Image encryption

As a storage administrator, you can set a secret key that is used to encrypt a specific RBD image. Image level encryption is handled internally by RBD clients.

NOTE: The krbd module does not support image level encryption.

NOTE: You can use external tools such as dm-crypt or QEMU to encrypt an RBD image.

Prerequisites

  • A running IBM Storage Ceph 5 cluster.

  • root level permissions.