README.md, errors.go: CephFS now supports fscrypt

google · Nov 3, 2023 · 6c5fc57 · 6c5fc57
1 parent 4386958
commit 6c5fc57
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -274,6 +274,9 @@ filesystem encryption API.  Currently, the filesystems that support this are:
   contain `CONFIG_FS_ENCRYPTION=y` (for kernels v5.1+) or
   `CONFIG_UBIFS_FS_ENCRYPTION=y` (for older kernels).
 
+* CephFS, with upstream kernel v6.6 or later.  The kernel configuration must
+  contain `CONFIG_FS_ENCRYPTION=y`.
+
 * [Lustre](https://www.lustre.org/), with Lustre v2.14.0 or later.  For details,
   see the Lustre documentation.  Please note that Lustre is not part of the
   upstream Linux kernel, and its encryption implementation has not been reviewed

diff --git a/cmd/fscrypt/errors.go b/cmd/fscrypt/errors.go
@@ -230,6 +230,10 @@ func getErrorSuggestions(err error) string {
 			if !util.IsKernelVersionAtLeast(4, 10) {
 				return "ubifs encryption requires kernel v4.10 or later."
 			}
+		case "ceph":
+			if !util.IsKernelVersionAtLeast(6, 6) {
+				return "CephFS encryption requires kernel v6.6 or later."
+			}
 		}
 		return ""
 	case *filesystem.ErrNoCreatePermission: