Add the possibility to encrypt the master OS disk

[enrico-usai]

The ebs section helped encrypt the 20 GB drive indeed. Any method to encrypt the master OS disk?

Originally posted by @ahmedelz in #823 (comment)

[ProlucidDavid]

Is it correct to say there hasn't been any progress on this functionality?

If I'm not mistaken, this forum post says I would need to create an AMI with an encrypted root drive and use that in the pcluster config file. Is this understanding correct? This post is a little old, is it still applicable?

[lukeseawalker]

Hi @ProlucidDavid,
the reported instructions are still applicable, and I'm reporting them here:

1. Create a custom AMI choosing one of the first two methods described in the official doc here:
   • Modify an AWS ParallelCluster AMI
   • Build a Custom AWS ParallelCluster AMI
2. Copy the AMI to a new one using encryption, as described here
3. Use the new encrypted AMI ID as custom_ami parameter value in ParallelCluster configuration file
4. Create the cluster

The feature enhancement to enable encryption at launch instance time is tracked by this ticket.

[enrico-usai]

This ticket has been addressed by the patch: #2652
It will be part of the 3.0.0 release.

[lukeseawalker]

this is available in PCluster 3.0.0