I've been suggesting that automated unlocking via Clevis/Tang
<
https://github.com/latchset/clevis> is a great way to provide per-VM
encryption without a lot of headache.
https://www.youtube.com/watch?v=qPl5tl0QPNk
Thank you,
John Call
jcall(a)redhat.com
On Tue, Oct 22, 2019 at 11:34 PM Strahil <hunter86_bg(a)yahoo.com> wrote:
Hi,
Maybe a gluster encryption will also cover your needs in a hyper converged
setup?
Best Regards,
Strahil Nikolov
On Oct 22, 2019 14:43, Sandro Bonazzola <sbonazzo(a)redhat.com> wrote:
Il giorno mar 22 ott 2019 alle ore 12:32 MIMMIK _ <dmarini(a)it.iliad.com>
ha scritto:
Is there a way to get a full disk encryption on virtual disks used by VMs
in oVirt?
You can use encrypted file system managed from within the VM itself if the
OS support it (dm-crypt with LUKS on GNU Linux, BitLocker) which is the
most secure choice on this topic.
Encrypting the storage hosting the VM disks won't help once you access the
storage for booting the VM, at that point disks will be accessible without
encryption.
Regards
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement:
https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FMGDSRBHRW...
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <
https://www.redhat.com/>
sbonazzo(a)redhat.com
<
https://www.redhat.com/>*Red Hat respects your work life balance.
Therefore there is no need to answer this email out of your office hours.
<
https://mojo.redhat.com/docs/DOC-1199578>*
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement:
https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6Y7JDYFGEJT...