Re: [atomic-devel] LUKS support in Atomic Host

[Colin Walters <walters verbum org>]

Hi,

 

On Thu, Jan 21, 2016, at 07:31 AM, Charles Paul wrote:

Hello all,

 

Making a request to enable LUKS in Atomic Host's dracut as per this bug report https://bugzilla.redhat.com/show_bug.cgi?id=1270335 . 

 

Originally, not including cryptsetup is mostly attributed to it not being in the critical path (or a hard dependency).  But I think there are many valid reasons to fulldisk encrypt container compute nodes, such as ensuring any private data in /etc or Docker volumes doesn't leak out.

 

Given that:

 

https://git.fedorahosted.org/cgit/fedora-atomic.git/commit/?id=bec6e8dc6c0c114bde2ad07a84b2655707757562