a59e723556
This commit forces the use of LUKS1 in cryptsetup.
Centos uses LUKS2 by default in cryptsetup, ubuntu uses LUKS1.
Formating a LUKS2 block device is way longer than formating a LUKS1
device (15 sec vs 8 sec in my env) and LUKS2 doesn't provide any
significant features for octavia (it only improves recovery and
metadata).
The commit aslo limits the creation of more than 1 block ram device
(amphora doesn't need 16 ram devices), which reduces startup time.
Change-Id: I5cdc0a9ccc01548f195eed80f2ee2848a1a93e17
(cherry picked from commit
|
||
---|---|---|
.. | ||
init-scripts | ||
post-install.d | ||
static/usr/local/bin | ||
README.rst | ||
element-deps | ||
package-installs.yaml | ||
svc-map |
README.rst
Element to setup an encrypted ramfs to store the TLS certificates and keys.
Enabling this element will mean that the amphora can no longer recover from a reboot.