Bug 1868100

Summary:	[RFE] Add Clevis Support
Product:	Red Hat Enterprise Linux 8	Reporter:	Dennis Keefe <dkeefe>
Component:	stratisd	Assignee:	mulhern <amulhern>
Status:	CLOSED ERRATA	QA Contact:	guazhang <guazhang>
Severity:	unspecified	Docs Contact:	bilhar
Priority:	unspecified
Version:	8.4	CC:	amulhern, bilhar, dkeefe, guazhang, rhandlin
Target Milestone:	rc	Keywords:	FutureFeature, Triaged
Target Release:	8.4
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:	.Stratis now supports binding encrypted pools to a supplementary Clevis encryption policy With this enhancement, you can now bind encrypted Stratis pools to Network Bound Disk Encryption (NBDE) using a Tang server, or to the Trusted Platform Module (TPM) 2.0. Binding an encrypted Stratis pool to NBDE or TPM 2.0 facilitates automatic unlocking of pools. As a result, you can access your Stratis pools without having to provide the kernel keyring description after each system reboot. Note that binding a Stratis pool to a supplementary Clevis encryption policy does not remove the primary kernel keyring encryption.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 15:58:21 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dennis Keefe 2020-08-11 16:59:41 UTC

Support Clevis as an additional method for decryption.  This support will allow
NBDE to automate the decryption of Stratis devices, which form pools of storage. 
GitHub issue: https://github.com/stratis-storage/project/issues/192

Comment 3 guazhang@redhat.com 2020-10-09 02:34:33 UTC

Hello

How to test the new feature and Could you share some test steps or guide here?

I see you have set ITM to 10 weeks which include our test time ? 

I need 1-2 weeks to test the new feature.

Comment 4 Dennis Keefe 2020-10-22 13:51:10 UTC

(In reply to guazhang from comment #3)
> Hello
> 
> How to test the new feature and Could you share some test steps or guide
> here?
> 
> I see you have set ITM to 10 weeks which include our test time ? 
> 
> I need 1-2 weeks to test the new feature.

We will have test information for you after the feature has been completed.

Comment 6 guazhang@redhat.com 2021-01-06 03:34:21 UTC

Hi,

Test pass with stratis-2.3 and add automation to cover the bug.

Comment 14 errata-xmlrpc 2021-05-18 15:58:21 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (stratis-cli bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1901