Skip to content

Add the possibility to encrypt the master OS disk #834

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
enrico-usai opened this issue Jan 24, 2019 · 4 comments
Closed

Add the possibility to encrypt the master OS disk #834

enrico-usai opened this issue Jan 24, 2019 · 4 comments
Milestone

Comments

@enrico-usai
Copy link
Contributor

The ebs section helped encrypt the 20 GB drive indeed. Any method to encrypt the master OS disk?

Originally posted by @ahmedelz in #823 (comment)

@ProlucidDavid
Copy link

Is it correct to say there hasn't been any progress on this functionality?

If I'm not mistaken, this forum post says I would need to create an AMI with an encrypted root drive and use that in the pcluster config file. Is this understanding correct? This post is a little old, is it still applicable?

@lukeseawalker
Copy link
Contributor

Hi @ProlucidDavid,
the reported instructions are still applicable, and I'm reporting them here:

  1. Create a custom AMI choosing one of the first two methods described in the official doc here:
  2. Copy the AMI to a new one using encryption, as described here
  3. Use the new encrypted AMI ID as custom_ami parameter value in ParallelCluster configuration file
  4. Create the cluster

The feature enhancement to enable encryption at launch instance time is tracked by this ticket.

@enrico-usai
Copy link
Contributor Author

This ticket has been addressed by the patch: #2652
It will be part of the 3.0.0 release.

@enrico-usai enrico-usai changed the title Add the possibility to encrypt the master OS disk 3.0: Add the possibility to encrypt the master OS disk Apr 30, 2021
@enrico-usai enrico-usai changed the title 3.0: Add the possibility to encrypt the master OS disk Add the possibility to encrypt the master OS disk Apr 30, 2021
@enrico-usai enrico-usai modified the milestone: 3.0.0 Apr 30, 2021
@lukeseawalker
Copy link
Contributor

this is available in PCluster 3.0.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants