Hi,
I have an environment in which I need data at rest encryption, and while there isn't anything built into Proxmox, there is dm-crypt built into ceph. I have anywhere between 4-12 nodes, each with 2 OSDs (1TB HDD). I've solved the encryption of Proxmox, but haven't figured out if there is anyway to encrypt the Ceph Pool/OSDs or to create and OSD inside of an LUKS.
I have two questions I guess, first do pveceph commands support the dm-crypt command anywhere? Second is it possible to create CEPH OSDs ontop of LUKS (either LVM on luks or luks on LVM)?
Thanks
ImpactStrafe
I have an environment in which I need data at rest encryption, and while there isn't anything built into Proxmox, there is dm-crypt built into ceph. I have anywhere between 4-12 nodes, each with 2 OSDs (1TB HDD). I've solved the encryption of Proxmox, but haven't figured out if there is anyway to encrypt the Ceph Pool/OSDs or to create and OSD inside of an LUKS.
I have two questions I guess, first do pveceph commands support the dm-crypt command anywhere? Second is it possible to create CEPH OSDs ontop of LUKS (either LVM on luks or luks on LVM)?
Thanks
ImpactStrafe