Files
security-doc/security-guide/source/block-storage/volume_wiping.rst
Sean McGinnis 04d5971b3b Remove LVM "shred" volume_clear option
The shred option was deprecated in Newton and has been removed. This
updates the volume wiping instructions to reflect that change and
corrects a few of the referenced URLs.

Change-Id: I251a07525bec5f099220d41fafb1fce3d738e3cb
2018-02-20 14:37:53 +00:00

1.5 KiB

Volume Wiping

There are several ways to wipe a block storage device. The traditional way is to set the lvm_type to thin, and then use the volume_clear parameter if using the LVM backend. Alternatively, if the volume encryption feature is used, then volume wiping is not necessary if the volume encryption key is deleted. See the OpenStack Configuration Reference doc in the Volume Encryption section for set up details and also the Castellan usage document for key deletion.

Note

In older OpenStack releases, lvm_type=default was used to signify a wipe. While this method still works, lvm_type=default is not recommended for setting secure delete.

The volume_clear parameter can be set to zero. The zero argument will write a single pass of zeroes to the device.

For more information about the lvm_type parameter, see sections LVM and Oversubscription in thin provisioning of the cinder project documentation.

For more information about the volume_clear parameter, see section Cinder Configuration Options of the cinder project documentation.