-
Book Overview & Buying
-
Table Of Contents
OpenStack Cloud Computing Cookbook - Fourth Edition
By :
Cinder can manage the encryption of volumes, and it happens transparent to the guest. Encryption is enabled on a volume type level.
Encryption can be enabled either when creating a new volume type or added to an existing volume type that has no volumes in use. To enable volume encryption, you will need the following:
An openrc file with appropriate credentials for the environment
The openstack command-line client
The name of the volume type
Name of the encryption provider
Encryption control location
Encryption key size
Encryption cipher
For our example, these will be as follows:
Name: Cookbook Encrypted Volumes
Encryption provider: nova.volume.encryptors.luks.LuksEncryptor
Encryption control location: front-end
Encryption key size: 256
Encryption cipher: aes-xts-plain64
The encryption-specific values you choose will be based on what is available in your particular environment. A detailed discussion of these values is beyond the scope of this book.
Change the font size
Change margin width
Change background colour