Hi all,
I'm would like to implement a glusterfs cluster, which supports encryption in transit and at rest, and it looks like HekaFE (CloudFS?) is the answer to my quest.
The problem I'm having at the moment, is that there is no clear tutorial/guide which describes how to install Heka and configure the encryption.
Can you point me out in the right direction? Do I need to install and configure gluster first (which version?) and then install the HekaFS rpm?
Is there any plan to port the heka features into the main gluster distro?
Thanks in advance
Nicola Cloudreach Limited is a limited company registered in England with registered number 06975407
The above terms reflect a potential business arrangement, are provided solely as a basis for further discussion, and are not intended to be and do not constitute a legally binding obligation. No legally binding obligations will be created, implied, or inferred until an agreement in final form is executed in writing by all parties involved.
This email may be confidential or privileged. If you received this communication by mistake, please don't forward it to anyone else, please erase all copies and attachments, and please let us know that it has gone to the wrong person.
On 08/08/2013 12:47 PM, Nicola Salvo wrote:
Is there any plan to port the heka features into the main gluster distro?
Yes, that's already happening and encryption on the wire is in GlusterFS-3.4.0. The rest of the HekaFS features are coming in future releases of GlusterFS.
HekaFS only works with GlusterFS-3.2.x, which is rather old at this point in time. HekaFS is in Fedora 17 and EPEL. Just install HekaFS, it will include the necessary dependencies, including GlusterFS.
I wrote this https://fedoraproject.org/wiki/SimpleHekaFS howto which describes the steps to run HekaFS. It's outdated but should be good to get you going.
--
Kaleb
Hi Kaleb,
Many thanks for your reply. I've installed HakaFS from the EPEL repo, and I'm now following your tutorial. Do I need to compile my own rpm in order to implement encryption at rest? Looking around I've see this can be done doing hfs_add_tenant -C, but the version I've installed doesn't have the option. Do I need to compile the aes branch?
I've seen that GlusterFS has implemented some of HekaFS features, finger crossed for encryption at rest to make it to 3.5.
Thanks again
Nicola
Nicola Salvo Systems Developer, Cloudreach Limited [t] +44 20 7183 3893 (ext. 404) [m] +44 7514 337 083
Best small company to work for ♦ Cool vendor
On 8 August 2013 19:26, Kaleb KEITHLEY kkeithle@redhat.com wrote:
On 08/08/2013 12:47 PM, Nicola Salvo wrote:
Is there any plan to port the heka features into the main gluster distro?
Yes, that's already happening and encryption on the wire is in GlusterFS-3.4.0. The rest of the HekaFS features are coming in future releases of GlusterFS.
HekaFS only works with GlusterFS-3.2.x, which is rather old at this point in time. HekaFS is in Fedora 17 and EPEL. Just install HekaFS, it will include the necessary dependencies, including GlusterFS.
I wrote this https://fedoraproject.org/wiki/SimpleHekaFS howto which describes the steps to run HekaFS. It's outdated but should be good to get you going.
--
Kaleb
Cloudreach Limited is a limited company registered in England with registered number 06975407
The above terms reflect a potential business arrangement, are provided solely as a basis for further discussion, and are not intended to be and do not constitute a legally binding obligation. No legally binding obligations will be created, implied, or inferred until an agreement in final form is executed in writing by all parties involved.
This email may be confidential or privileged. If you received this communication by mistake, please don't forward it to anyone else, please erase all copies and attachments, and please let us know that it has gone to the wrong person.
On 08/09/2013 06:51 AM, Nicola Salvo wrote:
Hi Kaleb,
Many thanks for your reply. I've installed HakaFS from the EPEL repo, and I'm now following your tutorial. Do I need to compile my own rpm in order to implement encryption at rest? Looking around I've see this can be done doing hfs_add_tenant -C, but the version I've installed doesn't have the option. Do I need to compile the aes branch?
Encryption-at-rest never made it into HekaFS. We're working on it for GlusterFS.
cloudfs-general@lists.stg.fedorahosted.org
-
Kaleb S. KEITHLEY -
Nicola Salvo