From 6c5fc571ba7b851e7b36b054fd428bf6ad779dcc Mon Sep 17 00:00:00 2001 From: Eric Biggers Date: Thu, 2 Nov 2023 22:05:04 -0700 Subject: [PATCH] README.md, errors.go: CephFS now supports fscrypt --- README.md | 3 +++ cmd/fscrypt/errors.go | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/README.md b/README.md index c769dd8..044b0bf 100644 --- a/README.md +++ b/README.md @@ -274,6 +274,9 @@ filesystem encryption API. Currently, the filesystems that support this are: contain `CONFIG_FS_ENCRYPTION=y` (for kernels v5.1+) or `CONFIG_UBIFS_FS_ENCRYPTION=y` (for older kernels). +* CephFS, with upstream kernel v6.6 or later. The kernel configuration must + contain `CONFIG_FS_ENCRYPTION=y`. + * [Lustre](https://www.lustre.org/), with Lustre v2.14.0 or later. For details, see the Lustre documentation. Please note that Lustre is not part of the upstream Linux kernel, and its encryption implementation has not been reviewed diff --git a/cmd/fscrypt/errors.go b/cmd/fscrypt/errors.go index 1e9c39a..1ccf544 100644 --- a/cmd/fscrypt/errors.go +++ b/cmd/fscrypt/errors.go @@ -230,6 +230,10 @@ func getErrorSuggestions(err error) string { if !util.IsKernelVersionAtLeast(4, 10) { return "ubifs encryption requires kernel v4.10 or later." } + case "ceph": + if !util.IsKernelVersionAtLeast(6, 6) { + return "CephFS encryption requires kernel v6.6 or later." + } } return "" case *filesystem.ErrNoCreatePermission: -- 2.39.5