3 Commits

Author	SHA1	Message	Date
Andrey Smirnov	b453385bd9	feat: support volume configuration, provisioning, etc ... This implements the first round of changes, replacing the volume backend with the new implementation, while keeping most of the external interfaces intact. See #8367 Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>	2024-08-30 18:32:34 +04:00
Artem Chernyshev	ce63abb219	feat: add KMS assisted encryption key handler ... Talos now supports new type of encryption keys which rely on Sealing/Unsealing randomly generated bytes with a KMS server: ``` systemDiskEncryption: ephemeral: keys: - kms: endpoint: https://1.2.3.4:443 slot: 0 ``` gRPC API definitions and a simple reference implementation of the KMS server can be found in this [repository](https://github.com/siderolabs/kms-client/blob/main/cmd/kms-server/main.go). Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>	2023-07-07 19:02:39 +03:00
Artem Chernyshev	58ff2c9808	feat: implement ephemeral partition encryption ... This PR introduces the first part of disk encryption support. New config section `systemDiskEncryption` was added into MachineConfig. For now it contains only Ephemeral partition encryption. Encryption itself supports two kinds of keys for now: - node id deterministic key. - static key which is hardcoded in the config and mainly used for test purposes. Talosctl cluster create can now be told to encrypt ephemeral partition by using `--encrypt-ephemeral` flag. Additionally: - updated pkgs library version. - changed Dockefile to copy cryptsetup deps from pkgs. Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>	2021-02-17 13:39:04 -08:00