Hello, I am looking at a HPC storage solution, and part of what I''ve been asked to supply is encryption at the file system level. The architectural document I''ve found for Lustre (http://wiki.lustre.org/index.php/Architecture_-_Security#SFS_Style_Encryption_of_File_Data) specifies that there is a Lustre SFS, but I can''t find anymore information on it. Has anyone used this? Does anyone have information on it? Any help would be greatly appreciated. Thanks! Will Will Sanders Pb Geisinger Health System Office Phone: 570-271-8183 Cell Phone: 570-898-4507 wssanders at geisinger.edu IMPORTANT WARNING: The information in this message (and the documents attached to it, if any) is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken, or omitted to be taken, in reliance on it is prohibited and may be unlawful. If you have received this message in error, please delete all electronic copies of this message (and the documents attached to it, if any), destroy any hard copies you may have created and notify me immediately by replying to this email. Thank you. Geisinger Health System utilizes an encryption process to safeguard Protected Health Information and other confidential data contained in external e-mail messages. If email is encrypted, the recipient will receive an e-mail instructing them to sign on to the Geisinger Health System Secure E-mail Message Center to retrieve the encrypted e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.lustre.org/pipermail/lustre-discuss/attachments/20120508/fe7bc23e/attachment.html
No, there is currently no encryption for Lustre at the filesystem level. The document you refer to was the high-level architecture, but this feature has not been implemented. Cheers, Andreas On 2012-05-08, at 18:07, "William Sanders" <wssanders at geisinger.edu> wrote:> Hello, > > I am looking at a HPC storage solution, and part of what I''ve been asked > to supply is encryption at the file system level. The architectural document > I''ve found for Lustre > (http://wiki.lustre.org/index.php/Architecture_-_Security#SFS_Style_Encryption_of_File_Data) > specifies that there is a Lustre SFS, but I can''t find anymore information on > it. > > Has anyone used this? Does anyone have information on it? Any help > would be greatly appreciated. > > Thanks! > > Will > > > Will Sanders > Pb > Geisinger Health System > Office Phone: 570-271-8183 > Cell Phone: 570-898-4507 > wssanders at geisinger.edu > > IMPORTANT WARNING: The information in this message (and the documents attached to it, if any) is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken, or omitted to be taken, in reliance on it is prohibited and may be unlawful. If you have received this message in error, please delete all electronic copies of this message (and the documents attached to it, if any), destroy any hard copies you may have created and notify me immediately by replying to this email. Thank you. Geisinger Health System utilizes an encryption process to safeguard Protected Health Information and other confidential data contained in external e-mail messages. If email is encrypted, the recipient will receive an e-mail instructing them to sign on to the Geisinger Health System Secure E-mail Message Center to retrieve the encrypted e-mail. > > _______________________________________________ > Lustre-discuss mailing list > Lustre-discuss at lists.lustre.org > http://lists.lustre.org/mailman/listinfo/lustre-discuss-------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.lustre.org/pipermail/lustre-discuss/attachments/20120508/8311e351/attachment.html
On Tuesday 08 May 2012 20.07.47 William Sanders wrote:> Hello, > > I am looking at a HPC storage solution, and part of what I''ve been asked > to supply is encryption at the file system level.Depending on exactly what you mean by the above, a solution may be to put all lustre targets (mgt, mdt, ost(s)) on excrypted devices (LUKS). /Peter -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part. Url : http://lists.lustre.org/pipermail/lustre-discuss/attachments/20120510/72fb51ec/attachment.bin