Madhu Pillai

Hi @bgilbert here is the proposal to add boot_device sugar for s390x. Presently the testing has been done vda/zfcp/eckd-dasd. We have not done any luks disk encryption testing on zfba-dasd....

I was trying to depict that the butane generates the device as /dev/sda. This is right , `/dev/sda `for zfcp and `/dev/dasda` for eckd in `boot_device.luks.device` as below. For virtual...

An example when user try to create boot_device sugar, so the butane template looks like this. ``` variant: openshift version: x.xx.x metadata: name: labels: machineconfiguration.openshift.io/role: boot_device: layout: luks: device: #/dev/sda...

Is it 100% certain that the user will always want `/dev/sda` and `/dev/dasda` respectively? -> False (I cannot assert the statement True, because it depends on the user requirements )....

Hi @bgilbert From the above discussion, here are the major rules I captured for s390x. Please let me know if any errors or additional requirements. 1. Add `layout` specific to...

Will implement on FCOS also , in the experimental spec. Here is the expected output for each configs. ` s390x-eckd` `s390x-zfcp` `s390x-virt` ### s390x-eckd ``` variant: openshift version: 4.13.0 metadata:...

Hi, Could someone please give a direction that how to progress on the Luks encryption with IBM HSM using clevis?

Hi @sarroutbi , I am creating a PIN For IBM CEX card where the secure_key use for Luks encryption. I am facing an issue here like my secure_key is gibberish...

We have a CEX card attached to the VM and we generate the secure key by mentioning the cex card domain 00.0047. /etc/zkey/repository is the default directory when we use...

Hi @sarroutbi , Thanks. that command indeed works, but you cannot save the decrypted key in a variable nor convert that to `jose fmt`. As you said this is not...