From: Sage Weil <sage@newdream.net>
To: Andrew Bartlett <abartlet@catalyst.net.nz>
Cc: mbroz@redhat.com, ceph-devel@vger.kernel.org
Subject: Re: Interested in ceph OSD encryption and key management
Date: Tue, 16 Jun 2015 21:16:44 -0700 (PDT) [thread overview]
Message-ID: <alpine.DEB.2.00.1506162115350.16406@cobra.newdream.net> (raw)
In-Reply-To: <1434508656.26942.19.camel@catalyst.net.nz>
On Wed, 17 Jun 2015, Andrew Bartlett wrote:
> On Thu, 2015-05-28 at 13:03 -0700, Sage Weil wrote:
> > Hi Andrew,
> >
> > I'm copying Milan Broz, who has looked at this ome. There was some
> > subsequent off-list discussion in Red Hat about using Petera[1] for the
> > key management, but this'll require a bit more effort than what was
> > described in that blueprint.
> >
> > On Thu, 28 May 2015, Andrew Bartlett wrote:
> > > David Disseldorp was good enough to point me at this proposal for ceph
> > > OSD key management:
> > > https://wiki.ceph.com/Planning/Blueprints/Infernalis/osd%3A_simple_ceph-mon_dm-crypt_key_management
> > >
> > > I'm really interested in improving ceph on-disk encryption, and am
> > > really glad folks are taking this beyond the local key storage we have
> > > managed so far.
> > >
> > > So I can be part of the discussion, how do I get a login to the wiki? I
> > > would like to indicate my interest there.
> >
> > The wiki logins are broken, but ignore that.. we're moving to
> > tracker.ceph.com's wiki shortly anyway. Email is best in the meantime!
>
> This proposal seems not have to have it to the new wiki. Is it still
> alive? What do we need to do to keep this moving?
I can create a placeholder session. Can you two hash out a proposal over
the next week or so to discuss? I think there are some tricky questions
if petera is used if we want it to integrate with the monitors as well
(e.g., leverage the monitors for updating/distributing the petera
certs/keys).
sage
>
> Thanks,
>
> Andrew Bartlett
>
> --
> Andrew Bartlett
> http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
> Samba Development and Support, Catalyst IT http://catalyst.net.nz/services/samba
>
>
>
>
>
>
> --
> To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
>
next prev parent reply other threads:[~2015-06-17 4:16 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-05-28 4:23 Interested in ceph OSD encryption and key management Andrew Bartlett
2015-05-28 20:03 ` Sage Weil
2015-05-31 14:01 ` Wyllys Ingersoll
2015-06-03 0:07 ` Andrew Bartlett
2015-06-03 0:12 ` Andrew Bartlett
2015-06-03 5:39 ` Milan Broz
2015-06-17 2:37 ` Andrew Bartlett
2015-06-17 4:16 ` Sage Weil [this message]
2015-06-18 13:34 ` Milan Broz
2015-06-18 14:31 ` Sage Weil
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=alpine.DEB.2.00.1506162115350.16406@cobra.newdream.net \
--to=sage@newdream.net \
--cc=abartlet@catalyst.net.nz \
--cc=ceph-devel@vger.kernel.org \
--cc=mbroz@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.