diff options
| author | Eric Biggers <ebiggers@google.com> | 2023-11-02 22:05:04 -0700 |
|---|---|---|
| committer | Eric Biggers <ebiggers@google.com> | 2023-11-02 22:05:07 -0700 |
| commit | 6c5fc571ba7b851e7b36b054fd428bf6ad779dcc (patch) | |
| tree | f03075a28b7981ea141ce5db5cfe14b54e77bfe8 | |
| parent | 43869584b3c9f9acade09d2d35b20e69623d98f8 (diff) | |
README.md, errors.go: CephFS now supports fscrypt
| -rw-r--r-- | README.md | 3 | ||||
| -rw-r--r-- | cmd/fscrypt/errors.go | 4 |
2 files changed, 7 insertions, 0 deletions
@@ -274,6 +274,9 @@ filesystem encryption API. Currently, the filesystems that support this are: contain `CONFIG_FS_ENCRYPTION=y` (for kernels v5.1+) or `CONFIG_UBIFS_FS_ENCRYPTION=y` (for older kernels). +* CephFS, with upstream kernel v6.6 or later. The kernel configuration must + contain `CONFIG_FS_ENCRYPTION=y`. + * [Lustre](https://www.lustre.org/), with Lustre v2.14.0 or later. For details, see the Lustre documentation. Please note that Lustre is not part of the upstream Linux kernel, and its encryption implementation has not been reviewed diff --git a/cmd/fscrypt/errors.go b/cmd/fscrypt/errors.go index 1e9c39a..1ccf544 100644 --- a/cmd/fscrypt/errors.go +++ b/cmd/fscrypt/errors.go @@ -230,6 +230,10 @@ func getErrorSuggestions(err error) string { if !util.IsKernelVersionAtLeast(4, 10) { return "ubifs encryption requires kernel v4.10 or later." } + case "ceph": + if !util.IsKernelVersionAtLeast(6, 6) { + return "CephFS encryption requires kernel v6.6 or later." + } } return "" case *filesystem.ErrNoCreatePermission: |