[ovirt-users] Re: Disk encryption in oVirt

2019-11-04 Thread John Call 
I've been suggesting that automated unlocking via Clevis/Tang
 is a great way to provide per-VM
encryption without a lot of headache.
https://www.youtube.com/watch?v=qPl5tl0QPNk


Thank you,

John Call
jc...@redhat.com


On Tue, Oct 22, 2019 at 11:34 PM Strahil  wrote:

> Hi,
> Maybe a gluster encryption will also cover your needs in a hyper converged
> setup?
>
> Best Regards,
> Strahil Nikolov
> On Oct 22, 2019 14:43, Sandro Bonazzola  wrote:
>
>
>
> Il giorno mar 22 ott 2019 alle ore 12:32 MIMMIK _ 
> ha scritto:
>
> Is there a way to get a full disk encryption on virtual disks used by VMs
> in oVirt?
>
>
> You can use encrypted file system managed from within the VM itself if the
> OS support it (dm-crypt with LUKS on GNU Linux, BitLocker) which is the
> most secure choice on this topic.
> Encrypting the storage hosting the VM disks won't help once you access the
> storage for booting the VM, at that point disks will be accessible without
> encryption.
>
>
>
>
>
>
> Regards
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FMGDSRBHRWYRCBFM6ZHSJQNMKGJU4NK/
>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>
> Red Hat EMEA 
>
> sbona...@redhat.com
> *Red Hat respects your work life balance.
> Therefore there is no need to answer this email out of your office hours.
> *
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/6Y7JDYFGEJTDPX2SCBYUBXNWRUWVI26L/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WVSCQUA2PPCKFFK6V7NOJMII4CWAA2BI/

[ovirt-users] Re: Disk encryption in oVirt

2019-10-22 Thread Strahil 
Hi,
Maybe a gluster encryption will also cover your needs in a hyper converged 
setup?


Best Regards,
Strahil Nikolov
On Oct 22, 2019 14:43, Sandro Bonazzola  wrote:
>
>
>
> Il giorno mar 22 ott 2019 alle ore 12:32 MIMMIK _  ha 
> scritto:
>>
>> Is there a way to get a full disk encryption on virtual disks used by VMs in 
>> oVirt?
>
>
> You can use encrypted file system managed from within the VM itself if the OS 
> support it (dm-crypt with LUKS on GNU Linux, BitLocker) which is the most 
> secure choice on this topic.
> Encrypting the storage hosting the VM disks won't help once you access the 
> storage for booting the VM, at that point disks will be accessible without 
> encryption.
>
>
>
>  
>>
>>
>> Regards
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FMGDSRBHRWYRCBFM6ZHSJQNMKGJU4NK/
>
>
>
> -- 
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>
> Red Hat EMEA
>
> sbona...@redhat.com   
>
> Red Hat respects your work life balance. Therefore there is no need to answer 
> this email out of your office hours.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6Y7JDYFGEJTDPX2SCBYUBXNWRUWVI26L/

[ovirt-users] Re: Disk encryption in oVirt

2019-10-22 Thread Sandro Bonazzola 
Il giorno mar 22 ott 2019 alle ore 12:32 MIMMIK _  ha
scritto:

> Is there a way to get a full disk encryption on virtual disks used by VMs
> in oVirt?
>

You can use encrypted file system managed from within the VM itself if the
OS support it (dm-crypt with LUKS on GNU Linux, BitLocker) which is the
most secure choice on this topic.
Encrypting the storage hosting the VM disks won't help once you access the
storage for booting the VM, at that point disks will be accessible without
encryption.





>
> Regards
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FMGDSRBHRWYRCBFM6ZHSJQNMKGJU4NK/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com
*Red Hat respects your work life balance.
Therefore there is no need to answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PLIMFGNC44BJPCUCXLBMGAQVEOFQBY5T/