Re: [ceph-users] Backup LUKS/Dmcrypt keys

[Дробышевский , Владимир]

Hi, David!

In case of dm-crypt luks (as default) ceph-disk keeps particular OSD
partition\partitions key in ceph mon attributes and uses OSD partition uuid
as an ID for this key.

So you can get all your keys running:

/usr/bin/ceph config-key ls

You'll get something like:

[
...
"dm-crypt/osd/50250ade-500a-44c4-8a47-00224d76594a/luks",
"dm-crypt/osd/940b5b1c-5926-4aa5-8cd7-ce2f22371d6a/luks",
"dm-crypt/osd/dd28c6ba-c101-4874-bc1c-401b34cb2f9b/luks",
...
]

These uuids are partition uuids.

You can get particular key as:

/usr/bin/ceph config-key get dm-crypt/osd//luks

As I don't use external wal\db partition currently I can't tell the exact
config path for their keys, but I believe a scheme will be the same.

Best regards,
Vladimir

2018-04-26 1:29 GMT+05:00 Kevin Olbrich :

> Hi,
>
> how can I backup the dmcrypt keys on luminous?
> The folder under /etc/ceph does not exist anymore.
>
> Kind regards
> Kevin
>
> ___
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
>


-- 

С уважением,
Дробышевский Владимир
Компания "АйТи Город"
+7 343 192

ИТ-консалтинг
Поставка проектов "под ключ"
Аутсорсинг ИТ-услуг
Аутсорсинг ИТ-инфраструктуры
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Re: [ceph-users] Backup LUKS/Dmcrypt keys

[David Turner]

IIRC the dmcrypt keys in Jewel were moved to a partition on the OSD.  You
should be able to find the keys by mounting those partitions.  That is
assuming filestore.  I don't know where they are for bluestore.

On Wed, Apr 25, 2018 at 4:29 PM Kevin Olbrich  wrote:

> Hi,
>
> how can I backup the dmcrypt keys on luminous?
> The folder under /etc/ceph does not exist anymore.
>
> Kind regards
> Kevin
> ___
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

[ceph-users] Backup LUKS/Dmcrypt keys

[Kevin Olbrich]

Hi,

how can I backup the dmcrypt keys on luminous?
The folder under /etc/ceph does not exist anymore.

Kind regards
Kevin
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com