Re: [Beowulf] Data Destruction

2021-09-30 Thread Jan Wender
One of our customers is giving the disks to the on-site firefighters to be used in training exercises  On 30. September 2021 at 09:51:40, John Hearns (hear...@gmail.com(mailto:hear...@gmail.com)) wrote: > I once had an RMA case for a failed tape with Spectralogic. To prove it was >

Re: [Beowulf] Data Destruction

2021-09-30 Thread John Hearns
I once had an RMA case for a failed tape with Spectralogic. To prove it was destroyed and not re-used I asked the workshop guys to put it through a bandsaw, then sent off the pictures. On Wed, 29 Sept 2021 at 16:47, Ellis Wilson wrote: > On 9/29/21 11:41 AM, Jörg Saßmannshausen wrote: > > If

Re: [Beowulf] Data Destruction

2021-09-29 Thread Ellis Wilson
On 9/29/21 5:51 PM, Jörg Saßmannshausen wrote: interesting concept. I did not know about the Lustre fsencrypt but then, I am less the in-detail expert in PFS. Just to make sure I get the concept of that correct: Basically Lustre is providing projects which itself are encrypted, similar to the

Re: [Beowulf] Data Destruction

2021-09-29 Thread Jörg Saßmannshausen
Hi Ellis, interesting concept. I did not know about the Lustre fsencrypt but then, I am less the in-detail expert in PFS. Just to make sure I get the concept of that correct: Basically Lustre is providing projects which itself are encrypted, similar to the encrypted containers I mentioned

Re: [Beowulf] Data Destruction

2021-09-29 Thread Ellis Wilson
On 9/29/21 11:41 AM, Jörg Saßmannshausen wrote: If you still need more, don't store the data at all but print it out on paper and destroy it by means of incineration. :D I have heard stories from past colleagues of one large US Lab putting their HDDs through wood chippers with magnets on the

Re: [Beowulf] Data Destruction

2021-09-29 Thread Ellis Wilson
Apologies in advance for the top-post -- too many interleaved streams here to sanely bottom-post appropriately. SED drives, which are a reasonably small mark-up for both HDDs and SSDs, provide full drive or per-band solutions to "wipe" the drive by revving the key associated with the band or

Re: [Beowulf] Data Destruction

2021-09-29 Thread Jörg Saßmannshausen
Dear all, interesting discussion and very timely for me as well as we are currently setting up a new HPC facility, using OpenStack throughout so we can build a Data Safe Haven with it as well. The question about data security came up too in various conversations, both internal and with

Re: [Beowulf] Data Destruction

2021-09-29 Thread Skylar Thompson
In this case, we've successfully pushed back with the granting agency (US NIH, generally, for us) that it's just not feasible to guarantee that the data are truly gone on a production parallel filesystem. The data are encrypted at rest (including offsite backups), which has been sufficient for our

Re: [Beowulf] Data Destruction

2021-09-29 Thread Paul Edmon via Beowulf
I guess the question is for a parallel filesystem how do you make sure you have 0'd out the file with out borking the whole filesystem since you are spread over a RAID set and could be spread over multiple hosts. -Paul Edmon- On 9/29/2021 10:32 AM, Scott Atchley wrote: For our users that have

Re: [Beowulf] Data Destruction

2021-09-29 Thread Paul Edmon via Beowulf
, 2021 at 9:15 AM *To: *Scott Atchley *Cc: *Beowulf Mailing List *Subject: *Re: [Beowulf] Data Destruction *External Email Warning* *This email originated from outside the university. Please use caution when opening attachments, clicking links, or responding to requests

Re: [Beowulf] Data Destruction

2021-09-29 Thread Skylar Thompson
We have one storage system (DDN/GPFS) that is required to be NIST-compliant, and we bought self-encrypting drives for it. The up-charge for SED drives has diminished significantly over the past few years so that might be easier than doing it in software and then having to verify/certify that the

Re: [Beowulf] Data Destruction

2021-09-29 Thread Renfro, Michael
satisfy the requirements. From: Beowulf on behalf of Paul Edmon via Beowulf Date: Wednesday, September 29, 2021 at 9:15 AM To: Scott Atchley Cc: Beowulf Mailing List Subject: Re: [Beowulf] Data Destruction External Email Warning This email originated from outside the university. Please use

Re: [Beowulf] Data Destruction

2021-09-29 Thread Scott Atchley
For our users that have sensitive data, we keep it encrypted at rest and in movement. For HDD-based systems, you can perform a secure erase per NIST standards. For SSD-based systems, the extra writes from the secure erase will contribute to the wear on the drives and possibly their eventually

Re: [Beowulf] Data Destruction

2021-09-29 Thread Paul Edmon via Beowulf
The former.  We are curious how to selectively delete data from a parallel filesystem.  For example we commonly use Lustre, ceph, and Isilon in our environment.  That said if other types allow for easier destruction of selective data we would be interested in hearing about it. -Paul Edmon-

Re: [Beowulf] Data Destruction

2021-09-29 Thread Scott Atchley
Are you asking about selectively deleting data from a parallel file system (PFS) or destroying drives after removal from the system either due to failure or system decommissioning? For the latter, DOE does not allow us to send any non-volatile media offsite once it has had user data on it. When