LightBitsLabs / los-csi

Lightbits LightOS CSI Plugin
Other
0 stars 2 forks source link

host encryption v3 #16

Closed majst01 closed 2 years ago

majst01 commented 2 years ago

This replaces #15 all comments in #15 where addressed except checking if kernel supports luks2 format, still unsure how this could be done.

Tried again raising base container to get cryptsetup v2.4.x which prevents some failures i had.

From my POV this is a small as possible PR, feedback welcome as always.

sagi-lb commented 2 years ago

@majst01 did you test that this works with volumes created from a source-snapshot or a source-volume?

majst01 commented 2 years ago

@majst01 did you test that this works with volumes created from a source-snapshot or a source-volume?

Honestly no, we don`t have such a scenario, what exactly is a source-volume ?

We have not yet enabled Snapshots in our whole environment.

sagi-lb commented 2 years ago

You can run a simple test using examples from deploy/helm/lb-csi-workload-examples/charts/snaps/ and add host-encryption...

majst01 commented 2 years ago

superseeded by #18