
OpenStack Cloud Computing Cookbook
By :

Cinder can manage the encryption of volumes, and it happens transparent to the guest. Encryption is enabled on a volume type level.
Encryption can be enabled either when creating a new volume type or added to an existing volume type that has no volumes in use. To enable volume encryption, you will need the following:
An openrc
file with appropriate credentials for the environment
The openstack
command-line client
The name of the volume type
Name of the encryption provider
Encryption control location
Encryption key size
Encryption cipher
For our example, these will be as follows:
Name: Cookbook Encrypted Volumes
Encryption provider: nova.volume.encryptors.luks.LuksEncryptor
Encryption control location: front-end
Encryption key size: 256
Encryption cipher: aes-xts-plain64
The encryption-specific values you choose will be based on what is available in your particular environment. A detailed discussion of these values is beyond the scope of this book.
Change the font size
Change margin width
Change background colour