgdisk -Z /dev/DISK sgdisk -g /dev/DISK

from now on he could add them up again.

3 - if Device_Mapper appears, you have to locate the device with the id:




lsblk

find your disk and run something like this:

dmsetup remove /dev/ceph-ddd95071-5a89-4ece-beeb-5498a806cc06/osd-block-ebf2e91e-83f1-4391-8490-232b71ca6530

from now on he could add them up again.



I hope that if any of you have the same problem this solution will help you.