Are there any plans to work drive encryption into RockStor? I know it’s not supported natively by BTRFS, but creating a filesystem on encrypted partitions seems to be pretty safe nowadays (EX: http://nyeggen.com/blog/2014/04/05/full-disk-encryption-with-btrfs-and-multiple-drives-in-ubuntu/).
This is something we discussed among the team, but fell short of a plan mainly because nobody has asked for it. until now I tend to agree that this is a very useful feature.
I’d definitely like to test it out. Thanks for the link.
Have you tried to encrypt disks of a pool manually in Rockstor?
Just so we don’t forget this request, I’ve created an issue:
Feel free to participate on github also. Thanks!
Thanks, Suman. Sorry for the delayed reply. For some reason, I don’t seem to be able to post to these forums from either my phone or my tablet. When I get to the posting window, keystrokes from the virtual keyboard don’t show up in the edit window.
Sorry for the delay. Below is a quick list of what I had to do under OpenSUSE 13.2 to create and mount a 2 drive RAID 1 BTRFS pool. All operations performed as root:
I’m sure all of this is non-optimal, but it does appear to have resulted in a btrfs pool on two LUKS volumes. The workaround at the top prevents the system from dropping into the emergency console at boot. Not sure it applies to other distros.
Thanks for sharing useful information.
This post still comes up at the top of the google search for Rockstor encryption support. I just wanted to bump it in the hope that it renews interest and support.
Any traffic on this? Even if EXT was required for the share, it’d be worth having this feature. This is a huge feature required for any business user and any advanced home user.
I’ve been maintaining my own Samba on LUKS ext4 and Rockstor makes it almost illogical for me to maintain my own NAS setup. Frankly, I LOVE Rockstor. Encryption (even if it required EXT4 for that disk) would knock it over the top for me. Thanks!!
@gokev Welcome to the Rockstor community. There have been a number of fairly recent improvements ‘under the hood’ as it where in Rockstor that are intended to help pave the way for this feature so yes some ‘traffic’ and it is recognised as a key feature and as such is fairly high on the list as I understand it. But there are one or two more issues that have to be addressed first to ensure that we don’t break more than we add / fix when we finally get around to sorting this one. Linking to the open issue on LUKS support where all development directly related to this will be logged.
I have also linked back to this thread from within the issue, which was opened by @suman as a result of this thread.
The 2 most recent moves towards helping with the support of full disk encryption by way of laying better foundations is the move to by-id names internally and the addition and then enhancement of a Disk.role field (over a number of pull requests); an internal flag mechanism to aid in more robustly supporting more advanced disk roles.
So we do have development in this direction.
There are also plans within btrfs itself to add encryption so as and when they materialise I expect they will be included as appropriate options within Rockstor and may well be much easier to add as it goes but don’t as yet exist.
Hope that answers your question and glad you like what we are all helping to make so far.
I just got Rockstor up and running. This is personally one of the highest on my list of wants from Rockstor. I hope some work goes into getting encrypted shares.
Thanks Rockstor team!