Request dm-crypt for openstack-hypervisor

store-requests privileged-interfaces
1
  • name: openstack-hypervisor
  • description: The openstack-hypervisor is the compute daemon of the Sunbeam project, it hosts all actions related to hosting VMs and more.
  • snapcraft: snap-openstack-hypervisor/snap/snapcraft.yaml at main · canonical/snap-openstack-hypervisor · GitHub
  • upstream: GitHub - canonical/snap-openstack-hypervisor · GitHub
  • upstream-relation: For this specific feature, the actual modificatins are gonna be carried by the hypervisor snap itself
  • interfaces:
    • dm-crypt:
      • request-type: auto-connection
      • reasoning: The hypervisor is gaining a new responsibility of managing an encrypted VG on which to spawn the instances. The hypervisor is going to store the encryption key into a remote, trusted vault, use these keys to encrypt the Volume Group (LuksV2). This will allows ephemeral instance storage to be encrypted at rest.

This interface is critical to allow Canonical OpenStack to offer secure storage of instance data.