Skip to content

storage: document RBD/Ceph (librbd LUKS2) volume encryption#665

Open
calvix wants to merge 1 commit into
apache:mainfrom
calvix:feature_rbd_encryption
Open

storage: document RBD/Ceph (librbd LUKS2) volume encryption#665
calvix wants to merge 1 commit into
apache:mainfrom
calvix:feature_rbd_encryption

Conversation

@calvix

@calvix calvix commented Jul 7, 2026

Copy link
Copy Markdown

towards apache/cloudstack#13556

  • Add a new section for documentation to include the KVM RBD encryption introduced in the PR above
  • rewrite parts of the docs to include information that KMS is an optional feature, not the only option.

📚 Documentation preview 📚: https://cloudstack-documentation--665.org.readthedocs.build/en/665/

Rework the Volume Encryption admin-guide section to describe the offering-based
enablement (an encrypted Disk/Compute Offering) as the primary mechanism, with
KMS as an optional passphrase-wrapping layer rather than the only path. Add the
supported primary-storage backends and the Ceph/RBD librbd LUKS2 specifics: thin
provisioning, copy-on-write encrypted root clones, the libvirt >= 10.1.0 hot-plug
requirement, and the KVM host requirements.
@calvix calvix force-pushed the feature_rbd_encryption branch from 82cb1e6 to 8353b89 Compare July 7, 2026 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant