Hi. I'm running a small single-host Ceph cluster on Proxmox (as my home NAS). I want to encrypt my OSDs but I don't want the host's SSD to be a single point of failure. What Ceph config/keyring/secret keys do I need to make safe [encrypted] copies of to ensure that even if the host running the Ceph monitor and OSDs experiences catastrophic data loss, I can still recover the data on the OSD disks? Are the various keyring files (ceph.mon.keyring, ceph.client.admin.keyring) sufficient?
Can I safely store an encrypted copy of that info on the lockbox partition of each OSD or do I need to be concerned that Ceph will delete unrecognized files from the lockbox? Thanks!
_______________________________________________ ceph-users mailing list [email protected] http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
