README.md, errors.go: CephFS now supports fscrypt

diff --git a/README.md b/README.md
index c769dd80ce883de844f87c6ef76d2157c5f62a8a..044b0bf9c8776a79f5307690e81ec78efd65577e 100644 (file)
--- a/README.md
+++ b/README.md
@@ -274,6 +274,9 @@ filesystem encryption API.  Currently, the filesystems that support this are:
   contain `CONFIG_FS_ENCRYPTION=y` (for kernels v5.1+) or
   `CONFIG_UBIFS_FS_ENCRYPTION=y` (for older kernels).
 
+* CephFS, with upstream kernel v6.6 or later.  The kernel configuration must
+  contain `CONFIG_FS_ENCRYPTION=y`.
+
 * [Lustre](https://www.lustre.org/), with Lustre v2.14.0 or later.  For details,
   see the Lustre documentation.  Please note that Lustre is not part of the
   upstream Linux kernel, and its encryption implementation has not been reviewed

diff --git a/cmd/fscrypt/errors.go b/cmd/fscrypt/errors.go
index 1e9c39a8b1cd9adc9fef80233f1c0b21be0ed43f..1ccf544e12c2d327a1b68a9cb773a3596562ff19 100644 (file)
--- a/cmd/fscrypt/errors.go
+++ b/cmd/fscrypt/errors.go
@@ -230,6 +230,10 @@ func getErrorSuggestions(err error) string {
                        if !util.IsKernelVersionAtLeast(4, 10) {
                                return "ubifs encryption requires kernel v4.10 or later."
                        }
+               case "ceph":
+                       if !util.IsKernelVersionAtLeast(6, 6) {
+                               return "CephFS encryption requires kernel v6.6 or later."
+                       }
                }
                return ""
        case *filesystem.ErrNoCreatePermission: