starlingx/docs
Code Issues Proposed changes

Added Partial Disk (Transparent) Encryption Support via Software Encryption (LUKS) (r9, dsr8MR3)

Browse Source 
Added rest file for partner only updates
Added abbrev for LUKS
Added Note in the backup chapter

Change-Id: I2324655947a03b8cbe93bb4bbd130b05e9dd40a6
Signed-off-by: Juanita Balaraj <juanita.balaraj@windriver.com>
This commit is contained in:
Juanita Balaraj 2024-04-15 19:46:23 +00:00
parent 960eb282f0
commit 42e5038b57
5 changed files with 39 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/source/_includes/partial-disk-encryption-support-37cf9e2651db.rest Normal file
View File

@ -0,0 +1,6 @@
.. begin-partial-disk-encrypt
.. end-partial-disk-encrypt

4
doc/source/backup/kubernetes/backing-up-starlingx-system-data.rst
View File

@ -18,6 +18,10 @@ using DCManager CLI
<backup-a-subcloud-group-of-subclouds-using-dcmanager-cli-f12020a8fc42>` for <backup-a-subcloud-group-of-subclouds-using-dcmanager-cli-f12020a8fc42>` for
how to remotely backup a subcloud from the System Controller. how to remotely backup a subcloud from the System Controller.
.. note::
Backup archives should be stored in a secured (offsite) location.
.. contents:: |minitoc| .. contents:: |minitoc|
:local: :local:
:depth: 1 :depth: 1

9
doc/source/security/kubernetes/index-security-kub-81153c1254c3.rst
View File

@ -162,6 +162,15 @@ Encrypt Kubernetes Secret Data at Rest
encrypt-kubernetes-secret-data-at-rest encrypt-kubernetes-secret-data-at-rest
****************************************************************************
Partial Disk (Transparent) Encryption Support via Software Encryption (LUKS)
****************************************************************************
.. toctree::
:maxdepth: 1
partial-disk-transparent-encryption-support-via-software-enc-27a570f3142c
********************* *********************
Linux Auditing System Linux Auditing System
********************* *********************

18
doc/source/security/kubernetes/partial-disk-transparent-encryption-support-via-software-enc-27a570f3142c.rst Normal file
View File

@ -0,0 +1,18 @@
.. _partial-disk-transparent-encryption-support-via-software-enc-27a570f3142c:
============================================================================
Partial Disk (Transparent) Encryption Support via Software Encryption (LUKS)
============================================================================
.. rubric:: |context|
A new encrypted filesystem using Linux Unified Key Setup (LUKS) is created
automatically on all hosts to store security-sensitive files. This is mounted
at '/var/luks/stx/luks_fs' and the files kept in '/var/luks/stx/luks_fs/controller'
directory are replicated between the controllers.
.. only:: partner
.. include:: /_includes/partial-disk-encryption-support-37cf9e2651db.rest
:start-after: begin-partial-disk-encrypt
:end-before: end-partial-disk-encrypt

1
doc/source/shared/abbrevs.txt
View File

@ -89,6 +89,7 @@
.. |LDPC| replace:: :abbr:`LDPC (Low-Density Parity Check)` .. |LDPC| replace:: :abbr:`LDPC (Low-Density Parity Check)`
.. |LLDP| replace:: :abbr:`LLDP (Link Layer Discovery Protocol)` .. |LLDP| replace:: :abbr:`LLDP (Link Layer Discovery Protocol)`
.. |LSM| replace:: :abbr:`LSM (Linux Security Modules)` .. |LSM| replace:: :abbr:`LSM (Linux Security Modules)`
.. |LUKS| replace:: :abbr:`LUKS (Linux Unified Key Setup)`
.. |LVG| replace:: :abbr:`LVG (Local Volume Groups)` .. |LVG| replace:: :abbr:`LVG (Local Volume Groups)`
.. |MAC| replace:: :abbr:`MAC (Media Access Control)` .. |MAC| replace:: :abbr:`MAC (Media Access Control)`
.. |MEC| replace:: :abbr:`MEC (Multi-access Edge Computing)` .. |MEC| replace:: :abbr:`MEC (Multi-access Edge Computing)`