def test_luks_format_command_with_default_size(self, m_call, conf_ceph_stub): conf_ceph_stub('[global]\nfsid=abcd') expected = [ 'cryptsetup', '--batch-mode', '--key-size', '512', '--key-file', '-', 'luksFormat', '/dev/foo' ] encryption.luks_format('abcd', '/dev/foo') assert m_call.call_args[0][0] == expected
def test_luks_format_command_with_custom_size(self, m_call, conf_ceph_stub): conf_ceph_stub('[global]\nfsid=abcd\n[osd]\nosd_dmcrypt_key_size=256') expected = [ 'cryptsetup', '--batch-mode', '--key-size', '256', '--key-file', '-', 'luksFormat', '/dev/foo' ] encryption.luks_format('abcd', '/dev/foo') assert m_call.call_args[0][0] == expected
def prepare_dmcrypt(key, device, device_type, tags): """ Helper for devices that are encrypted. The operations needed for block, db, wal, or data/journal devices are all the same """ if not device: return '' tag_name = 'ceph.%s_uuid' % device_type uuid = tags[tag_name] # format data device encryption_utils.luks_format(key, device) encryption_utils.luks_open(key, device, uuid) return '/dev/mapper/%s' % uuid
def prepare_dmcrypt(key, device, device_type, fsid): """ Helper for devices that are encrypted. The operations needed for block, db, wal, or data/journal devices are all the same """ if not device: return '' kname = disk.lsblk(device)['KNAME'] mapping = 'ceph-{}-{}-{}-dmcrypt'.format(fsid, kname, device_type) # format data device encryption_utils.luks_format(key, device) encryption_utils.luks_open(key, device, mapping) return '/dev/mapper/{}'.format(mapping)
def prepare_dmcrypt(key, device, device_type, tags): """ Helper for devices that are encrypted. The operations needed for block, db, wal, or data/journal devices are all the same """ if not device: return '' tag_name = 'ceph.%s_uuid' % device_type uuid = tags[tag_name] # format data device encryption_utils.luks_format( key, device ) encryption_utils.luks_open( key, device, uuid ) return '/dev/mapper/%s' % uuid