openstack/security-doc
Code Issues Proposed changes

Volume wiping update

Browse Source 
The intro of the block storage volume wiping section needs a brief
description of how the OpenStack volume encryption feature
can address this.  A pointer to the config ref guide is also
needed.

Change-Id: I615f7adff82ded865af0e9fabd570194213ea829
Closes-Bug: #1632108
This commit is contained in:
Bruce Benjamin
2016-10-17 15:14:43 -04:00
committed by bruce-benjamin
parent 87567359f2
commit 9d124d388f
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
security-guide/source/block-storage/volume_wiping.rst
View File

@@ -2,9 +2,15 @@
Volume Wiping
=============
There are several ways to wipe a block storage device. The recommended way is
There are several ways to wipe a block storage device. The traditional way is
to set the ``lvm_type`` to ``thin``, and then use the ``volume_clear``
parameter.
parameter. Alternatively, if the volume encryption feature is used, then
volume wiping is not necessary if the volume encryption key is deleted.
See the OpenStack Configuration Reference doc in the `Volume Encryption
<http://docs.openstack.org/newton/config-reference/block-storage/volume-encryption.html>`__
section for set up details and also the `Castellan usage
<http://docs.openstack.org/developer/castellan/usage.html>`__ document
for key deletion.
.. note::
@@ -20,6 +26,7 @@ patterns.
For more information about the ``lvm_type`` parameter, see
the `LVM Block Storage section
<http://docs.openstack.org/newton/config-reference/block-storage/drivers/lvm-volume-driver.html>`__
of OpenStack Configuration Reference and
the `Oversubscription in thin provisioning
<http://docs.openstack.org/admin-guide/blockstorage_over_subscription.html>`__