def test_luks_format_command_with_default_size(self, m_call,
conf_ceph_stub):
conf_ceph_stub('[global]\nfsid=abcd')
expected = [
'cryptsetup', '--batch-mode', '--key-size', '512', '--key-file',
'-', 'luksFormat', '/dev/foo'
]
encryption.luks_format('abcd', '/dev/foo')
assert m_call.call_args[0][0] == expected
def test_luks_format_command_with_custom_size(self, m_call,
conf_ceph_stub):
conf_ceph_stub('[global]\nfsid=abcd\n[osd]\nosd_dmcrypt_key_size=256')
expected = [
'cryptsetup', '--batch-mode', '--key-size', '256', '--key-file',
'-', 'luksFormat', '/dev/foo'
]
encryption.luks_format('abcd', '/dev/foo')
assert m_call.call_args[0][0] == expected
def prepare_dmcrypt(key, device, device_type, tags):
"""
Helper for devices that are encrypted. The operations needed for
block, db, wal, or data/journal devices are all the same
"""
if not device:
return ''
tag_name = 'ceph.%s_uuid' % device_type
uuid = tags[tag_name]
# format data device
encryption_utils.luks_format(key, device)
encryption_utils.luks_open(key, device, uuid)
return '/dev/mapper/%s' % uuid
def prepare_dmcrypt(key, device, device_type, fsid):
"""
Helper for devices that are encrypted. The operations needed for
block, db, wal, or data/journal devices are all the same
"""
if not device:
return ''
kname = disk.lsblk(device)['KNAME']
mapping = 'ceph-{}-{}-{}-dmcrypt'.format(fsid, kname, device_type)
# format data device
encryption_utils.luks_format(key, device)
encryption_utils.luks_open(key, device, mapping)
return '/dev/mapper/{}'.format(mapping)
def prepare_dmcrypt(key, device, device_type, tags):
"""
Helper for devices that are encrypted. The operations needed for
block, db, wal, or data/journal devices are all the same
"""
if not device:
return ''
tag_name = 'ceph.%s_uuid' % device_type
uuid = tags[tag_name]
# format data device
encryption_utils.luks_format(
key,
device
)
encryption_utils.luks_open(
key,
device,
uuid
)
return '/dev/mapper/%s' % uuid
